$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer File: aa27be3e-5663-4196-bb8a-966e8a6bf571.cer (raw, json) Hash identifier: bCdVOiO4TLK2+xpMlGWGPV+TblAkwNyE0NpHQka6k+M= Subject key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584938B252355A4D6E2386F7EB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 20:18:23 +0000 Certificate not after: Sun 20 Jun 2027 20:18:23 +0000 Subordinate resources: AS: 35882 AS: 63045 AS: 395516 IP: 141.206.0.0 -- 141.206.143.255 IP: 141.206.160.0 -- 141.206.255.255 IP: 153.62.0.0/16 IP: 153.64.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:38:b2:52:35:5a:4d:6e:23:86:f7:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 17 20:18:23 2025 GMT Not After : Jun 20 20:18:23 2027 GMT Subject: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:46:40:f9:70:24:9c:35:a9:81:6f:46:03: c8:92:37:6a:fa:7c:e3:c3:5a:51:fa:40:6c:99:93: ae:89:0b:ec:3a:bf:07:02:68:65:c4:34:cb:3b:a5: 7f:34:20:fe:04:12:53:f7:65:7e:6b:e8:0e:93:2a: 44:1b:b4:fc:f7:7a:6d:4f:d1:88:bb:2a:67:fe:8d: b7:4d:6d:fc:69:9d:e5:26:86:70:cb:fe:5d:d5:6c: 55:ff:f1:1f:04:f0:72:8d:fe:ee:13:04:12:a2:0e: 08:eb:5f:95:9f:d7:d2:2b:e9:ec:d9:c6:90:6a:20: 87:6f:81:eb:47:69:84:9c:46:6e:e7:b3:74:19:df: 03:b5:8b:c0:f0:bb:66:ad:c5:78:e8:fb:7f:78:eb: 0d:51:a9:67:04:32:14:15:00:40:e7:cf:3a:68:fc: 1c:c9:7c:14:4e:ac:f3:ba:1f:8e:99:79:37:23:5d: 5d:b0:8c:8a:a5:b2:6b:a3:e2:57:ef:ce:a2:f5:a6: d2:05:3c:cb:ad:9e:53:f3:7f:22:d8:e0:cc:ef:34: 5f:47:c1:df:fa:7a:ce:80:5f:90:1f:e6:b4:6d:c6: d0:54:22:24:39:87:4e:32:21:da:84:0d:34:83:ed: 9c:fe:ec:2a:e5:15:74:08:3e:05:12:29:23:af:24: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.206.0.0-141.206.143.255 141.206.160.0-141.206.255.255 153.62.0.0/16 153.64.0.0/15 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35882 63045 395516 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d7:84:a4:13:c1:ac:5c:a8:70:41:a1:24:9e:c1:cc:dd:2d: 8b:7b:3a:f8:ff:48:84:c1:ff:2a:34:26:b9:86:5d:f0:3e:df: 3b:35:33:6c:9f:30:23:94:dc:2d:04:33:06:2c:72:0c:47:e3: e9:9e:60:b8:7d:35:17:66:7e:65:e2:98:bd:22:63:6b:09:62: 72:8c:4d:8a:7d:4d:b4:e6:62:18:3f:da:30:1e:b0:b2:cf:38: b0:dd:92:ff:b7:21:9e:dd:0d:5b:bd:d9:9d:7c:4d:d3:e8:df: d4:ed:56:f4:91:36:19:b3:22:02:b8:d6:76:6a:1c:be:15:5b: 32:d8:3e:d1:11:79:79:7c:0e:d0:a9:30:d5:c0:49:17:77:d6: 37:d3:97:25:dc:11:d7:51:cf:1b:c4:90:18:e0:de:5b:77:e2: bf:2c:27:9c:8c:55:01:42:0a:a0:9c:55:af:ab:0e:b3:d9:0d: 2e:47:42:0b:c2:40:ce:bb:6a:de:57:1b:2e:0f:a9:0f:4f:98: 9d:81:ce:ec:56:90:49:b2:76:b8:56:47:10:d8:40:1c:8e:52: a6:7a:10:f4:51:4c:f8:3d:7d:fe:c6:04:26:ec:48:6e:5e:93: 56:8c:d3:22:7d:6a:23:7f:a8:30:89:6c:9d:fb:02:b2:10:42: a5:d6:4c:dd -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEk4slI1Wk1uI4b364AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNzIwMTgyM1oXDTI3MDYyMDIwMTgyM1owLzEtMCsGA1UEAxMk YWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJmNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhpGQPlwJJw1qYFvRgPIkjdq+nzjw1pR+kBs mZOuiQvsOr8HAmhlxDTLO6V/NCD+BBJT92V+a+gOkypEG7T893ptT9GIuypn/o23 TW38aZ3lJoZwy/5d1WxV//EfBPByjf7uEwQSog4I61+Vn9fSK+ns2caQaiCHb4Hr R2mEnEZu57N0Gd8DtYvA8LtmrcV46Pt/eOsNUalnBDIUFQBA5886aPwcyXwUTqzz uh+OmXk3I11dsIyKpbJro+JX786i9abSBTzLrZ5T838i2ODM7zRfR8Hf+nrOgF+Q H+a0bcbQVCIkOYdOMiHahA00g+2c/uwq5RV0CD4FEikjryQshQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFBuQha7pF31tOs1jIaWH5bgJdl/lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h YTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FhMjdiZTNlLTU2NjMtNDE5Ni1i YjhhLTk2NmU4YTZiZjU3MS9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2 YmY1NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQwCwMDAY3OAwQEjc6AMAsDBAWNzqADAwCNzgMDAJk+ AwMBmUAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAIwqAgMA9kUCAwYI/DBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAm14SkE8GsXKhwQaEknsHM3S2Lezr4/0iEwf8qNCa5hl3wPt87NTNsnzAj lNwtBDMGLHIMR+PpnmC4fTUXZn5l4pi9ImNrCWJyjE2KfU205mIYP9owHrCyzziw 3ZL/tyGe3Q1bvdmdfE3T6N/U7Vb0kTYZsyICuNZ2ahy+FVsy2D7REXl5fA7QqTDV wEkXd9Y305cl3BHXUc8bxJAY4N5bd+K/LCecjFUBQgqgnFWvqw6z2Q0uR0ILwkDO u2reVxsuD6kPT5idgc7sVpBJsna4VkcQ2EAcjlKmehD0UUz4PX3+xgQm7EhuXpNW jNMifWojf6gwiWyd+wKyEEKl1kzd -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:38 2025 by rpki-client