$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer (raw, json) Hash identifier: 0U/ALprBTOy9YB2Yo5Y/JajHe2BLEy6mE/FWG6vCoCE= Subject key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A17D9970F5E55898211148E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 18:42:46 +0000 Certificate not after: Wed 08 Sep 2027 18:42:46 +0000 Subordinate resources: AS: 22425 IP: 148.59.172.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:d9:97:0f:5e:55:89:82:11:14:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 5 18:42:46 2025 GMT Not After : Sep 8 18:42:46 2027 GMT Subject: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:a2:78:8a:b0:2d:90:df:e3:f8:93:ab:f6: 26:4b:b0:e7:e4:ac:5f:bb:ad:63:58:99:19:fa:fb: b0:32:79:dc:93:58:e8:cd:26:4f:3e:df:71:77:b1: 44:93:75:ad:aa:99:42:5f:6a:0e:b5:22:0b:b1:2b: 3d:30:c6:d4:b0:8d:26:c1:fd:f3:f8:f1:6a:15:ee: 3a:a9:f5:c0:cb:3f:69:e8:c8:db:60:61:c5:55:5c: 8d:ee:07:de:a1:ad:0e:90:d3:00:04:86:75:cb:47: 7b:70:36:5d:da:9d:a5:a8:3d:98:ef:d4:94:ca:25: f8:73:b5:c6:ec:bc:e4:04:d6:6b:10:25:44:09:39: 6f:00:56:fa:7b:0f:91:6f:1e:87:b7:c4:95:ff:4b: e3:00:f2:11:35:6a:be:ea:ad:ab:ce:31:22:38:46: ed:f2:0f:54:da:db:e9:8d:a3:5d:eb:35:b1:8a:93: 72:f7:4c:b9:41:45:aa:a3:8d:43:7a:db:f6:7a:06: 7f:7e:09:4d:46:f6:8f:57:e0:f0:26:6a:fb:7c:2b: 01:c5:e7:58:6c:6f:f5:07:a0:88:e1:ae:7d:c0:6f: e6:24:8e:c6:2f:c6:70:15:eb:eb:1e:1a:e0:a0:29: 50:ed:d5:3e:ee:17:41:93:18:54:df:cb:9e:de:19: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 148.59.172.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:58:c6:e2:21:1d:52:df:db:aa:e2:05:9a:a3:8b:0a:ae:98: 60:8a:0f:10:de:ed:a7:4d:a3:09:aa:b1:d5:23:f3:f5:34:37: 1b:b5:ed:0f:5d:cf:d5:2f:79:13:74:44:ff:67:d7:94:0a:54: 7f:e1:13:08:39:82:b3:3f:d4:5e:b1:c3:a3:09:e4:d4:ae:9c: d6:42:54:43:0b:c3:4a:73:c2:dc:09:8d:59:a1:93:82:2d:2d: 62:7a:e9:1d:60:41:f9:b1:88:4e:2c:de:49:2d:39:64:6f:23: 31:ca:98:a4:70:d8:25:5b:72:71:4d:48:1c:5e:94:9a:af:df: 40:83:d4:c0:5e:3c:6f:00:84:79:a9:8e:e9:03:fb:be:29:57: 42:ca:2d:c3:eb:70:81:d8:23:b6:59:e8:49:52:01:3d:54:bc: 56:1c:68:c6:93:f1:6d:0f:bc:9f:59:f5:25:82:4f:34:69:ef: 63:5c:45:f4:12:75:89:15:f5:7f:90:2c:80:0f:7d:50:f0:99: 87:80:9c:62:dc:b1:dd:47:c2:e6:f2:33:1c:6a:71:cd:e1:4b: 8d:bd:51:ec:3e:e7:2c:5d:88:78:24:e4:0a:bb:fb:4e:ff:73: 2f:df:4f:fb:a1:85:b9:3f:a9:03:de:2c:f4:02:d8:52:3f:19: 34:d2:9e:19 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEoX2ZcPXlWJghEUjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNTE4NDI0NloXDTI3MDkwODE4NDI0NlowLzEtMCsGA1UEAxMk YzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp6ieIqwLZDf4/iTq/YmS7Dn5Kxfu61jWJkZ +vuwMnnck1jozSZPPt9xd7FEk3WtqplCX2oOtSILsSs9MMbUsI0mwf3z+PFqFe46 qfXAyz9p6MjbYGHFVVyN7gfeoa0OkNMABIZ1y0d7cDZd2p2lqD2Y79SUyiX4c7XG 7LzkBNZrECVECTlvAFb6ew+Rbx6Ht8SV/0vjAPIRNWq+6q2rzjEiOEbt8g9U2tvp jaNd6zWxipNy90y5QUWqo41Detv2egZ/fglNRvaPV+DwJmr7fCsBxedYbG/1B6CI 4a59wG/mJI7GL8ZwFevrHhrgoClQ7dU+7hdBkxhU38ue3hlxqwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFALnibmGI+LTKfI1eJnYEcXT2gqWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j N2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M3YWVhN2UyLWUzODAtNDU1OS05 ZmYzLTRmYzcxMzhjNDM1ZS9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4 YzQzNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGUO6wwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC V5kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASljG4iEdUt/bquIFmqOLCq6YYIoPEN7tp02jCaqx1SPz9TQ3 G7XtD13P1S95E3RE/2fXlApUf+ETCDmCsz/UXrHDownk1K6c1kJUQwvDSnPC3AmN WaGTgi0tYnrpHWBB+bGITizeSS05ZG8jMcqYpHDYJVtycU1IHF6Umq/fQIPUwF48 bwCEeamO6QP7vilXQsotw+twgdgjtlnoSVIBPVS8VhxoxpPxbQ+8n1n1JYJPNGnv Y1xF9BJ1iRX1f5AsgA99UPCZh4CcYtyx3UfC5vIzHGpxzeFLjb1R7D7nLF2IeCTk Crv7Tv9zL99P+6GFuT+pA94s9ALYUj8ZNNKeGQ== -----END CERTIFICATE-----Generated at Tue Jun 17 14:59:13 2025 by rpki-client