$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer File: c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer (raw, json) Hash identifier: 6k4fwqk8Yf5Mvll73InNzaSbslGWzQzLDYjifC+2Jbw= Subject key identifier: 74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A1A8561B7D3EFF40122588600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Jun 2025 17:40:32 +0000 Certificate not after: Thu 09 Sep 2027 17:40:32 +0000 Subordinate resources: AS: 16989 IP: 128.169.0.0/16 IP: 160.37.0.0/16 IP: 199.164.138.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1a:85:61:b7:d3:ef:f4:01:22:58:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 6 17:40:32 2025 GMT Not After : Sep 9 17:40:32 2027 GMT Subject: CN=c55a5d2a-aeae-4e6a-9701-cf97fa6eb571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0a:87:cc:57:7f:09:8a:fb:43:45:d7:9b:ea: f4:38:9d:59:20:f6:73:98:21:c4:4c:35:e9:8d:fa: 8c:91:72:98:d6:ac:50:88:a8:0d:a5:1f:88:2d:4c: cb:ec:ce:18:7b:5a:32:46:0f:be:2f:be:ae:2e:71: 33:7c:97:da:df:47:40:7d:7c:31:7f:80:c1:c1:60: 64:1c:aa:e0:dc:c2:2d:19:40:b5:2f:aa:a4:9b:67: b2:70:17:1e:57:b7:a7:5a:a6:99:31:dc:0c:f0:22: 0a:99:5c:a8:b8:64:e7:e5:c9:2e:8a:19:ec:c3:93: d6:28:d4:27:c4:6e:87:65:55:bb:36:76:79:66:8c: ea:a4:a3:cb:cf:83:a6:9c:92:1b:9e:8e:7c:49:67: 18:8d:1a:ff:45:e4:87:36:f4:6f:46:9c:0e:aa:1c: 61:10:3f:c5:ff:e5:7b:f1:1e:ca:9e:16:f4:52:68: 52:2c:95:98:ea:b9:69:80:d0:e3:92:f8:28:94:87: 1a:b4:f6:71:93:0f:37:b0:9f:a2:c5:e8:f2:ff:0b: b1:19:7e:ef:ec:6e:3a:2c:a8:8a:14:2f:40:16:6b: fd:ad:a0:a0:c7:47:a4:24:dc:53:33:f2:2c:b6:b5: 95:9d:b8:48:9f:2d:a7:d6:85:9f:e9:7e:d3:24:f0: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 128.169.0.0/16 160.37.0.0/16 199.164.138.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16989 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:eb:96:a7:6b:0d:7f:e2:1a:c0:a0:18:9a:15:e3:aa:8a:9b: d2:63:f1:59:3b:57:a6:4a:26:cc:f6:09:31:18:f6:c8:67:91: 6e:a6:74:5f:30:b6:55:46:a8:4f:11:63:66:2e:af:03:45:b6: f7:da:c7:6d:c5:ec:10:67:3e:aa:93:ba:b7:a2:87:b2:75:83: b3:29:18:d1:23:a4:d9:ba:ba:51:da:d3:7c:6b:67:af:f4:95: ff:96:f4:65:f7:13:b0:bc:bf:dd:77:87:5a:3e:d1:ae:12:67: 3b:31:e6:6c:ac:33:a1:41:d4:db:f5:8b:14:fc:0e:f3:a5:d4: 03:16:bc:b8:d9:42:6d:08:af:c7:48:94:2e:82:10:8d:14:f9: 98:1e:eb:a5:c3:c0:8b:8e:d6:f3:69:3b:9a:55:1f:10:93:8e: af:f5:de:64:e0:5c:a2:80:25:33:aa:be:94:0f:57:f9:ff:ac: 53:1a:f1:07:42:6f:ca:f4:0e:32:b6:dd:cf:d8:2b:87:cb:ff: a9:9a:52:3c:e9:3f:85:88:03:da:c7:e8:4c:a6:70:13:39:01: 93:d4:5d:8a:e6:f5:1d:93:77:cf:73:b6:8f:41:7c:ec:e0:a6: 83:f4:1c:a8:88:e9:be:e6:0c:a7:87:bd:12:c4:6e:21:11:cd: 56:cc:a1:9e -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEoahWG30+/0ASJYhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNjE3NDAzMloXDTI3MDkwOTE3NDAzMlowLzEtMCsGA1UEAxMk YzU1YTVkMmEtYWVhZS00ZTZhLTk3MDEtY2Y5N2ZhNmViNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAqHzFd/CYr7Q0XXm+r0OJ1ZIPZzmCHETDXp jfqMkXKY1qxQiKgNpR+ILUzL7M4Ye1oyRg++L76uLnEzfJfa30dAfXwxf4DBwWBk HKrg3MItGUC1L6qkm2eycBceV7enWqaZMdwM8CIKmVyouGTn5ckuihnsw5PWKNQn xG6HZVW7NnZ5ZozqpKPLz4OmnJIbno58SWcYjRr/ReSHNvRvRpwOqhxhED/F/+V7 8R7Knhb0UmhSLJWY6rlpgNDjkvgolIcatPZxkw83sJ+ixejy/wuxGX7v7G46LKiK FC9AFmv9raCgx0ekJNxTM/IstrWVnbhIny2n1oWf6X7TJPA19wIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFHT2YFEM632737lpJ5e4AhfeszYDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j NTVhNWQyYS1hZWFlLTRlNmEtOTcwMS1jZjk3ZmE2ZWI1NzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M1NWE1ZDJhLWFlYWUtNGU2YS05 NzAxLWNmOTdmYTZlYjU3MS9jNTVhNWQyYS1hZWFlLTRlNmEtOTcwMS1jZjk3ZmE2 ZWI1NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgABMBADAwCAqQMDAKAlAwQAx6SKMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAkJdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFDrlqdrDX/iGsCgGJoV46qKm9Jj8Vk7V6ZK Jsz2CTEY9shnkW6mdF8wtlVGqE8RY2YurwNFtvfax23F7BBnPqqTureih7J1g7Mp GNEjpNm6ulHa03xrZ6/0lf+W9GX3E7C8v913h1o+0a4SZzsx5mysM6FB1Nv1ixT8 DvOl1AMWvLjZQm0Ir8dIlC6CEI0U+Zge66XDwIuO1vNpO5pVHxCTjq/13mTgXKKA JTOqvpQPV/n/rFMa8QdCb8r0DjK23c/YK4fL/6maUjzpP4WIA9rH6EymcBM5AZPU XYrm9R2Td89zto9BfOzgpoP0HKiI6b7mDKeHvRLEbiERzVbMoZ4= -----END CERTIFICATE-----Generated at Wed Jun 18 19:23:16 2025 by rpki-client