$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer File: ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer (raw, json) Hash identifier: OcjB5j6g5S1iD/GIc4S8115D0t3XNtuu92arKI40djg= Subject key identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A1766CA8E2A8587E2753E3780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 14:51:28 +0000 Certificate not after: Thu 29 Apr 2027 21:51:45 +0000 Subordinate resources: AS: 396083 IP: 160.84.192.0/18 IP: 192.52.170.0/24 IP: 192.58.211.0/24 IP: 192.84.7.0/24 IP: 192.104.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:66:ca:8e:2a:85:87:e2:75:3e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 5 14:51:28 2025 GMT Not After : Apr 29 21:51:45 2027 GMT Subject: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:c7:95:08:f3:cf:18:ae:38:d1:15:d0:6a: ce:bb:d9:ae:f2:2c:1e:b4:70:16:22:e4:02:c9:23: 8b:75:5c:75:ba:a6:c1:00:5b:eb:84:78:c7:9f:1a: 89:c1:05:48:b7:bc:66:71:3e:cf:0c:76:52:13:35: 4d:bc:cf:da:2a:b0:4e:e4:77:37:25:3a:e0:73:cb: 47:a9:c3:0a:14:c1:83:92:10:73:f8:79:95:66:51: d3:83:48:5f:f4:d7:25:dd:11:ce:b5:fb:43:31:6c: 81:49:fc:a3:d1:36:17:2b:cc:2a:fe:5c:d5:b7:13: 46:73:b3:d7:ec:9a:e8:80:65:19:87:44:32:fc:7b: 8e:c8:36:1f:35:fc:75:12:39:ae:84:dd:90:ab:17: 79:d5:63:b8:5a:34:2b:60:a3:9a:1d:64:87:0c:2e: 0b:17:31:3f:1f:ab:25:9d:81:65:46:14:9a:15:07: 7e:b1:24:e1:97:07:84:40:30:0e:59:d1:8e:af:4f: 6d:ad:5c:1f:02:0e:26:6c:18:e6:03:27:f9:83:6c: 60:b2:19:d1:51:93:e2:82:7b:f9:bf:1b:84:f9:cf: ee:f6:c4:48:7e:b6:f3:0c:a7:75:4d:80:1e:e4:2e: da:94:f6:d0:cf:58:76:fc:a7:e0:20:4a:76:ad:17: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 160.84.192.0/18 192.52.170.0/24 192.58.211.0/24 192.84.7.0/24 192.104.50.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396083 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bf:75:42:90:1b:3d:25:75:ca:4f:d2:98:6e:7e:1f:df:d6: 8f:31:ff:4f:45:fa:93:f9:a9:88:be:62:32:7f:2e:69:04:d9: 0e:59:02:b2:c1:b8:47:70:19:8f:2a:d9:bb:cd:74:35:c6:6b: f3:24:53:f7:3a:4d:ef:33:89:6f:52:9e:63:59:4f:60:f1:ee: 6a:a0:b1:bd:89:a4:23:9c:07:37:e7:14:a1:07:3d:ce:77:49: 9e:9d:66:44:9a:7b:69:29:99:1f:29:45:cb:44:9e:91:25:b2: 1d:58:8e:60:4c:87:7e:e4:b2:80:5f:98:44:c5:c8:12:0a:d6: 39:e3:d5:5b:bf:11:f5:98:23:f3:80:e5:cb:fe:b6:29:84:91: 66:53:f4:ad:be:7a:15:9d:81:51:28:06:78:7a:ac:89:f3:41: 81:65:7b:ab:2a:9b:75:9a:4d:14:3c:b1:dc:e6:0b:26:55:8c: 15:2f:93:c3:e4:d8:cc:bc:ac:01:eb:66:6c:6c:8b:f0:0f:b9: 6b:13:10:94:82:06:95:fd:33:73:78:85:ba:5c:d0:ea:3b:e0: 41:b6:98:7e:6f:cc:bf:ee:dc:ef:a8:a5:b4:0e:e5:d6:f5:28: 69:c2:66:1b:a7:ea:11:27:e9:ae:69:8c:33:09:1c:eb:27:72: 1f:a9:fa:19 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEoXZsqOKoWH4nU+N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDYwNTE0NTEyOFoXDTI3MDQyOTIxNTE0NVowLzEtMCsGA1UEAxMk YWI5OTFlZTQtZjVhZC00YzU0LWEwMWUtMTU2ZjI0YmFjOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWLHlQjzzxiuONEV0GrOu9mu8iwetHAWIuQC ySOLdVx1uqbBAFvrhHjHnxqJwQVIt7xmcT7PDHZSEzVNvM/aKrBO5Hc3JTrgc8tH qcMKFMGDkhBz+HmVZlHTg0hf9Ncl3RHOtftDMWyBSfyj0TYXK8wq/lzVtxNGc7PX 7JrogGUZh0Qy/HuOyDYfNfx1EjmuhN2Qqxd51WO4WjQrYKOaHWSHDC4LFzE/H6sl nYFlRhSaFQd+sSThlweEQDAOWdGOr09trVwfAg4mbBjmAyf5g2xgshnRUZPignv5 vxuE+c/u9sRIfrbzDKd1TYAe5C7alPbQz1h2/KfgIEp2rRe8/QIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFOQN/s+4AXaAQbUCLAHMAxO/ACpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Yjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRiYWM5ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiOTkxZWU0LWY1YWQtNGM1NC1h MDFlLTE1NmYyNGJhYzlmYi9hYjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRi YWM5ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAagVMADBADANKoDBADAOtMDBADAVAcDBADAaDIw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgszMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADi/dUKQGz0ldcpP 0phufh/f1o8x/09F+pP5qYi+YjJ/LmkE2Q5ZArLBuEdwGY8q2bvNdDXGa/MkU/c6 Te8ziW9SnmNZT2Dx7mqgsb2JpCOcBzfnFKEHPc53SZ6dZkSae2kpmR8pRctEnpEl sh1YjmBMh37ksoBfmETFyBIK1jnj1Vu/EfWYI/OA5cv+timEkWZT9K2+ehWdgVEo Bnh6rInzQYFle6sqm3WaTRQ8sdzmCyZVjBUvk8Pk2My8rAHrZmxsi/APuWsTEJSC BpX9M3N4hbpc0Oo74EG2mH5vzL/u3O+opbQO5db1KGnCZhun6hEn6a5pjDMJHOsn ch+p+hk= -----END CERTIFICATE-----Generated at Sun Jun 15 05:03:19 2025 by rpki-client