$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer File: b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer (raw, json) Hash identifier: IS15za62AS+6BUSiAsAiHHMMlDqGbbwND8DYsqh6NBI= Subject key identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A2E854D997B1530940E7F3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Jun 2025 21:36:32 +0000 Certificate not after: Thu 16 Sep 2027 21:36:32 +0000 Subordinate resources: AS: 26909 AS: 30027 IP: 68.232.48.0/20 IP: 192.160.54.0/24 IP: 207.195.128.0/19 IP: 208.84.76.0/22 IP: 216.144.96.0/20 IP: 2607:9600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:85:4d:99:7b:15:30:94:0e:7f:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 13 21:36:32 2025 GMT Not After : Sep 16 21:36:32 2027 GMT Subject: CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:ee:fc:30:12:79:21:74:8f:1b:78:d3:73: 68:1d:0b:33:f4:62:43:b0:df:0f:cf:da:e4:18:32: fe:fe:b5:cf:88:ea:d2:e0:22:a2:34:67:a3:af:95: b6:24:9b:e6:4a:04:1c:4d:af:02:a7:27:bd:b5:b5: 9a:71:7e:6e:8c:60:d1:e3:b1:05:81:da:cc:a1:01: 55:01:29:e1:a7:cc:e5:e2:11:52:07:6c:8a:2c:a3: d5:6f:b2:cb:58:f5:21:04:db:e9:a6:ef:e5:29:59: ca:57:83:26:99:71:7c:3a:1d:dc:82:92:6d:75:51: fa:f5:44:90:c9:9d:0e:4f:3b:2f:28:30:bb:d3:9c: dd:8d:cf:85:ca:68:dd:b9:2e:7c:e7:e0:cd:89:fd: 14:a1:04:c8:a0:b2:10:90:66:85:d0:5b:38:47:06: 12:a8:5c:65:46:5c:26:d3:24:6c:4b:cd:52:4a:58: be:3a:3d:67:80:48:20:db:71:89:7d:79:13:17:0b: 91:a2:f3:de:73:27:7b:bb:50:bb:86:b6:01:f4:f4: 1b:4c:71:b2:ee:eb:a4:6a:8a:8c:a9:bf:8a:db:3c: 0a:eb:0f:8a:73:2e:7b:6c:46:78:e8:4e:26:ab:10: 06:0d:3e:de:0a:40:84:a4:b6:ac:4d:45:d3:81:04: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 68.232.48.0/20 192.160.54.0/24 207.195.128.0/19 208.84.76.0/22 216.144.96.0/20 IPv6: 2607:9600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26909 30027 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a5:5e:b9:6d:5c:5e:36:68:12:4a:3a:4f:6d:a4:b6:33:6c: 68:7c:d4:ac:89:ca:54:af:70:1c:aa:d5:bb:37:36:99:93:f9: 4e:10:1f:3c:02:72:d5:d9:fc:98:98:47:0a:cf:71:3d:36:64: 16:b0:c7:41:f9:f2:b3:4f:e0:48:d8:8b:67:7c:e9:6c:74:4d: 06:9f:2d:5c:c1:2b:f6:8c:0c:fc:e2:7c:31:cc:c0:48:3e:05: 3b:67:e8:53:4f:1a:6e:93:39:7e:c9:2b:86:0b:ca:d3:7f:60: b9:12:fe:43:61:27:5e:7a:c8:46:9f:eb:1b:1a:c6:21:a9:34: 2e:ec:2b:ba:aa:46:83:15:f7:8c:6a:de:5e:51:0e:f1:39:ae: 48:29:4b:a4:4d:a4:c7:50:23:57:a8:39:d7:27:27:7e:9f:8f: 80:c6:64:a8:ba:15:e9:23:ad:60:87:5a:8d:81:13:28:7f:09: fb:9a:aa:e6:6f:8d:05:e4:00:5f:e2:15:ad:20:bd:6d:fd:83: a7:4f:8e:a3:95:33:53:d1:11:9a:55:00:55:84:0c:1c:43:46: c7:b7:c1:10:60:5b:c7:c0:dc:80:e9:c4:96:bd:65:0c:78:67: 91:6d:27:c8:17:2a:40:ad:cf:ed:b5:36:32:28:24:ac:ec:ca: 7d:cd:ae:66 -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEouhU2ZexUwlA5/PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxMzIxMzYzMloXDTI3MDkxNjIxMzYzMlowLzEtMCsGA1UEAxMk Yjk0OGFmYmMtMDE2OC00M2VkLThlNGItYTBjYzVkMGUxNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtbu/DASeSF0jxt403NoHQsz9GJDsN8Pz9rk GDL+/rXPiOrS4CKiNGejr5W2JJvmSgQcTa8Cpye9tbWacX5ujGDR47EFgdrMoQFV ASnhp8zl4hFSB2yKLKPVb7LLWPUhBNvppu/lKVnKV4MmmXF8Oh3cgpJtdVH69USQ yZ0OTzsvKDC705zdjc+FymjduS585+DNif0UoQTIoLIQkGaF0Fs4RwYSqFxlRlwm 0yRsS81SSli+Oj1ngEgg23GJfXkTFwuRovPecyd7u1C7hrYB9PQbTHGy7uukaoqM qb+K2zwK6w+Kcy57bEZ46E4mqxAGDT7eCkCEpLasTUXTgQScZQIDAQABo4IERTCC BEEwHQYDVR0OBBYEFLOWU0Bwa6qyxOh80OUAqrLtef55MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i OTQ4YWZiYy0wMTY4LTQzZWQtOGU0Yi1hMGNjNWQwZTE1MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2I5NDhhZmJjLTAxNjgtNDNlZC04 ZTRiLWEwY2M1ZDBlMTUwNC9iOTQ4YWZiYy0wMTY4LTQzZWQtOGU0Yi1hMGNjNWQw ZTE1MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARE6DADBADAoDYDBAXPw4ADBALQVEwDBATYkGAw DQQCAAIwBwMFACYHlgAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICaR0CAnVLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACilXrltXF42aBJKOk9tpLYzbGh81KyJylSvcByq1bs3NpmT+U4QHzwC ctXZ/JiYRwrPcT02ZBawx0H58rNP4EjYi2d86Wx0TQafLVzBK/aMDPzifDHMwEg+ BTtn6FNPGm6TOX7JK4YLytN/YLkS/kNhJ156yEaf6xsaxiGpNC7sK7qqRoMV94xq 3l5RDvE5rkgpS6RNpMdQI1eoOdcnJ36fj4DGZKi6FekjrWCHWo2BEyh/CfuaquZv jQXkAF/iFa0gvW39g6dPjqOVM1PREZpVAFWEDBxDRse3wRBgW8fA3IDpxJa9ZQx4 Z5FtJ8gXKkCtz+21NjIoJKzsyn3NrmY= -----END CERTIFICATE-----Generated at Wed Jun 18 23:11:04 2025 by rpki-client