$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer File: 61249665-c04a-42df-b2a8-e643b7fab80e.cer (raw, json) Hash identifier: 4Ahs5DvjcU736VV+YUuTJPOgTK6c85NPauxonDHHg5s= Subject key identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A0EDEDF4D14AFA36B77796E30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 13:31:08 +0000 Certificate not after: Sun 05 Sep 2027 13:31:08 +0000 Subordinate resources: AS: 40674 IP: 192.33.136.0/24 IP: 2602:80f:d000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:de:df:4d:14:af:a3:6b:77:79:6e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 2 13:31:08 2025 GMT Not After : Sep 5 13:31:08 2027 GMT Subject: CN=61249665-c04a-42df-b2a8-e643b7fab80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:23:f3:df:48:96:e6:01:2a:f8:6e:09:4d: ef:23:d5:9e:de:fe:f2:3e:db:00:04:06:ef:72:9b: bd:4f:d1:cd:f1:6d:12:15:39:5b:33:de:c9:1c:2a: 26:9f:6c:73:af:a4:af:bf:dd:74:1d:07:b0:0a:23: 33:a8:79:14:cf:e5:12:6b:52:4e:65:86:17:73:cc: f4:06:20:28:51:79:9a:64:85:6c:0e:f5:54:56:6a: 50:b6:95:1d:26:b3:64:b4:27:6f:97:02:50:b1:3d: 24:3a:69:3c:36:14:1c:61:e3:bd:9f:2f:fa:6b:79: 05:fe:70:c6:bf:fe:11:43:79:1b:af:9f:61:3c:a5: 60:d2:72:ec:cd:3d:0c:a4:b6:c5:ab:25:85:d3:b4: 1b:49:81:fc:4a:f3:71:11:4c:93:a2:9f:bf:59:dd: af:36:fc:c6:cd:28:b2:02:c4:3d:84:46:3d:fb:03: 7e:61:e0:04:4e:61:bb:3a:9b:8a:d8:8b:d7:e7:07: 89:eb:c5:23:2c:22:16:f8:6f:b7:ad:db:3f:5c:31: 0b:86:fb:72:e1:34:a3:5c:cd:25:b9:98:27:13:7a: 9d:7e:3c:de:e7:6b:e4:0b:a3:f6:2d:d7:c4:c8:4e: da:ed:fa:47:5f:d6:33:7d:91:66:26:a3:5c:52:95: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.33.136.0/24 IPv6: 2602:80f:d000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:da:ee:80:c6:5d:7a:4d:01:d9:59:0d:c3:71:b9:eb:84:59: 1a:b8:02:c0:1b:49:ae:6a:af:0f:9d:1c:80:76:3e:93:64:83: 82:53:d1:1a:bf:da:84:b3:95:f5:74:f4:d8:08:63:48:c2:34: 07:03:17:31:2a:8f:38:b3:4d:43:a8:f2:a4:a5:dc:6d:45:0c: ee:a7:b7:64:a9:55:93:bc:51:2c:1c:9a:cd:18:0e:3e:38:cc: 49:7a:cd:e2:8e:0d:c3:98:eb:04:92:66:af:61:fc:18:ca:30: b7:c3:4e:78:07:98:c9:85:8c:97:37:52:16:90:9f:cf:d4:db: 4c:50:d8:97:a2:17:08:e1:86:c9:9f:07:2c:5e:d9:1c:3d:1e: 44:40:59:65:33:d5:f2:e6:72:4e:16:77:47:33:cb:27:92:ef: 70:4d:c2:75:19:a6:ac:b9:70:d9:df:79:9c:62:3f:76:99:b9: bb:16:bc:3d:b6:90:72:20:32:bc:0b:47:ee:a1:8b:0d:44:90: e6:0d:cd:77:90:91:1b:73:52:07:1f:e4:89:ec:69:dd:41:bd: aa:fa:e5:bb:d7:52:12:a8:42:d1:54:8e:50:8c:1f:a7:a0:0a: 4a:49:82:be:02:a8:e4:e0:a0:5a:43:24:96:91:fc:56:16:ab: 18:b8:7c:4c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEoO3t9NFK+ja3d5bjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDYwMjEzMzEwOFoXDTI3MDkwNTEzMzEwOFowLzEtMCsGA1UEAxMk NjEyNDk2NjUtYzA0YS00MmRmLWIyYTgtZTY0M2I3ZmFiODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYEj899IluYBKvhuCU3vI9We3v7yPtsABAbv cpu9T9HN8W0SFTlbM97JHComn2xzr6Svv910HQewCiMzqHkUz+USa1JOZYYXc8z0 BiAoUXmaZIVsDvVUVmpQtpUdJrNktCdvlwJQsT0kOmk8NhQcYeO9ny/6a3kF/nDG v/4RQ3kbr59hPKVg0nLszT0MpLbFqyWF07QbSYH8SvNxEUyTop+/Wd2vNvzGzSiy AsQ9hEY9+wN+YeAETmG7OpuK2IvX5weJ68UjLCIW+G+3rds/XDELhvty4TSjXM0l uZgnE3qdfjze52vkC6P2LdfEyE7a7fpHX9YzfZFmJqNcUpWcGwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFOrW1mR/NDZa8SXRIMg5akPH9nzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdmYWI4MGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzYxMjQ5NjY1LWMwNGEtNDJkZi1i MmE4LWU2NDNiN2ZhYjgwZS82MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdm YWI4MGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAIYgwDwQCAAIwCQMHBCYCCA/QADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAnuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATdrugMZdek0B2VkNw3G564RZ GrgCwBtJrmqvD50cgHY+k2SDglPRGr/ahLOV9XT02AhjSMI0BwMXMSqPOLNNQ6jy pKXcbUUM7qe3ZKlVk7xRLByazRgOPjjMSXrN4o4Nw5jrBJJmr2H8GMowt8NOeAeY yYWMlzdSFpCfz9TbTFDYl6IXCOGGyZ8HLF7ZHD0eREBZZTPV8uZyThZ3RzPLJ5Lv cE3CdRmmrLlw2d95nGI/dpm5uxa8PbaQciAyvAtH7qGLDUSQ5g3Nd5CRG3NSBx/k iexp3UG9qvrlu9dSEqhC0VSOUIwfp6AKSkmCvgKo5OCgWkMklpH8VharGLh8TA== -----END CERTIFICATE-----Generated at Sun Jun 15 05:16:39 2025 by rpki-client