$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer File: 2ac961ff-f406-4f80-b06d-e1284358815a.cer (raw, json) Hash identifier: KT1qJuVy5On5HtEQVtv9XFEm2A7+syFgjMYEDh72tE4= Subject key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849CF7D17973428E58579C94100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 May 2025 20:38:12 +0000 Certificate not after: Fri 13 Aug 2027 20:38:12 +0000 Subordinate resources: IP: 35.128.192.0 -- 35.128.215.255 IP: 64.56.80.0/20 IP: 108.59.16.0/20 IP: 162.223.20.0/22 IP: 162.248.64.0/21 IP: 2607:f5d8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:7d:17:97:34:28:e5:85:79:c9:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 10 20:38:12 2025 GMT Not After : Aug 13 20:38:12 2027 GMT Subject: CN=2ac961ff-f406-4f80-b06d-e1284358815a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:cc:88:b6:00:5f:df:0e:50:44:aa:75:d9: cd:52:ce:91:82:00:d5:ff:9b:b8:ec:6b:09:51:35: 91:76:8d:ee:e0:98:71:50:e8:34:43:60:61:d2:ca: dc:cd:2c:dc:28:57:c1:a1:37:5e:f5:c4:08:87:19: 39:d9:d4:a9:1e:e6:32:c0:73:2d:b1:33:84:01:62: 19:84:5e:a2:a4:7a:ea:dc:a5:00:15:52:8d:dc:30: 0e:6c:df:fd:b3:37:ca:3e:94:0a:78:e4:eb:fb:2d: 43:1c:c9:9a:2e:f5:02:a5:52:18:d7:4d:ea:e2:e6: b5:63:8e:9c:d1:e1:fe:a4:15:ca:f1:a2:94:15:de: df:b5:d0:ed:c9:d2:08:c2:85:da:6d:03:4e:4f:d0: f4:e3:42:80:9d:50:dd:2c:d4:fb:45:c6:c9:ad:fc: ad:28:5f:c3:3f:42:37:72:4e:78:85:c6:af:3e:c6: 15:35:fb:d2:f0:1e:02:36:b6:3a:95:ce:a4:77:d0: 8d:df:eb:7a:6f:d8:e9:8e:86:08:3b:45:49:bf:e7: da:d9:a2:5f:bc:41:dc:d6:f0:91:2f:de:b5:0e:52: ed:2e:3f:e2:91:11:d7:98:d2:78:55:a2:f7:78:ba: 5e:01:0b:25:9a:7a:7e:b4:b3:78:11:33:a7:b1:fa: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 35.128.192.0-35.128.215.255 64.56.80.0/20 108.59.16.0/20 162.223.20.0/22 162.248.64.0/21 IPv6: 2607:f5d8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ad:0a:c6:3d:df:6c:c3:74:74:6f:10:ae:84:5c:f4:70:20: 90:4a:26:19:0d:ed:5a:18:40:41:31:6b:8e:f0:2f:ad:23:64: 5b:52:19:41:bd:f3:75:1c:58:4a:95:53:a2:f7:e2:e3:4d:36: d0:99:d3:f8:66:2d:46:5d:ac:91:58:b7:f4:ea:c9:21:64:4e: 2b:8f:0e:e9:d0:3a:a2:ec:c6:83:06:29:f4:9d:9d:62:c0:5f: d3:aa:d3:83:9d:e7:29:cc:b5:fc:f5:00:52:6d:eb:d6:a5:65: 84:d7:72:f8:fa:76:e1:0a:d7:56:91:03:f7:64:ad:49:d2:da: 5e:41:55:00:63:5b:31:93:34:e9:d0:91:c7:6d:4d:e8:c8:f8: e0:73:bd:fe:98:99:99:53:8d:a3:38:46:32:2a:c9:7d:28:0c: cb:eb:ba:8e:9b:72:9e:d3:97:3b:94:0c:b1:0a:0e:74:22:d6: dc:2c:c8:55:ae:d2:1e:83:c6:61:a7:9c:dd:65:a4:f5:3c:f7: bc:9b:3b:a7:00:ef:19:ab:cc:3a:83:4a:01:28:51:c2:6f:6f: a8:6e:02:08:a3:39:05:bf:ee:63:87:a6:c8:7d:a5:b2:cd:24: a7:dc:0b:bc:59:7f:e7:33:97:51:e9:33:88:11:4a:9b:81:aa: a1:97:38:fa -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEnPfReXNCjlhXnJQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxMDIwMzgxMloXDTI3MDgxMzIwMzgxMlowLzEtMCsGA1UEAxMk MmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/DMiLYAX98OUESqddnNUs6RggDV/5u47GsJ UTWRdo3u4JhxUOg0Q2Bh0srczSzcKFfBoTde9cQIhxk52dSpHuYywHMtsTOEAWIZ hF6ipHrq3KUAFVKN3DAObN/9szfKPpQKeOTr+y1DHMmaLvUCpVIY103q4ua1Y46c 0eH+pBXK8aKUFd7ftdDtydIIwoXabQNOT9D040KAnVDdLNT7RcbJrfytKF/DP0I3 ck54hcavPsYVNfvS8B4CNrY6lc6kd9CN3+t6b9jpjoYIO0VJv+fa2aJfvEHc1vCR L961DlLtLj/ikRHXmNJ4VaL3eLpeAQslmnp+tLN4ETOnsfqIkwIDAQABo4IELjCC BCowHQYDVR0OBBYEFPGLelv4h+TbMWv8sW0aZ94xtXyeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJhYzk2MWZmLWY0MDYtNGY4MC1i MDZkLWUxMjg0MzU4ODE1YS8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1 ODgxNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYwDAMEBiOAwAMEAyOA0AMEBEA4UAMEBGw7EAMEAqLf FAMEA6L4QDANBAIAAjAHAwUAJgf12DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPrQrGPd9sw3R0bxCuhFz0 cCCQSiYZDe1aGEBBMWuO8C+tI2RbUhlBvfN1HFhKlVOi9+LjTTbQmdP4Zi1GXayR WLf06skhZE4rjw7p0Dqi7MaDBin0nZ1iwF/TqtODnecpzLX89QBSbevWpWWE13L4 +nbhCtdWkQP3ZK1J0tpeQVUAY1sxkzTp0JHHbU3oyPjgc73+mJmZU42jOEYyKsl9 KAzL67qOm3Ke05c7lAyxCg50ItbcLMhVrtIeg8Zhp5zdZaT1PPe8mzunAO8Zq8w6 g0oBKFHCb2+obgIIozkFv+5jh6bIfaWyzSSn3Au8WX/nM5dR6TOIEUqbgaqhlzj6 -----END CERTIFICATE-----Generated at Sun Oct 26 00:46:43 2025 by rpki-client