$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer File: f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer (raw, json) Hash identifier: Iyeyj0gl2XAvS/TxeEM4eSEoFExaYykYNAGYuHvMy14= Subject key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A733D79759192963717A95580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 12:22:35 +0000 Certificate not after: Mon 11 Oct 2027 12:22:35 +0000 Subordinate resources: AS: 5119 IP: 192.104.81.0/24 IP: 192.160.189.0/24 IP: 204.106.17.0 -- 204.106.31.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:3d:79:75:91:92:96:37:17:a9:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 8 12:22:35 2025 GMT Not After : Oct 11 12:22:35 2027 GMT Subject: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:fc:04:3e:12:61:27:d4:d3:23:dc:ef:6e: 6b:0f:49:36:03:54:bc:00:47:45:23:89:44:de:d3: 38:53:3a:e0:3b:bd:4a:96:1b:7b:5a:fb:f5:c1:c2: 2e:6c:9b:48:f7:39:b3:60:f7:7f:9b:1f:05:5c:4e: 0a:3e:36:14:f7:41:5d:8a:2a:36:ea:ec:ad:3e:1f: 47:17:d3:d7:c5:a7:c8:84:e5:8b:97:b4:43:59:57: 9a:7b:ae:5b:e1:d2:dd:a2:0d:18:1b:c7:34:92:c6: ba:19:a1:4a:05:9d:9e:38:6c:fc:9e:eb:5b:9e:b3: d8:b2:fd:a5:ec:53:1a:0d:16:de:10:a9:48:ee:0c: 37:74:21:0d:82:4f:71:aa:74:b4:88:55:95:09:6d: 43:a5:a8:5e:35:f6:ac:e8:09:12:f9:52:03:86:7c: d3:2c:bb:2a:da:62:3b:e3:79:08:e1:3d:63:c6:71: 4b:8d:a7:7b:3c:cd:64:c4:8f:58:9e:a0:fc:f7:ab: 8e:ab:2a:01:ca:07:ba:3b:88:f7:b3:d3:28:5e:db: 35:45:1d:70:90:d2:0a:2f:67:11:ae:5c:e4:27:b6: b6:f2:94:54:7a:da:da:37:c2:3c:a0:31:b9:25:57: 1b:39:2b:e8:7c:52:48:82:5c:5f:76:d5:05:a7:73: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.104.81.0/24 192.160.189.0/24 204.106.17.0-204.106.31.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d7:ba:25:40:a7:21:1d:21:99:1f:51:12:22:45:9e:fd:ff: cc:b2:3f:dc:6a:2b:b5:05:89:a8:e2:1f:a3:fe:09:72:7b:fc: 83:30:3b:05:9c:5c:f8:ef:00:7a:02:91:03:f2:72:9a:af:a2: 73:e6:43:ae:49:d3:07:9b:df:64:09:0b:48:8e:ce:2e:38:c2: 55:bd:0e:b9:36:f8:f1:33:df:27:dc:2d:78:91:8e:b4:25:84: 7c:55:00:e7:06:10:6a:57:58:ce:9b:af:da:96:fe:88:54:55: 1d:89:5c:fc:49:6c:73:d5:fe:f3:d7:fa:d6:56:0b:4e:ed:79: 0f:7c:75:61:48:ff:a4:9a:33:a2:d0:fb:98:84:7c:f7:47:43: 73:5c:ec:25:f9:85:41:42:6c:ba:96:e1:34:67:04:36:3e:51: 54:b0:dd:87:2b:d6:b3:66:61:c7:3b:9e:13:31:f9:36:19:66: 27:12:1c:85:66:66:10:cd:ed:e7:e3:00:fa:b8:f1:55:22:4c: 9b:d5:20:60:dd:f8:4f:8e:a0:5c:4f:fc:22:c9:03:58:10:3a: 01:f9:b5:5f:d6:8f:50:99:a7:3d:1b:34:72:f6:6e:ab:8d:2d: d8:e2:c4:75:e2:c8:54:95:8b:27:cf:b4:24:37:19:cb:48:0b: 3a:99:0b:53 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEpzPXl1kZKWNxepVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcwODEyMjIzNVoXDTI3MTAxMTEyMjIzNVowLzEtMCsGA1UEAxMk ZjhmNmFjNzktYmVlZS00ZWJhLWE2OWEtYTNmMjhmNjI1ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2T8BD4SYSfU0yPc725rD0k2A1S8AEdFI4lE 3tM4UzrgO71Klht7Wvv1wcIubJtI9zmzYPd/mx8FXE4KPjYU90Fdiio26uytPh9H F9PXxafIhOWLl7RDWVeae65b4dLdog0YG8c0ksa6GaFKBZ2eOGz8nutbnrPYsv2l 7FMaDRbeEKlI7gw3dCENgk9xqnS0iFWVCW1DpaheNfas6AkS+VIDhnzTLLsq2mI7 43kI4T1jxnFLjad7PM1kxI9YnqD896uOqyoByge6O4j3s9MoXts1RR1wkNIKL2cR rlzkJ7a28pRUetraN8I8oDG5JVcbOSvofFJIglxfdtUFp3MmnQIDAQABo4IELjCC BCowHQYDVR0OBBYEFDez6HWEOq5VzPP1J+5H3QqxDwODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m OGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2MjVmNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Y4ZjZhYzc5LWJlZWUtNGViYS1h NjlhLWEzZjI4ZjYyNWY0ZS9mOGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2 MjVmNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADAaFEDBADAoL0wDAMEAMxqEQMEBcxqADAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIT/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT17olQKchHSGZH1ESIkWe /f/Msj/caiu1BYmo4h+j/glye/yDMDsFnFz47wB6ApED8nKar6Jz5kOuSdMHm99k CQtIjs4uOMJVvQ65NvjxM98n3C14kY60JYR8VQDnBhBqV1jOm6/alv6IVFUdiVz8 SWxz1f7z1/rWVgtO7XkPfHVhSP+kmjOi0PuYhHz3R0NzXOwl+YVBQmy6luE0ZwQ2 PlFUsN2HK9azZmHHO54TMfk2GWYnEhyFZmYQze3n4wD6uPFVIkyb1SBg3fhPjqBc T/wiyQNYEDoB+bVf1o9Qmac9GzRy9m6rjS3Y4sR14shUlYsnz7QkNxnLSAs6mQtT -----END CERTIFICATE-----Generated at Fri Jul 11 23:53:31 2025 by rpki-client