$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db.cer File: 06b5da51-84a0-4750-bb07-c98aff0510db.cer (raw, json) Hash identifier: tx8oNcXBPv9sZRtBZVLm3vEkufWo0AY67XFzHuvpMig= Subject key identifier: 5F:EF:8B:20:E4:A6:31:28:01:4E:1F:84:BD:0D:D0:79:36:D4:9E:83 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4022993646F0F43C6B4A0880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/06b5da51-84a0-4750-bb07-c98aff0510db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 05:02:13 +0000 Certificate not after: Thu 23 Sep 2027 05:02:13 +0000 Subordinate resources: IP: 23.167.184.0/24 IP: 2602:f9ca::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:22:99:36:46:f0:f4:3c:6b:4a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 20 05:02:13 2025 GMT Not After : Sep 23 05:02:13 2027 GMT Subject: CN=06b5da51-84a0-4750-bb07-c98aff0510db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:c9:fb:84:8c:9c:e0:67:4a:09:5c:c3:fa: 21:3a:0a:7e:69:2f:dc:c3:7c:7a:09:ad:da:36:b9: fc:c6:42:d4:98:93:94:c5:1e:c2:9e:dd:b0:22:c3: a6:32:00:62:6d:7e:9e:48:ed:85:80:1a:6a:45:b1: 4c:73:9e:83:9e:8a:e1:d1:54:24:53:25:94:da:be: 4d:94:d5:d7:16:f5:c8:40:33:60:99:7d:b1:2a:da: b4:71:53:1e:ca:82:09:b6:ec:96:2e:96:df:e9:fa: 4d:5f:f3:0b:8d:b0:90:0f:4f:a6:08:68:a3:ff:59: e9:e9:b6:ed:e1:03:8d:2d:0e:b1:f9:6b:89:c8:0e: 5d:94:bf:04:fe:fe:29:86:fe:47:4c:4f:95:e8:fe: b5:04:a4:75:2f:f5:84:fc:9b:77:ab:4c:a8:ae:ba: c7:70:cd:6c:d4:79:f8:9d:22:b3:88:51:63:09:0b: bc:b9:c7:17:12:c6:56:23:9f:26:5a:df:f9:53:a9: 90:35:d3:ac:3a:76:cc:02:49:5d:10:c7:ee:49:a5: 53:de:a3:b1:3b:b5:fa:d8:f5:97:90:ea:74:a2:fd: 21:cf:6b:0b:06:cf:17:d0:f7:92:0b:a9:df:cf:55: cd:d6:dd:ba:7f:67:9b:ce:35:9b:6c:1a:d9:bb:0d: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EF:8B:20:E4:A6:31:28:01:4E:1F:84:BD:0D:D0:79:36:D4:9E:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/06b5da51-84a0-4750-bb07-c98aff0510db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.167.184.0/24 IPv6: 2602:f9ca::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:31:d4:c7:30:1d:77:82:8c:2d:9c:fe:94:1e:05:52:36:cb: 5c:6e:18:bc:99:49:23:4f:8e:a6:b6:9d:81:92:50:26:13:78: 43:8f:fa:5d:03:48:99:ad:c5:e0:55:0a:2b:6d:db:fc:1e:fd: c9:2b:ce:f6:9a:6c:c6:3d:aa:65:9d:3c:03:6c:9b:a4:62:e1: 5a:c8:e1:fb:d2:26:03:95:67:54:7a:2c:28:11:94:25:16:4b: b2:6f:85:65:da:d0:5b:db:5f:7a:55:8b:6e:c1:fc:db:74:81: bc:2b:f8:61:41:72:3e:d3:4a:42:0f:29:84:a4:6d:a2:2f:98: a3:70:f1:b0:8a:80:64:04:c9:69:17:c0:4a:fe:e0:7d:90:87: c8:21:ed:5c:b0:a0:54:3b:50:5f:df:5e:33:18:9e:7b:74:89: 46:5b:12:00:46:7b:75:38:87:30:d2:c0:2b:14:73:95:dc:5c: 47:ee:44:1c:cd:f9:e5:76:b8:15:7d:fa:73:dd:3a:a9:1e:a9: f2:6c:3c:6f:9c:05:51:60:ed:61:8e:75:c8:e2:3a:c5:89:3c: 9c:d5:f9:3d:65:9c:c5:a8:7b:1a:3e:fb:cf:af:af:8c:28:19: 24:bc:75:1a:0a:37:b5:d8:1a:8a:87:a5:8a:61:6b:e8:fc:64: 37:5b:7c:2d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEpAIpk2RvD0PGtKCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyMDA1MDIxM1oXDTI3MDkyMzA1MDIxM1owLzEtMCsGA1UEAxMk MDZiNWRhNTEtODRhMC00NzUwLWJiMDctYzk4YWZmMDUxMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWPJ+4SMnOBnSglcw/ohOgp+aS/cw3x6Ca3a Nrn8xkLUmJOUxR7Cnt2wIsOmMgBibX6eSO2FgBpqRbFMc56Dnorh0VQkUyWU2r5N lNXXFvXIQDNgmX2xKtq0cVMeyoIJtuyWLpbf6fpNX/MLjbCQD0+mCGij/1np6bbt 4QONLQ6x+WuJyA5dlL8E/v4phv5HTE+V6P61BKR1L/WE/Jt3q0yorrrHcM1s1Hn4 nSKziFFjCQu8uccXEsZWI58mWt/5U6mQNdOsOnbMAkldEMfuSaVT3qOxO7X62PWX kOp0ov0hz2sLBs8X0PeSC6nfz1XN1t26f2ebzjWbbBrZuw1Z1wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFF/viyDkpjEoAU4fhL0N0Hk21J6DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NmI1ZGE1MS04NGEwLTQ3NTAtYmIwNy1jOThhZmYwNTEwZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA2YjVkYTUxLTg0YTAtNDc1MC1i YjA3LWM5OGFmZjA1MTBkYi8wNmI1ZGE1MS04NGEwLTQ3NTAtYmIwNy1jOThhZmYw NTEwZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXp7gwDgQCAAIwCAMGBCYC+coAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACkx1McwHXeCjC2c/pQeBVI2y1xuGLyZSSNPjqa2nYGSUCYTeEOP+l0DSJmtxeBV Citt2/we/ckrzvaabMY9qmWdPANsm6Ri4VrI4fvSJgOVZ1R6LCgRlCUWS7JvhWXa 0FvbX3pVi27B/Nt0gbwr+GFBcj7TSkIPKYSkbaIvmKNw8bCKgGQEyWkXwEr+4H2Q h8gh7VywoFQ7UF/fXjMYnnt0iUZbEgBGe3U4hzDSwCsUc5XcXEfuRBzN+eV2uBV9 +nPdOqkeqfJsPG+cBVFg7WGOdcjiOsWJPJzV+T1lnMWoexo++8+vr4woGSS8dRoK N7XYGoqHpYpha+j8ZDdbfC0= -----END CERTIFICATE-----Generated at Sat Jul 5 19:06:23 2025 by rpki-client