$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer File: f65e9b5c-056e-45d3-89b2-63cb62b84210.cer (raw, json) Hash identifier: SbEHE9xU+zTwLArNSKoT9H72Yw1C0qNNwj8mXZi3iBk= Subject key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A6C4E30F854CF28E6621977D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 30197 IP: 206.201.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:30:f8:54:cf:28:e6:62:19:77:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:a0:18:fc:ad:bb:14:54:8b:2c:78:9a:03: 81:87:d6:63:e6:6d:72:f4:b0:ca:48:07:d4:b7:1e: d9:43:e0:25:ec:b0:71:c3:2f:b2:b2:cb:3c:3a:dc: 53:06:f5:3d:5d:2d:69:36:cb:82:3a:99:68:d2:86: 92:01:9b:de:60:1f:0a:61:8b:ce:d0:eb:22:28:9f: 46:c2:86:3c:62:2c:90:cb:a2:b4:1f:7a:da:b1:12: d5:2b:c8:62:4c:a1:f5:6a:27:7f:38:01:64:92:f4: 71:89:10:a2:6f:7d:c6:ad:a7:41:55:45:e5:90:bc: 1e:df:7f:a6:49:86:56:2d:bd:f1:42:08:35:bb:16: 7f:7a:68:3f:b6:ce:c6:8b:ea:2a:8e:8f:1b:10:44: ec:95:f0:70:f5:0f:e4:02:bf:39:9c:f7:32:ee:d6: 0c:0a:b0:a6:ae:52:92:b7:a2:8f:29:53:22:7f:59: ad:0c:f0:d9:27:7f:2e:9e:bd:6d:ea:5e:b7:51:d6: f6:73:83:f4:b2:c6:f7:cd:2f:5e:d7:96:7e:5b:f6: 2c:9e:eb:0c:cf:d1:36:91:25:22:87:12:23:0a:b8: 1f:21:03:85:8b:ca:08:d7:fd:53:e7:3d:1b:b4:87: c8:2c:96:e8:24:71:97:85:36:83:92:f2:79:d1:39: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 206.201.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30197 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:78:9d:55:c6:4a:7c:85:12:41:3a:c7:a8:b7:41:97:6d:70: 22:df:67:48:c2:59:6d:c0:f9:99:a5:37:87:9b:7f:56:57:0b: 60:f8:94:84:27:b3:2b:4d:75:32:6e:53:3a:e0:02:cd:a2:da: 24:3d:aa:cb:dd:a0:18:fd:28:6c:fc:2f:d8:6c:73:c0:9b:03: f8:1d:b2:84:c3:7f:b2:1b:d3:3a:dc:88:80:3e:9a:8f:d2:30: b6:65:16:c1:8d:e0:f6:e3:12:07:50:19:0d:c5:3b:49:d5:14: 6d:e0:f9:5a:a5:d5:86:1d:53:67:46:3c:87:90:a9:78:37:fb: 7c:e3:94:6d:15:31:83:aa:1b:66:ec:f4:5f:5c:ee:80:d7:78: c0:b8:8a:dc:3b:b9:13:0e:4f:aa:c1:77:ad:8b:b0:83:8d:24: 9c:2b:6a:66:97:c5:2d:bc:e3:f0:9c:ff:83:59:33:22:e1:0d: 93:39:d5:6c:74:53:9e:08:fd:2a:d4:ff:6e:37:12:4d:7a:47: f9:d0:ec:c5:94:80:4c:f6:00:b6:56:5b:ea:95:39:bd:a6:d7: 4a:e2:4a:53:3c:02:3b:e4:6a:70:2a:ab:07:c5:70:95:2b:87: 75:38:29:0e:56:5b:e5:b6:ab:81:15:c4:84:ad:1b:c2:a3:ae: 90:b1:fe:69 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEpsTjD4VM8o5mIZd9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk ZjY1ZTliNWMtMDU2ZS00NWQzLTg5YjItNjNjYjYyYjg0MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs+gGPytuxRUiyx4mgOBh9Zj5m1y9LDKSAfU tx7ZQ+Al7LBxwy+ysss8OtxTBvU9XS1pNsuCOplo0oaSAZveYB8KYYvO0OsiKJ9G woY8YiyQy6K0H3rasRLVK8hiTKH1aid/OAFkkvRxiRCib33GradBVUXlkLwe33+m SYZWLb3xQgg1uxZ/emg/ts7Gi+oqjo8bEETslfBw9Q/kAr85nPcy7tYMCrCmrlKS t6KPKVMif1mtDPDZJ38unr1t6l63Udb2c4P0ssb3zS9e15Z+W/YsnusMz9E2kSUi hxIjCrgfIQOFi8oI1/1T5z0btIfILJboJHGXhTaDkvJ50Tkw8QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKOaUwjaTuKFNWbw6o20uhjntGZCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJiODQyMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y2NWU5YjVjLTA1NmUtNDVkMy04 OWIyLTYzY2I2MmI4NDIxMC9mNjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJi ODQyMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATOyaAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dfUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAf3idVcZKfIUSQTrHqLdBl21wIt9nSMJZbcD5maU3h5t/VlcL YPiUhCezK011Mm5TOuACzaLaJD2qy92gGP0obPwv2GxzwJsD+B2yhMN/shvTOtyI gD6aj9IwtmUWwY3g9uMSB1AZDcU7SdUUbeD5WqXVhh1TZ0Y8h5CpeDf7fOOUbRUx g6obZuz0X1zugNd4wLiK3Du5Ew5PqsF3rYuwg40knCtqZpfFLbzj8Jz/g1kzIuEN kznVbHRTngj9KtT/bjcSTXpH+dDsxZSATPYAtlZb6pU5vabXSuJKUzwCO+RqcCqr B8VwlSuHdTgpDlZb5bargRXEhK0bwqOukLH+aQ== -----END CERTIFICATE-----Generated at Wed Jul 9 02:56:38 2025 by rpki-client