$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer File: 69dba5e3-26fb-440c-884d-525d04a32b0f.cer (raw, json) Hash identifier: n4JUkkUi4w+rKHdZOIvw1YJzTcip1mKbWcENIsooSjc= Subject key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A7B83AB0974047D88D319A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Jul 2025 11:30:29 +0000 Certificate not after: Fri 19 Mar 2027 18:45:02 +0000 Subordinate resources: AS: 17034 IP: 103.229.152.0/22 IP: 2602:f5e8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:83:ab:09:74:04:7d:88:d3:19:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 11 11:30:29 2025 GMT Not After : Mar 19 18:45:02 2027 GMT Subject: CN=69dba5e3-26fb-440c-884d-525d04a32b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b6:a5:0f:59:b8:b5:8e:f7:7d:7b:2d:5c: cd:94:4c:e0:73:29:17:c6:ea:47:19:ad:bb:37:31: fc:39:94:60:11:bf:e5:41:ce:33:43:dd:11:2f:22: 44:06:c0:c8:0b:19:8a:ed:78:1d:27:1a:40:ea:08: 0b:89:bd:c8:44:4e:fa:40:07:fd:a6:df:99:26:d9: 20:de:a5:85:18:e5:79:6c:e8:ad:72:b7:b2:8d:65: 77:1f:1c:4c:0c:62:1d:03:de:85:f5:c8:d1:af:a2: 7b:86:35:02:a0:2c:67:c9:7b:32:de:5c:8a:e4:32: 6b:0b:31:44:d7:fc:1c:b3:b4:3b:4a:1f:94:66:6a: 2d:31:1b:7e:36:9d:9d:32:ba:64:a7:83:c5:ba:cd: 18:84:11:09:e2:4a:d1:ee:d1:b7:61:92:3f:9e:2b: 09:b7:c8:e9:98:3f:8e:51:63:e7:41:1c:18:bf:b7: 9f:f9:ff:9b:b7:0a:05:d0:33:88:ce:64:d2:e5:e3: c2:3f:ad:fc:88:db:bf:0e:10:ed:36:d4:0b:6b:f2: c6:33:f4:6b:85:b7:76:b5:4d:ce:ad:e4:08:e2:65: 22:f6:28:ae:74:64:c7:b8:48:29:9b:ce:ec:eb:77: 09:7d:52:4e:0f:29:07:d3:ef:1a:cc:6c:f9:fe:43: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 103.229.152.0/22 IPv6: 2602:f5e8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ac:73:84:79:18:74:03:1d:2e:2d:35:4f:ee:2a:19:10:4d: b0:4c:0c:b3:c0:32:16:b0:56:56:93:bf:58:0b:d5:35:d9:c3: 61:dd:5e:1f:7b:24:be:6c:21:69:7e:87:fa:fe:25:84:6d:21: 4a:8f:93:4d:d9:99:fd:e6:69:0c:83:a4:a0:07:86:ce:c1:25: a4:cc:b9:96:e3:a2:16:31:bc:4f:c7:e0:ee:a0:3e:db:51:94: 69:8d:62:e4:d3:b8:1c:6d:81:0b:d7:0f:28:c3:42:d0:6b:eb: 5e:a9:41:b2:35:f1:69:3f:c5:59:74:53:e9:63:d4:72:d2:3a: a3:67:bd:ce:d5:bc:c9:bb:7a:9d:3e:02:e2:d8:88:dc:4a:ec: 18:c2:0d:8a:da:b5:73:8c:4a:3b:e1:5e:76:d9:e0:15:d5:09: 12:41:b6:b2:88:33:a7:17:a1:57:c1:41:91:17:1f:36:f9:e9: b1:b5:00:4d:fe:39:c9:f9:ac:c5:7b:0e:b8:52:13:54:86:15: 25:f0:e9:50:e6:7b:a5:ff:98:e3:27:9a:96:da:d2:22:05:14: 6f:28:93:4b:90:10:7a:69:15:fd:3c:0f:82:63:5b:42:8d:3e: 9b:92:a6:6d:46:b8:fc:b0:dc:ef:b1:d4:37:a4:d9:0d:19:46: ee:e1:61:fa -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEp7g6sJdAR9iNMZowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDcxMTExMzAyOVoXDTI3MDMxOTE4NDUwMlowLzEtMCsGA1UEAxMk NjlkYmE1ZTMtMjZmYi00NDBjLTg4NGQtNTI1ZDA0YTMyYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yS2pQ9ZuLWO9317LVzNlEzgcykXxupHGa27 NzH8OZRgEb/lQc4zQ90RLyJEBsDICxmK7XgdJxpA6ggLib3IRE76QAf9pt+ZJtkg 3qWFGOV5bOitcreyjWV3HxxMDGIdA96F9cjRr6J7hjUCoCxnyXsy3lyK5DJrCzFE 1/wcs7Q7Sh+UZmotMRt+Np2dMrpkp4PFus0YhBEJ4krR7tG3YZI/nisJt8jpmD+O UWPnQRwYv7ef+f+btwoF0DOIzmTS5ePCP638iNu/DhDtNtQLa/LGM/Rrhbd2tU3O reQI4mUi9iiudGTHuEgpm87s63cJfVJODykH0+8azGz5/kOHqwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNRAe2+nFlpPA+FOfFkJ80blC46mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRhMzJiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ZGJhNWUzLTI2ZmItNDQwYy04 ODRkLTUyNWQwNGEzMmIwZi82OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRh MzJiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJn5ZgwDgQCAAIwCAMGBCYC9egAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkKKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIqsc4R5GHQDHS4tNU/uKhkQTbBM DLPAMhawVlaTv1gL1TXZw2HdXh97JL5sIWl+h/r+JYRtIUqPk03Zmf3maQyDpKAH hs7BJaTMuZbjohYxvE/H4O6gPttRlGmNYuTTuBxtgQvXDyjDQtBr616pQbI18Wk/ xVl0U+lj1HLSOqNnvc7VvMm7ep0+AuLYiNxK7BjCDYratXOMSjvhXnbZ4BXVCRJB trKIM6cXoVfBQZEXHzb56bG1AE3+Ocn5rMV7DrhSE1SGFSXw6VDme6X/mOMnmpba 0iIFFG8ok0uQEHppFf08D4JjW0KNPpuSpm1GuPyw3O+x1Dek2Q0ZRu7hYfo= -----END CERTIFICATE-----Generated at Mon Aug 4 07:57:03 2025 by rpki-client