$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer File: bb49c202-f644-4fa6-8a36-084312761f72.cer (raw, json) Hash identifier: Tyqt/F3Wh7ogt6B6uFU1ev3y5faM5cnjCuwu+l5kZpM= Subject key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A3A0DDF78B1320C47FD624700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 00:45:35 +0000 Certificate not after: Tue 21 Sep 2027 00:45:35 +0000 Subordinate resources: IP: 69.12.25.0/24 IP: 104.245.232.0/21 IP: 172.98.208.0/21 IP: 2605:dd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:0d:df:78:b1:32:0c:47:fd:62:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 18 00:45:35 2025 GMT Not After : Sep 21 00:45:35 2027 GMT Subject: CN=bb49c202-f644-4fa6-8a36-084312761f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:3c:44:ff:a7:3c:43:ad:fd:2b:e3:4e:8a: 6a:f7:90:63:ef:69:8f:a9:06:77:f7:82:0b:4d:02: b5:d5:72:91:60:fc:be:ea:74:9b:38:47:14:35:a5: 44:32:95:4c:46:23:16:c2:57:96:b3:70:c4:61:c1: 24:63:f2:d7:93:52:f9:9d:e0:9b:da:d0:1f:1a:f9: e4:8f:5a:54:12:84:45:32:8a:87:9a:e6:77:08:5c: 1e:c7:33:9e:6f:44:a1:84:7f:42:32:67:49:8a:cf: 6b:0d:29:6a:d9:35:45:d4:77:a0:67:8e:3b:cb:51: 7e:da:db:11:30:fb:ad:00:56:8b:98:93:d2:0f:e1: 10:c4:d3:44:df:6f:17:ab:c3:fb:e8:ac:0f:58:5a: 65:e6:60:cd:9c:76:9d:ec:b9:73:d9:45:92:40:8c: d5:90:b1:53:c4:5d:06:68:df:d9:a1:fe:0a:8c:48: de:61:58:6f:7d:8a:2a:08:e1:c9:7f:6d:b7:61:df: f7:05:58:35:3c:b6:1f:3a:5f:87:99:07:8f:c2:3e: 6d:26:23:38:70:7f:7d:52:53:fe:af:6a:07:86:01: d6:70:ff:b2:a2:62:22:57:b1:99:d0:c1:29:e9:b0: 26:da:b5:a4:69:1e:91:7c:e4:b1:e9:36:15:08:fc: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 69.12.25.0/24 104.245.232.0/21 172.98.208.0/21 IPv6: 2605:dd80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:92:44:ac:08:26:af:40:9b:0e:65:f3:eb:5c:a5:6e:46:94: 52:fa:93:a9:4f:33:6d:d0:d8:4b:5c:82:7f:83:5f:c9:87:16: 28:bf:ca:c4:89:79:32:7a:4e:a4:e2:7c:b3:16:9a:f8:12:5a: 5c:f8:29:9c:0d:5d:2a:f8:96:21:4a:32:6e:ab:0a:41:6c:e0: c2:7a:61:25:1a:b2:0e:ca:6c:b9:a5:74:0d:ac:37:c7:7d:92: 0e:70:0d:6f:0c:bd:9e:9b:38:8f:a1:df:0c:db:52:bf:ae:7c: 5a:ac:26:ef:f1:e4:51:51:46:b7:af:98:53:1a:4f:0a:d3:cf: 5e:54:ca:81:b5:2d:c9:59:bd:79:bc:02:20:6a:05:90:71:db: 0b:49:dc:76:7e:e1:03:85:18:fd:bb:28:2e:14:ac:fc:23:f2: e2:10:7b:45:36:e5:02:17:ab:4e:d6:0b:6d:5e:bd:20:74:29: 53:ca:8d:9f:21:1a:7c:ef:3a:00:90:25:94:4c:c5:f0:d5:1b: 22:4b:6f:71:a8:8c:a8:16:0f:66:f2:7c:bd:7e:9a:fb:60:61: be:3f:ab:6d:7f:9a:4e:82:4e:9e:83:26:6e:7f:a5:f3:b8:30: 74:fb:99:71:f7:97:ee:37:e7:9c:cb:2a:aa:a4:23:94:f4:c3: ba:f9:54:9f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEo6Dd94sTIMR/1iRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYxODAwNDUzNVoXDTI3MDkyMTAwNDUzNVowLzEtMCsGA1UEAxMk YmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYxZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgA8RP+nPEOt/SvjTopq95Bj72mPqQZ394IL TQK11XKRYPy+6nSbOEcUNaVEMpVMRiMWwleWs3DEYcEkY/LXk1L5neCb2tAfGvnk j1pUEoRFMoqHmuZ3CFwexzOeb0ShhH9CMmdJis9rDSlq2TVF1HegZ447y1F+2tsR MPutAFaLmJPSD+EQxNNE328Xq8P76KwPWFpl5mDNnHad7Llz2UWSQIzVkLFTxF0G aN/Zof4KjEjeYVhvfYoqCOHJf223Yd/3BVg1PLYfOl+HmQePwj5tJiM4cH99UlP+ r2oHhgHWcP+yomIiV7GZ0MEp6bAm2rWkaR6RfOSx6TYVCPwBYQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFM+zJ3xRCZeQNrP7z7KMhsCr8GuoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i YjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2JiNDljMjAyLWY2NDQtNGZhNi04 YTM2LTA4NDMxMjc2MWY3Mi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3 NjFmNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBABFDBkDBANo9egDBAOsYtAwDQQCAAIwBwMFACYF 3YAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAA5JErAgmr0CbDmXz61ylbkaUUvqTqU8zbdDYS1yCf4NfyYcW KL/KxIl5MnpOpOJ8sxaa+BJaXPgpnA1dKviWIUoybqsKQWzgwnphJRqyDspsuaV0 Daw3x32SDnANbwy9nps4j6HfDNtSv658Wqwm7/HkUVFGt6+YUxpPCtPPXlTKgbUt yVm9ebwCIGoFkHHbC0ncdn7hA4UY/bsoLhSs/CPy4hB7RTblAherTtYLbV69IHQp U8qNnyEafO86AJAllEzF8NUbIktvcaiMqBYPZvJ8vX6a+2Bhvj+rbX+aToJOnoMm bn+l87gwdPuZcfeX7jfnnMsqqqQjlPTDuvlUnw== -----END CERTIFICATE-----Generated at Wed Jul 2 04:57:49 2025 by rpki-client