$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer File: bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer (raw, json) Hash identifier: 6AO4feVAl9S4r9YcNnisw8CLX+uZHgfBk518gCvrAFc= Subject key identifier: 4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A03F6C4E36670F9DE76F66B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 May 2025 15:45:24 +0000 Certificate not after: Wed 01 Sep 2027 15:45:24 +0000 Subordinate resources: AS: 18948 IP: 64.118.208.0/20 IP: 74.123.168.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:f6:c4:e3:66:70:f9:de:76:f6:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 29 15:45:24 2025 GMT Not After : Sep 1 15:45:24 2027 GMT Subject: CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:15:9a:96:9f:eb:43:d0:20:ba:46:48:2c: 9d:7a:43:43:a6:0d:c3:8f:53:4c:06:94:3d:fd:36: c5:e2:69:02:50:e2:26:00:c7:9a:69:a1:79:3e:41: 3c:f1:a6:74:f7:60:e7:ec:c3:2d:ff:3f:89:2a:05: 18:cb:00:b3:a3:4b:a3:eb:88:2a:dd:fc:75:4c:ea: 4d:b0:4a:41:20:1d:53:bc:78:53:53:75:b6:84:42: 72:d9:5f:a1:0f:66:1e:19:6a:a8:a6:e8:3d:62:5e: 4d:f6:fa:f3:1a:9b:9e:86:b0:6c:8b:84:a3:6b:41: ca:ce:2e:13:a4:5e:68:6f:cb:7d:02:7e:3c:e2:93: d7:de:16:2f:40:c0:8f:a4:ad:e6:cc:cd:8b:33:4d: 2c:27:bd:ca:7c:f4:a5:e3:e0:64:c0:f6:0f:29:0f: a3:0a:1f:1f:92:d0:ce:be:42:dc:94:fd:df:36:7f: b2:c1:11:7f:19:16:d2:a4:5b:53:3c:f6:65:f0:ae: 61:c3:23:c3:40:55:bf:c1:1e:77:ee:fc:e6:26:c2: 73:f2:8c:b7:d8:ed:26:b9:e2:a9:20:75:1f:26:e9: 7d:0c:74:f2:eb:77:76:a8:67:35:e5:29:1b:1c:07: 18:e7:3d:fa:55:b0:cd:e0:89:64:eb:00:d3:bb:27: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.118.208.0/20 74.123.168.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18948 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b8:9c:04:ed:f3:37:b0:85:0d:dd:c2:ed:e4:11:93:a2:76: 96:4f:29:b8:78:34:7e:30:9d:df:09:78:c4:a4:c6:b3:c4:88: 67:f5:2e:7c:9b:95:29:db:b0:2e:6d:72:71:bd:2c:b4:fe:fc: b1:98:1b:01:f1:0a:53:94:70:3d:00:92:4d:3d:91:90:13:0b: 45:2d:24:18:a4:3e:c7:56:76:84:21:cf:e4:d2:c5:a3:be:9e: 94:5f:00:9b:41:12:38:d6:1a:fd:8c:1f:8f:d8:81:8d:20:93: 05:e2:ea:7c:f4:d8:26:51:f3:81:e7:90:d0:0c:dc:8e:e6:89: 6d:14:15:f6:32:94:12:b4:15:af:b0:14:fb:63:0f:bc:ab:2a: e0:c5:23:8d:74:91:38:bd:57:e7:09:3b:e3:0f:37:a9:10:08: 29:43:86:9b:20:07:97:77:61:04:9e:61:89:80:d8:19:bf:30: 1f:07:8a:36:80:b8:e2:0a:ae:26:a5:70:87:af:bb:cd:f2:e0: ec:76:ad:50:42:72:dc:60:a6:6e:45:50:cb:1d:3f:97:f3:f2: de:4c:68:f8:a2:22:ed:80:87:2b:83:5b:8e:13:ce:9c:b9:ef: 01:5c:99:8c:8b:b6:89:9d:b2:b9:e6:fe:06:f9:70:c2:97:36: dc:ad:1e:a6 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEoD9sTjZnD53nb2awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyOTE1NDUyNFoXDTI3MDkwMTE1NDUyNFowLzEtMCsGA1UEAxMk YmJiNTVhZTgtOTdhYi00M2RmLThjMWEtYzAyYmQxZmI2NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxkVmpaf60PQILpGSCydekNDpg3Dj1NMBpQ9 /TbF4mkCUOImAMeaaaF5PkE88aZ092Dn7MMt/z+JKgUYywCzo0uj64gq3fx1TOpN sEpBIB1TvHhTU3W2hEJy2V+hD2YeGWqopug9Yl5N9vrzGpuehrBsi4Sja0HKzi4T pF5ob8t9An484pPX3hYvQMCPpK3mzM2LM00sJ73KfPSl4+BkwPYPKQ+jCh8fktDO vkLclP3fNn+ywRF/GRbSpFtTPPZl8K5hwyPDQFW/wR537vzmJsJz8oy32O0mueKp IHUfJul9DHTy63d2qGc15SkbHAcY5z36VbDN4Ilk6wDTuycipQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFE3gOv1bNN/D1J9S6wOvCVqM3IuGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i YmI1NWFlOC05N2FiLTQzZGYtOGMxYS1jMDJiZDFmYjY0ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JiYjU1YWU4LTk3YWItNDNkZi04 YzFhLWMwMmJkMWZiNjRlYy9iYmI1NWFlOC05N2FiLTQzZGYtOGMxYS1jMDJiZDFm YjY0ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARAdtADBANKe6gwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICSgQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAhbicBO3zN7CFDd3C7eQRk6J2lk8puHg0fjCd3wl4 xKTGs8SIZ/UufJuVKduwLm1ycb0stP78sZgbAfEKU5RwPQCSTT2RkBMLRS0kGKQ+ x1Z2hCHP5NLFo76elF8Am0ESONYa/Ywfj9iBjSCTBeLqfPTYJlHzgeeQ0AzcjuaJ bRQV9jKUErQVr7AU+2MPvKsq4MUjjXSROL1X5wk74w83qRAIKUOGmyAHl3dhBJ5h iYDYGb8wHweKNoC44gquJqVwh6+7zfLg7HatUEJy3GCmbkVQyx0/l/Py3kxo+KIi 7YCHK4NbjhPOnLnvAVyZjIu2iZ2yueb+Bvlwwpc23K0epg== -----END CERTIFICATE-----Generated at Wed Jun 18 07:32:01 2025 by rpki-client