$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer File: daef5cc1-9697-4016-a7b1-84106520128a.cer (raw, json) Hash identifier: s0yErOikEbHbhM+b9ST53ZGsUwHTDWQOQl384QZshVs= Subject key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A600FFBA37C6577E0BDA86780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 15:30:34 +0000 Certificate not after: Sat 13 Feb 2027 13:45:33 +0000 Subordinate resources: AS: 36318 IP: 23.160.88.0/24 IP: 104.192.72.0/24 IP: 2602:815:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:0f:fb:a3:7c:65:77:e0:bd:a8:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 1 15:30:34 2025 GMT Not After : Feb 13 13:45:33 2027 GMT Subject: CN=daef5cc1-9697-4016-a7b1-84106520128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:bf:9d:62:72:36:00:40:c6:c5:0e:9c:2c: 99:6f:cd:57:8b:8a:e1:6d:bf:bc:6c:7d:a8:ca:0d: 3f:02:3f:c4:85:99:50:33:89:71:b7:24:10:b9:0a: 3a:77:ce:3f:54:32:b2:4a:2c:4e:8a:62:4d:59:dc: ab:76:be:12:e0:fb:c2:fe:e2:49:2b:d7:47:4d:3c: 62:b0:fd:b8:31:24:b3:cb:58:ef:cf:bd:4a:dd:b3: d7:23:0d:54:e4:c2:93:00:45:ee:cd:ce:1b:00:6a: 5c:0b:f5:08:96:66:3c:06:89:71:6a:ef:96:07:fc: 70:67:49:71:1c:19:41:ea:a6:47:ae:b4:57:dd:dd: 2f:e1:20:f5:ba:54:21:0b:96:d6:41:79:a2:fa:15: 77:39:1d:43:50:48:9e:3a:64:09:c5:dc:dd:c8:e8: 80:9e:12:bd:78:81:cc:36:ae:51:b6:44:ef:7a:cd: 35:5a:68:2d:eb:0f:d5:2f:cb:7d:cf:4d:75:e3:6a: aa:7d:49:5b:31:74:6e:d3:77:e3:83:a1:31:41:0b: e8:ed:df:0b:c8:16:ac:b8:f0:f6:9c:e8:c9:83:c4: 1d:1b:2c:09:88:98:db:ea:e5:b9:c9:1f:9c:f6:86: d0:f4:8e:44:3a:9a:3d:f6:d4:ad:37:94:e0:96:69: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.88.0/24 104.192.72.0/24 IPv6: 2602:815:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36318 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:38:eb:df:f5:92:c0:1a:76:5c:57:e6:34:71:ad:d1:d6:88: 18:77:10:14:d1:64:93:f1:b9:a9:9d:52:82:69:d1:e9:c7:4e: f1:79:50:1f:5a:68:28:3d:de:0a:a5:9a:ec:09:71:c6:d1:75: 1c:19:b3:9e:ac:2f:5e:4e:31:2d:d9:f5:16:c5:d4:3a:4d:57: 21:76:a7:aa:f6:b9:33:27:14:5c:da:a7:47:97:5d:26:6f:67: 50:92:38:8f:35:81:0f:b3:b8:81:a7:cf:09:a4:0a:ae:29:60: 60:aa:cd:af:1f:24:f4:59:4e:3a:a5:8b:60:5b:83:9b:ad:7f: 92:0d:90:d8:01:ae:01:4d:00:7a:c0:3d:c0:e2:7f:7c:a9:c4: ff:0a:1e:93:25:9c:e4:f9:39:34:b2:2c:b6:20:66:97:6d:58: 09:51:31:f7:c6:7b:1c:61:b4:07:39:d5:93:e7:0c:93:e8:35: f2:08:a1:38:4f:5c:f3:b7:34:9c:c9:25:18:35:dc:27:3b:c1: d8:9e:92:e4:ad:22:c5:0d:fb:f9:ff:18:52:a6:c1:b1:d8:f3: 17:2d:c6:58:2d:ce:1e:be:8c:ab:5e:5c:b6:49:5d:32:e7:e5: e5:78:52:94:cf:ba:76:93:68:5c:0a:f6:2b:b3:97:31:c9:0c: be:ec:34:4e -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEpgD/ujfGV34L2oZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcwMTE1MzAzNFoXDTI3MDIxMzEzNDUzM1owLzEtMCsGA1UEAxMk ZGFlZjVjYzEtOTY5Ny00MDE2LWE3YjEtODQxMDY1MjAxMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaW/nWJyNgBAxsUOnCyZb81Xi4rhbb+8bH2o yg0/Aj/EhZlQM4lxtyQQuQo6d84/VDKySixOimJNWdyrdr4S4PvC/uJJK9dHTTxi sP24MSSzy1jvz71K3bPXIw1U5MKTAEXuzc4bAGpcC/UIlmY8Bolxau+WB/xwZ0lx HBlB6qZHrrRX3d0v4SD1ulQhC5bWQXmi+hV3OR1DUEieOmQJxdzdyOiAnhK9eIHM Nq5RtkTves01Wmgt6w/VL8t9z01142qqfUlbMXRu03fjg6ExQQvo7d8LyBasuPD2 nOjJg8QdGywJiJjb6uW5yR+c9obQ9I5EOpo99tStN5TglmlfrQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFFORJXxkCoPnlHnyhObK02dNCiWQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k YWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUyMDEyOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2RhZWY1Y2MxLTk2OTctNDAxNi1h N2IxLTg0MTA2NTIwMTI4YS9kYWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUy MDEyOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXoFgDBABowEgwDwQCAAIwCQMHBCYCCBWQADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAjd4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAjjr3/WSwBp2XFfm NHGt0daIGHcQFNFkk/G5qZ1SgmnR6cdO8XlQH1poKD3eCqWa7AlxxtF1HBmznqwv Xk4xLdn1FsXUOk1XIXanqva5MycUXNqnR5ddJm9nUJI4jzWBD7O4gafPCaQKrilg YKrNrx8k9FlOOqWLYFuDm61/kg2Q2AGuAU0AesA9wOJ/fKnE/woekyWc5Pk5NLIs tiBml21YCVEx98Z7HGG0BznVk+cMk+g18gihOE9c87c0nMklGDXcJzvB2J6S5K0i xQ37+f8YUqbBsdjzFy3GWC3OHr6Mq15ctkldMufl5XhSlM+6dpNoXAr2K7OXMckM vuw0Tg== -----END CERTIFICATE-----Generated at Wed Jul 9 20:48:25 2025 by rpki-client