$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer File: eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer (raw, json) Hash identifier: 7gOd4YK7WjDRPQuxxQpDYhpb3NgX4yugoX4nsIZarNE= Subject key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 Authority key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C Certificate issuer: /CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4 Certificate serial: 010D0C9F4328584A6451706A51669E195A3BE900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 04:05:41 +0000 Certificate not after: Wed 06 Oct 2027 04:05:41 +0000 Subordinate resources: IP: 23.132.184.0/23 IP: 64.49.12.0/22 IP: 128.254.204.0/22 IP: 192.138.210.0/23 IP: 192.209.62.0/23 IP: 216.73.156.0/22 IP: 2606:b940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:51:70:6a:51:66:9e:19:5a:3b:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4 Validity Not Before: Jul 3 04:05:41 2025 GMT Not After : Oct 6 04:05:41 2027 GMT Subject: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:ad:97:53:24:6c:45:2e:ea:e4:48:fe:c8: 4a:7f:aa:96:5f:24:ab:a3:a8:78:3a:80:b4:77:aa: ac:26:c3:66:11:71:ef:d3:d4:65:3f:6a:37:b3:86: a2:c3:a5:df:c6:01:23:59:51:db:ef:80:a0:63:75: 2f:ec:32:ff:0d:7f:e0:26:5c:a0:60:ac:cf:c3:2c: 26:0a:67:aa:21:2c:1e:74:d1:33:36:34:ab:7e:9a: 93:9b:16:57:5e:88:ac:6b:7f:f0:77:22:27:d7:67: 3e:d3:7f:20:a5:f2:23:d8:52:67:6d:c9:64:c8:ab: eb:d0:2c:64:c6:21:8e:fc:49:6b:34:96:58:38:1a: f0:07:1e:5c:e0:eb:06:ce:36:ed:d5:f5:c0:6e:9c: f9:fe:ca:5d:61:71:b1:0a:46:47:71:ee:5b:bc:85: c8:57:55:04:78:33:67:04:bf:85:2d:ad:18:ff:d7: 19:c0:ac:0a:04:c1:bc:4c:63:36:cf:64:b0:fe:d5: c9:2f:2d:e6:e3:80:53:a8:a8:c6:81:03:5f:5b:4d: 1b:d3:b4:e5:c3:62:5a:2c:f1:43:fa:2a:c5:24:86: 89:6f:bb:9c:aa:e3:29:55:dd:ba:e5:1e:40:a3:34: c9:24:cb:28:f8:26:ac:a4:f8:40:bb:ef:51:5f:03: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl X509v3 Authority Key Identifier: keyid:34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer sbgp-ipAddrBlock: critical IPv4: 23.132.184.0/23 64.49.12.0/22 128.254.204.0/22 192.138.210.0/23 192.209.62.0/23 216.73.156.0/22 IPv6: 2606:b940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:20:7c:b4:7c:91:41:71:19:59:b8:ad:16:37:7e:b0:57:e4: 65:03:bd:9c:1c:c9:fb:93:ef:9d:14:71:a3:09:7f:d0:fa:35: 43:dc:1c:c6:ac:d0:5e:9c:0e:59:f1:50:06:bd:40:d9:d3:d3: 42:94:96:75:83:34:cd:f9:8b:ca:c6:d9:8c:58:f0:bc:2a:72: 53:59:e9:31:e4:00:e9:4f:8d:73:dc:72:f6:6e:de:d0:72:11: bb:f2:83:01:ca:c0:c7:27:db:ce:ac:cc:67:6d:1e:48:31:86: 88:f5:33:b5:91:37:c2:06:6e:8a:6e:5b:8a:b7:d2:04:aa:ed: 37:b3:1b:fb:8e:62:0d:15:29:d1:e1:0e:4b:73:70:23:da:c0: 9b:64:a8:ad:4a:2a:8e:fd:cb:ef:a7:80:9e:06:67:6d:fa:f6: 54:c9:d5:a2:2a:d8:ee:52:ed:71:d2:e7:fc:b3:06:6d:73:1e: 1e:90:6b:49:ab:0a:99:94:14:eb:7d:bb:76:f5:24:44:0f:64: 30:49:a8:66:43:d3:78:ac:1d:fa:da:7e:ee:47:1c:4f:63:ff: 5b:b8:16:b3:c3:88:dd:07:09:23:23:3b:1a:50:8e:bb:00:e7: f4:a7:fc:7c:72:2b:7c:1f:3a:38:1d:db:35:43:d7:5a:76:f0: 18:ed:36:04 -----BEGIN CERTIFICATE----- MIIGzjCCBbagAwIBAgIUAQ0Mn0MoWEpkUXBqUWaeGVo76QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxZTk5N2MtYjg5ZS00N2MyLThkNzktZDMxZTU4YmMz Y2E0MB4XDTI1MDcwMzA0MDU0MVoXDTI3MTAwNjA0MDU0MVowPTE7MDkGA1UEAxMy ZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1ZTE4YmI2Mjk4YjFkM2Jm OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3K2XUyRsRS7q5Ej+ yEp/qpZfJKujqHg6gLR3qqwmw2YRce/T1GU/ajezhqLDpd/GASNZUdvvgKBjdS/s Mv8Nf+AmXKBgrM/DLCYKZ6ohLB500TM2NKt+mpObFldeiKxrf/B3IifXZz7TfyCl 8iPYUmdtyWTIq+vQLGTGIY78SWs0llg4GvAHHlzg6wbONu3V9cBunPn+yl1hcbEK Rkdx7lu8hchXVQR4M2cEv4UtrRj/1xnArAoEwbxMYzbPZLD+1ckvLebjgFOoqMaB A19bTRvTtOXDYlos8UP6KsUkholvu5yq4ylV3brlHkCjNMkkyyj4Jqyk+EC771Ff AzXRAgMBAAGjggPSMIIDzjAdBgNVHQ4EFgQUDwMxLuWePegnNfZrVJQV3kRkeHUw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVj OTFiZTNmOWQvMS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQv MS8wRjAzMzEyRUU1OUUzREU4MjczNUY2NkI1NDk0MTVERTQ0NjQ3ODc1Lm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5 LWQzMWU1OGJjM2NhNC9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1kMzFlNThiYzNj YTQuY3JsMB8GA1UdIwQYMBaAFDQ1dBUz3+hWW/5/DpEELFC3waFsMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvYTAxZTk5N2MtYjg5ZS00N2MyLThkNzktZDMxZTU4 YmMzY2E0LmNlcjBMBggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEAReEuAMEAkAx DAMEAoD+zAMEAcCK0gMEAcDRPgMEAthJnDANBAIAAjAHAwUAJga5QDBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA2IHy0fJFBcRlZuK0WN36wV+RlA72cHMn7k++dFHGjCX/Q+jVD3BzGrNBenA5Z 8VAGvUDZ09NClJZ1gzTN+YvKxtmMWPC8KnJTWekx5ADpT41z3HL2bt7QchG78oMB ysDHJ9vOrMxnbR5IMYaI9TO1kTfCBm6KbluKt9IEqu03sxv7jmINFSnR4Q5Lc3Aj 2sCbZKitSiqO/cvvp4CeBmdt+vZUydWiKtjuUu1x0uf8swZtcx4ekGtJqwqZlBTr fbt29SRED2QwSahmQ9N4rB362n7uRxxPY/9buBazw4jdBwkjIzsaUI67AOf0p/x8 cit8Hzo4Hds1Q9dadvAY7TYE -----END CERTIFICATE-----Generated at Tue Jul 22 04:29:31 2025 by rpki-client