$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer File: dc8dacf3-283f-4888-8217-ee30c6e58c44.cer (raw, json) Hash identifier: FWfXnv1KkXtyWBQQ7eQKEEq0Y7Alda+UF9gvwZ+B5vE= Subject key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285849E006B6E98FADE5D66A418D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 18:48:25 +0000 Certificate not after: Tue 09 Feb 2027 14:14:17 +0000 Subordinate resources: AS: 14434 IP: 66.185.32.0/20 IP: 66.248.160.0/19 IP: 98.142.160.0/20 IP: 104.192.184.0/21 IP: 142.147.102.0/23 IP: 162.247.24.0/21 IP: 162.253.168.0/22 IP: 172.84.192.0/18 IP: 172.102.224.0/22 IP: 198.36.28.0/22 IP: 209.221.192.0/19 IP: 2606:5a00::/32 IP: 2607:8580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:06:b6:e9:8f:ad:e5:d6:6a:41:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: May 16 18:48:25 2025 GMT Not After : Feb 9 14:14:17 2027 GMT Subject: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:88:db:f8:61:07:65:74:26:5a:8a:4e:41: 51:67:e3:ff:af:3c:3e:d4:9b:23:a3:46:b7:80:06: db:0c:12:b8:ea:56:1d:76:9b:f9:90:8b:af:3d:b3: 48:5e:3e:af:18:11:3c:91:d9:95:47:ee:86:0b:bf: 21:aa:1f:a7:71:cb:5b:ce:a5:b2:fe:22:af:90:1d: 0d:2f:e9:9d:cf:af:d8:b8:43:16:f1:80:aa:af:83: b6:58:fd:1a:3a:b5:83:5e:e8:31:00:28:bc:57:28: d0:e1:1c:bd:f6:12:29:1b:98:20:b4:01:2f:fa:ec: 2c:7c:15:d4:4a:3e:3b:b0:51:b8:ad:e6:c6:7d:aa: d6:60:97:78:d2:52:97:c5:7d:8b:0e:e2:27:a1:56: 30:99:45:8f:5a:da:12:91:c8:b5:95:57:de:e6:76: 4b:4a:2a:90:6e:a2:ee:3d:04:f0:17:6c:52:fa:91: 0b:6b:a5:ea:ae:7a:f6:4a:05:a9:fe:b8:37:f1:ee: 03:f4:82:20:32:87:6e:54:74:6b:74:16:bf:48:bd: e6:43:37:4f:19:3a:46:c0:f6:70:79:64:97:81:6d: ec:d4:3b:8b:b9:8e:20:c1:0e:e1:c8:9d:7c:a9:ad: 96:c4:7f:c8:8b:04:77:e5:63:8e:35:99:e1:e3:33: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 66.185.32.0/20 66.248.160.0/19 98.142.160.0/20 104.192.184.0/21 142.147.102.0/23 162.247.24.0/21 162.253.168.0/22 172.84.192.0/18 172.102.224.0/22 198.36.28.0/22 209.221.192.0/19 IPv6: 2606:5a00::/32 2607:8580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14434 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:95:d3:5f:e7:ff:af:9a:aa:37:58:99:c0:ab:e3:90:b1:f8: 19:a6:aa:f3:67:62:54:e8:2d:44:97:a3:8e:72:b3:c0:11:ad: d0:15:8c:39:eb:d3:f8:d3:65:48:65:a7:de:44:f7:e0:0c:d4: 14:c0:5e:25:48:8c:46:9e:d2:3d:c6:8f:00:9b:73:53:1c:08: 0a:b9:c9:9c:0a:17:11:2f:d5:80:c2:e6:02:75:02:02:58:33: c6:f3:5e:14:38:0c:33:07:90:c6:f8:cb:22:dd:85:c0:4c:cf: 6f:fb:69:6f:03:67:01:37:72:96:b5:f5:f9:6f:4a:fa:7c:d7: 34:22:08:88:cb:70:10:65:4c:7a:aa:d9:af:bd:a3:2e:b1:5e: fa:62:0a:84:5a:bb:bc:44:f0:fe:52:be:ce:b3:c0:7f:9b:43: 00:88:97:ef:f9:28:a2:98:e4:a9:9d:69:d1:ea:1e:de:3e:06: 57:e3:72:80:7a:74:50:1b:47:a0:ce:61:a1:f3:70:13:59:24: 97:89:97:cb:91:ea:fd:41:de:c7:22:d2:32:fc:05:3e:af:d5: 3c:4e:23:61:e1:b0:3c:d4:13:af:1d:32:cc:0a:97:fa:64:7f: 0e:78:ef:c4:64:15:65:ba:4b:8e:f0:e7:85:11:b1:56:a3:eb: 01:44:a0:fc -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEngBrbpj63l1mpBjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDUxNjE4NDgyNVoXDTI3MDIwOTE0MTQxN1owLzEtMCsGA1UEAxMk ZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqI2/hhB2V0JlqKTkFRZ+P/rzw+1Jsjo0a3 gAbbDBK46lYddpv5kIuvPbNIXj6vGBE8kdmVR+6GC78hqh+ncctbzqWy/iKvkB0N L+mdz6/YuEMW8YCqr4O2WP0aOrWDXugxACi8VyjQ4Ry99hIpG5ggtAEv+uwsfBXU Sj47sFG4rebGfarWYJd40lKXxX2LDuInoVYwmUWPWtoSkci1lVfe5nZLSiqQbqLu PQTwF2xS+pELa6Xqrnr2SgWp/rg38e4D9IIgModuVHRrdBa/SL3mQzdPGTpGwPZw eWSXgW3s1DuLuY4gwQ7hyJ18qa2WxH/IiwR35WOONZnh4zOl5QIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFLx4iIoMxCbcdNxToV/wO/hK11ETMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k YzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RjOGRhY2YzLTI4M2YtNDg4OC04 MjE3LWVlMzBjNmU1OGM0NC9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZl NThjNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwcQYIKwYBBQUH AQcBAf8EYjBgMEgEAgABMEIDBARCuSADBAVC+KADBARijqADBANowLgDBAGOk2YD BAOi9xgDBAKi/agDBAasVMADBAKsZuADBALGJBwDBAXR3cAwFAQCAAIwDgMFACYG WgADBQAmB4WAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjhiMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADuV 01/n/6+aqjdYmcCr45Cx+BmmqvNnYlToLUSXo45ys8ARrdAVjDnr0/jTZUhlp95E 9+AM1BTAXiVIjEae0j3GjwCbc1McCAq5yZwKFxEv1YDC5gJ1AgJYM8bzXhQ4DDMH kMb4yyLdhcBMz2/7aW8DZwE3cpa19flvSvp81zQiCIjLcBBlTHqq2a+9oy6xXvpi CoRau7xE8P5Svs6zwH+bQwCIl+/5KKKY5KmdadHqHt4+BlfjcoB6dFAbR6DOYaHz cBNZJJeJl8uR6v1B3sci0jL8BT6v1TxOI2HhsDzUE68dMswKl/pkfw5478RkFWW6 S47w54URsVaj6wFEoPw= -----END CERTIFICATE-----Generated at Sat Jul 5 18:53:55 2025 by rpki-client