$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.cer File: 52ec79e3-ffbe-409c-bf98-0026d97ea4a4.cer (raw, json) Hash identifier: fpYXVHMB4c3HD9boORq9OoljB5t1fu449ohReF6JxDY= Subject key identifier: CC:9D:29:84:C9:0F:72:27:BE:12:D6:67:B9:93:A3:11:B3:88:54:27 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B13CCFEE50A93D196DE269C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 00:34:26 +0000 Certificate not after: Tue 03 Aug 2027 00:34:26 +0000 Subordinate resources: AS: 14821 IP: 45.58.0.0/20 IP: 208.72.36.0/22 IP: 2604:e7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:3c:cf:ee:50:a9:3d:19:6d:e2:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 00:34:26 2025 GMT Not After : Aug 3 00:34:26 2027 GMT Subject: CN=52ec79e3-ffbe-409c-bf98-0026d97ea4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:dc:96:b9:cf:3d:01:f0:77:34:4f:b6:b3: f7:57:21:61:a4:24:51:27:f1:0d:35:12:0f:c7:2c: 84:31:6c:76:77:ca:cd:1d:9e:50:2b:0f:bf:97:20: 31:f0:93:9b:ab:71:1f:5a:0f:7e:84:5b:63:d4:52: 4c:a7:c1:10:e1:e0:39:4a:7e:d3:b0:4f:19:91:06: fe:68:2b:35:f6:ae:57:79:11:0f:37:e5:66:14:22: 6f:a1:84:b4:dd:00:18:2c:57:db:16:d5:64:e4:72: 0e:24:f1:7a:64:b3:de:e6:71:3e:ff:d1:bf:d1:8e: e1:55:8c:61:21:58:79:ea:fb:a5:56:b4:39:01:61: 34:ff:97:5c:22:eb:c1:76:4c:43:6a:37:aa:05:a7: 50:9f:a7:4b:81:9a:47:d0:db:ba:f3:6b:a1:db:cc: 62:ca:2c:8b:db:72:2c:fe:14:3c:bf:3e:95:ec:b7: a6:c0:74:b0:5f:b8:5b:2f:9c:aa:68:d5:53:ca:28: d2:3b:17:1f:9c:96:63:17:ab:94:f7:95:48:f0:6b: f5:a0:c4:53:a5:87:3e:85:f6:0c:4c:68:b4:dd:89: 7c:f8:11:2f:fa:85:2a:0b:4f:d1:7d:e4:79:25:20: 18:db:1d:06:6f:c9:42:75:07:c9:25:05:e8:1c:4d: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9D:29:84:C9:0F:72:27:BE:12:D6:67:B9:93:A3:11:B3:88:54:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 45.58.0.0/20 208.72.36.0/22 IPv6: 2604:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14821 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:73:18:90:c3:8f:bf:93:c5:52:18:85:aa:76:bc:af:0e: 48:11:e0:b6:4d:26:d5:be:19:d1:7d:05:52:c9:cb:03:17:25: 74:16:fa:8c:e4:05:e3:cd:87:82:70:f2:a2:3f:9d:9c:05:2d: c7:c6:95:f5:7a:7e:55:bb:dd:2e:47:43:bc:16:24:a7:bb:8a: 3d:4b:87:a5:f8:27:c7:f2:a4:04:6e:19:e4:28:94:56:a0:37: fd:b9:15:26:ba:ca:7f:80:fe:36:fa:9f:14:98:0d:2d:56:ce: db:1e:3b:4e:07:df:00:44:e3:ba:1f:c9:3d:7e:59:e4:27:47: ba:19:f4:1c:33:22:22:7e:b4:fb:7e:63:82:a1:ae:16:b0:c5: d2:aa:62:11:b1:06:90:34:d4:b0:cb:c2:7d:f3:37:fb:5f:e5: 91:0d:c4:92:6a:1b:14:3b:83:b2:fc:70:a5:0a:0e:d5:f1:eb: 19:16:39:20:66:08:4c:99:3c:24:0f:38:1d:03:56:1a:a9:7b: c2:36:d6:32:7b:dd:23:ee:3e:cd:e0:24:15:2d:d5:ae:1f:7d: 90:11:c2:f2:f8:ad:66:9c:4c:52:2d:f6:c5:4b:eb:7d:a6:7f: 7d:52:55:2d:30:02:fc:92:56:40:3b:91:ae:38:ca:43:f2:e4: 2d:cf:d0:cc -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEmxPM/uUKk9GW3iacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDAwMzQyNloXDTI3MDgwMzAwMzQyNlowLzEtMCsGA1UEAxMk NTJlYzc5ZTMtZmZiZS00MDljLWJmOTgtMDAyNmQ5N2VhNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsDclrnPPQHwdzRPtrP3VyFhpCRRJ/ENNRIP xyyEMWx2d8rNHZ5QKw+/lyAx8JObq3EfWg9+hFtj1FJMp8EQ4eA5Sn7TsE8ZkQb+ aCs19q5XeREPN+VmFCJvoYS03QAYLFfbFtVk5HIOJPF6ZLPe5nE+/9G/0Y7hVYxh IVh56vulVrQ5AWE0/5dcIuvBdkxDajeqBadQn6dLgZpH0Nu682uh28xiyiyL23Is /hQ8vz6V7LemwHSwX7hbL5yqaNVTyijSOxcfnJZjF6uU95VI8Gv1oMRTpYc+hfYM TGi03Yl8+BEv+oUqC0/RfeR5JSAY2x0Gb8lCdQfJJQXoHE2v7wIDAQABo4IELzCC BCswHQYDVR0OBBYEFMydKYTJD3InvhLWZ7mToxGziFQnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 MmVjNzllMy1mZmJlLTQwOWMtYmY5OC0wMDI2ZDk3ZWE0YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzUyZWM3OWUzLWZmYmUtNDA5Yy1i Zjk4LTAwMjZkOTdlYTRhNC81MmVjNzllMy1mZmJlLTQwOWMtYmY5OC0wMDI2ZDk3 ZWE0YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAQtOgADBALQSCQwDQQCAAIwBwMFACYE58AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOeUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAde1zGJDDj7+TxVIYhap2 vK8OSBHgtk0m1b4Z0X0FUsnLAxcldBb6jOQF482HgnDyoj+dnAUtx8aV9Xp+Vbvd LkdDvBYkp7uKPUuHpfgnx/KkBG4Z5CiUVqA3/bkVJrrKf4D+NvqfFJgNLVbO2x47 TgffAETjuh/JPX5Z5CdHuhn0HDMiIn60+35jgqGuFrDF0qpiEbEGkDTUsMvCffM3 +1/lkQ3EkmobFDuDsvxwpQoO1fHrGRY5IGYITJk8JA84HQNWGql7wjbWMnvdI+4+ zeAkFS3Vrh99kBHC8vitZpxMUi32xUvrfaZ/fVJVLTAC/JJWQDuRrjjKQ/LkLc/Q zA== -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:53 2025 by rpki-client