$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer File: 6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer (raw, json) Hash identifier: 8QjKWj3RebOngpli9bH4n4mWgL9n8k+0/zcVNcreKUo= Subject key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63 Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 Certificate issuer: /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Certificate serial: 010D0C9F4328584A01CEB31E3A6B5BD20C8B9900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer Manifest: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft caRepository: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 28 May 2025 21:13:03 +0000 Certificate not after: Tue 31 Aug 2027 21:13:03 +0000 Subordinate resources: AS: 51818 AS: 54625 AS: 62489 AS: 62853 IP: 23.133.8.0/24 IP: 23.149.152.0/24 IP: 23.149.232.0/24 IP: 140.235.121.0/24 IP: 149.112.26.0/24 IP: 165.140.142.0/24 IP: 216.146.28.0/22 IP: 2001:503:ff44::/48 IP: 2001:504:130::/48 IP: 2001:506:33::/48 IP: 2602:815:7000::/44 IP: 2602:fbf6::/36 IP: 2602:fc23::/36 IP: 2606:b0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:ce:b3:1e:3a:6b:5b:d2:0c:8b:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Validity Not Before: May 28 21:13:03 2025 GMT Not After : Aug 31 21:13:03 2027 GMT Subject: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:d1:06:f6:76:84:eb:73:09:64:ee:82:84: 8e:31:e1:cf:c7:d7:74:3d:15:cc:ba:1c:63:19:29: 69:f7:13:10:cb:ec:13:94:3f:63:d0:c3:26:44:2f: 48:f1:af:05:0b:52:91:53:40:6e:ff:ae:ef:02:89: df:16:4b:17:18:d6:7b:4a:58:59:00:6d:e4:23:4f: 39:6e:7f:eb:e6:a9:0d:36:7e:3f:e8:b1:cb:a3:5f: 1d:f8:a4:3a:ec:db:87:ac:3e:1b:8a:a7:b5:1d:dd: c5:3a:2b:6c:57:c2:9c:80:44:40:e3:e5:9b:7f:f1: d6:60:06:0c:4c:6e:4d:d3:48:e5:3b:54:66:8f:91: f0:1e:ca:1a:92:00:a1:19:53:b8:2c:a1:b1:fe:e4: 4a:21:81:d9:4f:7f:ad:94:26:55:02:b2:f4:49:5d: 3c:74:77:a1:b4:03:b2:2f:cd:b7:af:35:e1:25:8d: 8a:8d:7f:22:54:a8:b4:40:42:24:39:54:bf:1b:46: 2d:44:7e:21:92:aa:9d:f4:75:08:53:65:ec:92:82: de:dd:8f:9d:e3:0d:3e:c8:a3:82:30:0f:2f:9f:ce: 34:f3:25:c7:28:f3:67:c8:be:8c:83:bf:a3:8b:68: a9:72:5c:a2:b5:3a:b9:f3:e5:f5:88:b7:27:36:9b: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl X509v3 Authority Key Identifier: keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer sbgp-ipAddrBlock: critical IPv4: 23.133.8.0/24 23.149.152.0/24 23.149.232.0/24 140.235.121.0/24 149.112.26.0/24 165.140.142.0/24 216.146.28.0/22 IPv6: 2001:503:ff44::/48 2001:504:130::/48 2001:506:33::/48 2602:815:7000::/44 2602:fbf6::/36 2602:fc23::/36 2606:b0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51818 54625 62489 62853 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a5:ca:cd:28:55:00:4a:01:8d:5b:bb:6d:36:81:79:92:4f: