$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer File: a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer (raw, json) Hash identifier: PupH7Hnxdnk/P1ao4Eox9PGyboHdZUog4ljbXzcZEFo= Subject key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584984976768E2E96258BCDEB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 00:45:35 +0000 Certificate not after: Sun 18 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 6145 IP: 23.157.136.0/24 IP: 172.110.143.0/24 IP: 2602:fc8a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:97:67:68:e2:e9:62:58:bc:de:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 14 00:45:35 2025 GMT Not After : Jul 18 00:45:35 2027 GMT Subject: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:fa:25:72:ce:bd:1d:3b:c2:b8:a7:8c:b4: 0c:48:35:7f:d3:e2:76:04:d1:ef:fe:fc:00:56:d3: b3:8b:93:cf:5c:ed:71:c9:88:f5:59:35:5a:33:57: b4:64:0d:54:e3:01:6e:e7:4d:ee:ff:38:e3:2d:93: 7c:1f:04:75:4c:23:6e:7c:c9:5e:bc:42:18:8f:0f: 79:2e:28:47:a7:08:2e:1e:f4:92:d1:77:9d:95:67: ad:b4:d0:30:62:81:a9:2f:61:2f:72:08:2b:39:d4: 56:8b:a2:76:5e:cf:e2:bd:ed:89:9d:5e:fe:77:48: 8c:ea:8d:6e:d0:ef:37:0d:f4:ea:ef:da:59:22:05: f4:63:75:ad:d3:18:7a:3a:e5:82:e1:58:48:f1:48: 25:8c:98:19:44:3b:f3:42:60:71:e8:d8:36:5c:ec: 3c:f7:b2:30:87:5f:f8:d9:c1:69:af:67:fd:37:7b: 84:e3:dd:4e:e7:9b:74:98:60:92:d6:57:bc:58:19: bb:0a:50:e4:fa:57:f5:79:40:e3:e6:96:ca:27:f7: 79:07:39:c2:6c:44:ae:20:dd:22:09:5c:dc:05:a7: 6f:3d:c3:8b:a0:5e:a6:95:00:a5:87:a3:19:37:14: 46:70:8f:f9:a6:85:2b:db:46:f5:61:6d:e5:f2:c9: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.157.136.0/24 172.110.143.0/24 IPv6: 2602:fc8a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6145 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a8:72:15:58:f6:13:f3:d3:77:77:d0:cb:52:50:11:f8:97: ff:de:8c:af:78:1c:61:5f:06:71:56:21:88:2a:02:f8:51:d7: f5:35:a1:86:04:d4:f3:20:ab:da:9c:53:1c:a5:4a:f6:45:b9: e1:62:96:f9:4d:8d:29:a0:83:9b:de:47:08:d4:52:72:de:80: 4b:c1:81:ba:3f:4f:5d:59:fd:8c:ac:2a:2b:3c:76:80:b9:bb: 6c:bd:8f:a9:99:2f:9c:33:14:9d:db:74:ba:b6:a7:c2:bc:6d: ff:88:d7:48:5e:9c:93:2f:06:41:3c:1b:88:c5:c1:fc:68:69: 5e:8a:63:70:c5:9e:c3:6e:da:dc:cb:9a:2e:e8:30:f2:81:10: f8:e3:2e:61:98:f0:33:64:be:99:05:97:77:88:94:8f:e1:c4: e6:e0:16:4c:3f:ed:e0:71:1c:60:e3:0a:9b:c0:d6:d8:42:6c: e3:78:2b:22:14:2a:86:2e:f6:fd:db:15:88:10:04:cd:9b:9f: 58:99:50:6a:e8:74:e3:82:7a:71:ea:ca:d2:84:b4:61:35:e1: cc:fd:be:17:b1:b5:2e:a6:42:20:2c:44:7f:e9:0a:8e:e0:75: 49:8f:58:76:23:11:31:d3:f9:e6:15:df:1d:db:50:a1:1c:f9: a6:bb:42:8c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEmEl2do4uliWLzetgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQxNDAwNDUzNVoXDTI3MDcxODAwNDUzNVowLzEtMCsGA1UEAxMk YTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgzNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRf6JXLOvR07wrinjLQMSDV/0+J2BNHv/vwA VtOzi5PPXO1xyYj1WTVaM1e0ZA1U4wFu503u/zjjLZN8HwR1TCNufMlevEIYjw95 LihHpwguHvSS0XedlWettNAwYoGpL2EvcggrOdRWi6J2Xs/ive2JnV7+d0iM6o1u 0O83DfTq79pZIgX0Y3Wt0xh6OuWC4VhI8UgljJgZRDvzQmBx6Ng2XOw897Iwh1/4 2cFpr2f9N3uE491O55t0mGCS1le8WBm7ClDk+lf1eUDj5pbKJ/d5BznCbESuIN0i CVzcBadvPcOLoF6mlQClh6MZNxRGcI/5poUr20b1YW3l8smVBwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAMUgRO8PE5x8p3dYwaC9HgfYe+bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h NjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E2MjA2YmQwLWU5N2YtNGJjNC05 ZTA2LWUxYmI5YjM4MzYyNC9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIz ODM2MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXnYgDBACsbo8wDgQCAAIwCAMGACYC/IoAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhgBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFyochVY9hPz03d30MtS UBH4l//ejK94HGFfBnFWIYgqAvhR1/U1oYYE1PMgq9qcUxylSvZFueFilvlNjSmg g5veRwjUUnLegEvBgbo/T11Z/YysKis8doC5u2y9j6mZL5wzFJ3bdLq2p8K8bf+I 10henJMvBkE8G4jFwfxoaV6KY3DFnsNu2tzLmi7oMPKBEPjjLmGY8DNkvpkFl3eI lI/hxObgFkw/7eBxHGDjCpvA1thCbON4KyIUKoYu9v3bFYgQBM2bn1iZUGrodOOC enHqytKEtGE14cz9vhextS6mQiAsRH/pCo7gdUmPWHYjETHT+eYV3x3bUKEc+aa7 Qow= -----END CERTIFICATE-----Generated at Wed Jul 9 05:48:54 2025 by rpki-client