$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer File: 90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer (raw, json) Hash identifier: hjSDFM2tpDGRnY+/bo6na9LRf2TYC/qou5eSaN4gTHs= Subject key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A63EE2209DDDCA759F47E8680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 00:45:35 +0000 Certificate not after: Wed 06 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 10923 AS: 11824 AS: 17066 AS: 17151 AS: 17284 AS: 18432 AS: 20245 AS: 21539 AS: 21583 AS: 29726 AS: 30467 -- 30469 AS: 31907 -- 31909 AS: 32370 AS: 32960 -- 32968 AS: 35945 AS: 36084 IP: 69.59.224.0/19 IP: 74.116.144.0/21 IP: 216.115.16.0/20 IP: 2620:0:1800::/43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:ee:22:09:dd:dc:a7:59:f4:7e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 3 00:45:35 2025 GMT Not After : Oct 6 00:45:35 2027 GMT Subject: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:c9:ff:16:30:2a:53:71:f2:46:c5:9f:f1: aa:55:73:f0:7b:4a:f5:47:3e:e1:38:82:94:48:75: fe:83:0e:08:a2:a9:a4:a3:c3:54:1a:e0:54:13:06: b8:2f:93:6a:e2:c9:24:36:7b:37:f4:2d:aa:08:21: 53:79:98:25:b4:24:b4:62:87:dc:b3:3c:09:b2:75: c0:46:93:85:d0:40:bc:4c:ef:f3:ef:e6:23:03:ec: ae:5f:08:7d:aa:b1:eb:b6:21:69:12:12:58:b0:b4: 60:8f:de:45:50:bc:32:4d:78:c3:36:9c:dc:31:78: 16:2a:ce:c0:0d:65:ca:77:d0:82:a2:76:cc:15:e8: bb:6a:9f:31:37:0a:db:0e:d8:0a:de:7e:71:ff:1e: 33:40:a6:01:7b:22:5a:5a:dc:e1:9f:30:39:cf:98: b7:41:d0:07:ee:ba:60:c7:79:78:db:5a:a9:3e:91: 6c:82:d4:37:ee:0e:34:f7:d3:1f:82:42:f8:dc:34: 25:40:af:35:76:ed:5a:33:ce:b7:46:e5:db:21:cc: fc:5b:08:84:cd:7b:de:94:b0:17:d2:7d:44:52:1b: de:0d:a4:1f:54:16:79:37:97:82:26:f2:57:27:2b: 20:1a:a1:fa:21:6c:23:af:97:89:63:a4:ed:06:bd: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 69.59.224.0/19 74.116.144.0/21 216.115.16.0/20 IPv6: 2620:0:1800::/43 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10923 11824 17066 17151 17284 18432 20245 21539 21583 29726 30467-30469 31907-31909 32370 32960-32968 35945 36084 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fc:5e:2f:b6:92:89:8d:36:27:7b:9b:61:a0:da:d8:b6:1a: 3b:2a:82:bb:98:71:e2:d0:12:09:5a:b8:d2:96:02:34:b7:b8: c2:bb:07:d0:98:c3:27:5a:56:b1:56:c8:bf:51:50:e6:00:42: 25:c0:ba:96:6b:18:1d:34:28:57:cc:a0:9b:11:c5:90:03:52: c7:d7:c2:da:a7:64:f7:2c:aa:70:aa:ef:94:47:f7:f5:ee:1a: d4:f4:73:83:4d:a9:ce:97:af:73:5e:14:13:32:4f:49:7c:97: f5:99:96:90:d3:6a:d3:d7:7a:d2:bf:b2:9d:2e:20:64:7c:13: 26:f0:69:3c:a0:f2:19:2f:aa:e5:b7:e4:29:5d:02:44:fc:63: fc:c2:e7:b4:4f:18:34:b1:27:04:c3:63:9e:0a:6d:19:38:53: bf:b2:e2:86:c3:b0:cb:e7:b5:36:87:71:87:4e:79:9c:cd:07: 85:be:ea:0a:5e:f4:0f:65:51:64:cd:ef:60:be:aa:da:d6:5c: 64:33:f1:11:1c:0e:dd:77:6f:c1:35:49:d9:e0:d4:e8:b8:01: 80:4a:5f:b7:df:8d:0f:02:38:11:13:36:16:15:6d:1a:ab:55: 3f:55:9e:d4:c8:ba:d3:21:06:b0:29:9f:fa:03:09:07:0b:84: cd:9f:ca:a3 -----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIUAQ0Mn0MoWEpj7iIJ3dynWfR+hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcwMzAwNDUzNVoXDTI3MTAwNjAwNDUzNVowLzEtMCsGA1UEAxMk OTBmYTc2MzgtYTc3NS00ZGI4LTllOGUtNzAyY2Q4YjI2YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfPJ/xYwKlNx8kbFn/GqVXPwe0r1Rz7hOIKU SHX+gw4Ioqmko8NUGuBUEwa4L5Nq4skkNns39C2qCCFTeZgltCS0YofcszwJsnXA RpOF0EC8TO/z7+YjA+yuXwh9qrHrtiFpEhJYsLRgj95FULwyTXjDNpzcMXgWKs7A DWXKd9CConbMFei7ap8xNwrbDtgK3n5x/x4zQKYBeyJaWtzhnzA5z5i3QdAH7rpg x3l421qpPpFsgtQ37g4099MfgkL43DQlQK81du1aM863RuXbIcz8WwiEzXvelLAX 0n1EUhveDaQfVBZ5N5eCJvJXJysgGqH6IWwjr5eJY6TtBr3qtwIDAQABo4IEiTCC BIUwHQYDVR0OBBYEFI1O5EkKwoQOFOEh639zpuLsEcymMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 MGZhNzYzOC1hNzc1LTRkYjgtOWU4ZS03MDJjZDhiMjZiOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkwZmE3NjM4LWE3NzUtNGRiOC05 ZThlLTcwMmNkOGIyNmI5Yi85MGZhNzYzOC1hNzc1LTRkYjgtOWU4ZS03MDJjZDhi MjZiOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAVFO+ADBANKdJADBATYcxAwDwQCAAIwCQMHBSYg AAAYADBrBggrBgEFBQcBCAEB/wRcMFqgWDBWAgIqqwICLjACAkKqAgJC/wICQ4QC AkgAAgJPFQICVCMCAlRPAgJ0HjAIAgJ3AwICdwUwCAICfKMCAnylAgJ+cjAKAgMA gMACAwCAyAIDAIxpAgMAjPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIfxeL7aSiY02J3ubYaDa2LYaOyqC u5hx4tASCVq40pYCNLe4wrsH0JjDJ1pWsVbIv1FQ5gBCJcC6lmsYHTQoV8ygmxHF kANSx9fC2qdk9yyqcKrvlEf39e4a1PRzg02pzpevc14UEzJPSXyX9ZmWkNNq09d6 0r+ynS4gZHwTJvBpPKDyGS+q5bfkKV0CRPxj/MLntE8YNLEnBMNjngptGThTv7Li hsOwy+e1Nodxh055nM0Hhb7qCl70D2VRZM3vYL6q2tZcZDPxERwO3XdvwTVJ2eDU 6LgBgEpft9+NDwI4ERM2FhVtGqtVP1We1Mi60yEGsCmf+gMJBwuEzZ/Kow== -----END CERTIFICATE-----Generated at Wed Jul 9 16:29:06 2025 by rpki-client