$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer File: 41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer (raw, json) Hash identifier: CAqTpBSaQbyzYi4daGN9koRwOBlNuWyneDz4s0aifJc= Subject key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A5214930826EC7781584F0600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Jun 2025 15:18:30 +0000 Certificate not after: Wed 29 Sep 2027 15:18:30 +0000 Subordinate resources: AS: 15176 IP: 204.14.224.0/21 IP: 208.70.80.0/21 IP: 2606:6ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:14:93:08:26:ec:77:81:58:4f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 26 15:18:30 2025 GMT Not After : Sep 29 15:18:30 2027 GMT Subject: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:6a:41:36:b9:4c:f8:ab:a5:87:29:ac:d7: 76:1f:03:d0:63:6d:67:a9:bf:10:ba:44:5f:d4:c4: 1c:5c:bc:d3:29:e0:24:ad:3d:f2:26:c3:28:2b:15: 19:a4:29:78:ee:7a:63:2e:da:8b:ee:bc:f7:3c:e0: ad:fd:e7:e8:a1:f0:3c:b8:ee:e4:d4:39:0b:e4:08: 6a:7a:3f:7f:39:cc:e4:ff:4e:d5:07:32:0e:81:f3: 33:00:fa:20:eb:f8:87:55:c3:e0:b3:c3:fa:99:1d: 54:0f:84:b2:cb:66:f4:7a:b1:3d:0d:55:1a:20:54: 72:54:6a:0e:97:33:16:11:11:7b:28:66:2c:2e:78: 17:e6:db:10:1c:93:b7:3e:7f:35:0b:11:d2:f9:58: ca:39:d1:b3:d0:d3:25:f7:49:a0:2b:13:36:cf:a9: 65:7c:b4:7c:d2:85:3c:18:27:8e:11:fd:b1:ba:ba: 49:a4:e9:78:5c:c2:51:75:92:37:4a:8c:12:2a:c7: 95:c4:df:fb:ad:ce:21:84:c7:1b:26:97:00:3a:fc: 3b:b5:89:a0:69:15:f5:97:9d:a5:d0:88:b4:c2:65: a6:72:4f:f7:0b:01:d5:eb:6e:fb:8f:89:69:04:ff: 1a:92:b6:b2:84:cd:82:b7:83:6b:33:14:c7:fc:a0: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.14.224.0/21 208.70.80.0/21 IPv6: 2606:6ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ca:fd:f3:92:51:e7:20:4c:9e:14:66:f4:c6:92:de:b3:c6: fc:25:b1:61:ff:20:58:27:95:fc:b4:88:87:a6:b3:77:c8:c8: 3c:d0:29:d1:43:c2:0d:5a:c4:f9:0d:49:30:60:07:bd:1d:5f: 58:19:72:ef:88:8b:a9:a9:a1:20:7d:70:59:88:fa:d3:30:9b: 22:06:56:ff:37:01:e5:df:6d:00:6c:cd:fd:78:64:f0:1d:ed: 03:dd:12:0c:83:55:66:a9:2c:af:db:10:29:03:d4:9c:6a:18: ef:a5:20:b5:19:6d:ba:97:26:0b:a9:05:27:f7:19:02:b9:cc: c9:a0:49:b8:78:d5:a4:d0:40:a9:79:3f:7c:c3:5a:1b:9d:03: 1d:bb:7c:7f:55:c5:93:ab:5a:fe:cd:ad:1b:10:11:bc:47:af: 8f:e4:fb:bf:d4:c0:05:c4:68:99:45:ce:a7:fe:d8:6e:39:7e: 3c:2a:d7:fd:8d:df:9f:71:84:72:3f:0e:b0:cd:72:fc:5a:54: 2e:4d:4c:4c:44:38:28:bf:49:b6:a9:e1:09:56:a8:c1:7e:93: 4c:b5:cc:60:09:09:cf:9f:48:d8:3b:06:02:4d:5c:87:27:89: eb:10:0e:29:57:8c:24:32:92:35:96:53:45:83:98:5e:92:85: 61:20:4d:81 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEpSFJMIJux3gVhPBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNjE1MTgzMFoXDTI3MDkyOTE1MTgzMFowLzEtMCsGA1UEAxMk NDFjNjljZTAtOWJjYi00OWNlLTg1ODItZGM2Y2U3ZmRmMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXpqQTa5TPirpYcprNd2HwPQY21nqb8QukRf 1MQcXLzTKeAkrT3yJsMoKxUZpCl47npjLtqL7rz3POCt/efoofA8uO7k1DkL5Ahq ej9/Oczk/07VBzIOgfMzAPog6/iHVcPgs8P6mR1UD4Syy2b0erE9DVUaIFRyVGoO lzMWERF7KGYsLngX5tsQHJO3Pn81CxHS+VjKOdGz0NMl90mgKxM2z6llfLR80oU8 GCeOEf2xurpJpOl4XMJRdZI3SowSKseVxN/7rc4hhMcbJpcAOvw7tYmgaRX1l52l 0Ii0wmWmck/3CwHV6277j4lpBP8akrayhM2Ct4NrMxTH/KBThwIDAQABo4IELzCC BCswHQYDVR0OBBYEFKamDM7cPwJJvAKs82zF0wnmJovSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdmZGYxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQxYzY5Y2UwLTliY2ItNDljZS04 NTgyLWRjNmNlN2ZkZjFkZS80MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdm ZGYxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPMDuADBAPQRlAwDQQCAAIwBwMFACYGasAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICO0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk8r985JR5yBMnhRm9MaS 3rPG/CWxYf8gWCeV/LSIh6azd8jIPNAp0UPCDVrE+Q1JMGAHvR1fWBly74iLqamh IH1wWYj60zCbIgZW/zcB5d9tAGzN/Xhk8B3tA90SDINVZqksr9sQKQPUnGoY76Ug tRltupcmC6kFJ/cZArnMyaBJuHjVpNBAqXk/fMNaG50DHbt8f1XFk6ta/s2tGxAR vEevj+T7v9TABcRomUXOp/7Ybjl+PCrX/Y3fn3GEcj8OsM1y/FpULk1MTEQ4KL9J tqnhCVaowX6TTLXMYAkJz59I2DsGAk1chyeJ6xAOKVeMJDKSNZZTRYOYXpKFYSBN gQ== -----END CERTIFICATE-----Generated at Tue Jul 1 05:42:25 2025 by rpki-client