a3:8f:58:db:e3:25:c9:98:d2:00:0d:9a:7d:ab:16:2b:6a:36: 3d:55:d3:43:b6:10:f2:99:23:a6:cb:c9:e0:d8:5d:ef:f8:4a: d9:b9:8e:c1:22:7b:2b:3e:35:60:16:b9:89:20:52:2c:d5:ee: fa:8d:46:83:47:e0:51:d5:7a:04:9e:97:ef:7b:30:12:b1:43: 97:a9:97:4c:bf:00:86:ad:c1:91:00:07:a1:c7:c4:f4:1d:77: 53:1b:00:76:0d:b3:83:69:5f:eb:82:82:0b:3d:52:2b:18:ff: 4b:28:58:f0:cc:25:68:3a:c3:e6:a5:81:d4:79:9c:1c:48:45: 29:5c:f8:fe:2c:1c:46:77:f0:21:12:d9:4c:fb:3c:04:1d:33: 62:70:b0:67:ac:dd:5c:3a:77:b5:c2:cc:8e:99:79:1f:d0:6c: ba:74:01:d6:78:84:ea:5f:2e:04:75:76:17:bb:e9:a8:82:48: 76:ec:31:b8:c8:27:50:26:cb:f5:a2:3c:c9:d5:15:36:b5:c1: 06:07:ef:6b:1c:4b:15:d4:cf:de:6a:0f:ac:8e:6a:4d:07:01: 59:9e:00:70:5a:9e:eb:1f:87:39:1c:1b:10:90:ce:0c:73:7c: d3:da:3c:88 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEoBzrMeOmtb0gyLmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz ZjM3MB4XDTI1MDUyODIxMTMwM1oXDTI3MDgzMTIxMTMwM1owPTE7MDkGA1UEAxMy NjUwNmE2NmVkMGI1NjY5MTA3YmZlYzE4NTE4ZjJhZDI3ODllY2Y1NGU0MGE3OWQz NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpdEG9naE63MJZO6C hI4x4c/H13Q9Fcy6HGMZKWn3ExDL7BOUP2PQwyZEL0jxrwULUpFTQG7/ru8Cid8W SxcY1ntKWFkAbeQjTzluf+vmqQ02fj/oscujXx34pDrs24esPhuKp7Ud3cU6K2xX wpyAREDj5Zt/8dZgBgxMbk3TSOU7VGaPkfAeyhqSAKEZU7gsobH+5EohgdlPf62U JlUCsvRJXTx0d6G0A7IvzbevNeEljYqNfyJUqLRAQiQ5VL8bRi1EfiGSqp30dQhT ZeySgt7dj53jDT7Io4IwDy+fzjTzJcco82fIvoyDv6OLaKlyXKK1Ornz5fWItyc2 m10VAgMBAAGjggQ4MIIENDAdBgNVHQ4EFgQUJpaMYVppG0l1TLZ4pN2fxak4pmMw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdl ZTViYmVkMzEvNS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEv NS8yNjk2OEM2MTVBNjkxQjQ5NzU0Q0I2NzhBNEREOUZDNUE5MzhBNjYzLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3 Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1 LWIwNGZkZDY2M2YzNy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRmZGQ2NjNm MzcuY3JsMB8GA1UdIwQYMBaAFALoW6tHvtpoatRAVZSEJlneb6tQMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk NjYzZjM3LmNlcjCBhgYIKwYBBQUHAQcBAf8EdzB1MDAEAgABMCoDBAAXhQgDBAAX lZgDBAAXlegDBACM63kDBACVcBoDBACljI4DBALYkhwwQQQCAAIwOwMHACABBQP/ RAMHACABBQQBMAMHACABBQYAMwMHBCYCCBVwAAMGBCYC+/YAAwYEJgL8IwADBQAm BrDAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDKagIDANVhAgMA9BkCAwD1hTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJpcrNKFUASgGNW7ttNoF5kk+jj1jb4yXJmNIADZp9qxYrajY9VdND thDymSOmy8ng2F3v+ErZuY7BInsrPjVgFrmJIFIs1e76jUaDR+BR1XoEnpfvezAS sUOXqZdMvwCGrcGRAAehx8T0HXdTGwB2DbODaV/rgoILPVIrGP9LKFjwzCVoOsPm pYHUeZwcSEUpXPj+LBxGd/AhEtlM+zwEHTNicLBnrN1cOne1wsyOmXkf0Gy6dAHW eITqXy4EdXYXu+mogkh27DG4yCdQJsv1ojzJ1RU2tcEGB+9rHEsV1M/eag+sjmpN BwFZngBwWp7rH4c5HBsQkM4Mc3zT2jyI -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:08 2025 by rpki-client