$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer File: 55e6662c-1696-40b5-91c0-eb4544d58c78.cer (raw, json) Hash identifier: VjfOMBWKxll7jXRtkMcWoumF7iM2VNALSiNs+cKH0K0= Subject key identifier: 22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B5C224B5B7EFF848BF447D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 May 2025 15:26:19 +0000 Certificate not after: Wed 04 Aug 2027 15:26:19 +0000 Subordinate resources: AS: 35876 AS: 36642 AS: 40779 IP: 23.138.148.0/24 IP: 2602:f663::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:c2:24:b5:b7:ef:f8:48:bf:44:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 1 15:26:19 2025 GMT Not After : Aug 4 15:26:19 2027 GMT Subject: CN=55e6662c-1696-40b5-91c0-eb4544d58c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:66:a1:e6:9b:fe:47:f4:f7:7d:8d:42:4d: 28:78:22:3f:14:81:f2:40:0f:72:3a:cf:69:3a:e1: 55:91:5c:6d:d4:a4:39:ad:53:0b:07:b5:10:4b:27: cf:4c:93:57:08:c5:e7:8d:51:36:e9:ef:ef:fa:2c: 0f:9f:77:54:fc:92:b6:11:6e:75:e5:ae:08:92:bc: fa:23:8c:2f:7a:60:70:f2:de:ea:c8:00:29:fa:42: 48:cb:6f:d7:e4:74:61:13:8c:91:65:33:38:5c:e6: a4:41:2b:49:aa:5e:60:cd:13:b8:e8:5e:73:4d:2a: c9:48:8d:84:e8:1e:67:5d:97:1c:13:fc:64:9e:aa: e5:1f:9c:05:18:6a:bf:b4:e8:c1:b6:55:26:08:f0: 54:1b:58:f6:f4:2c:ca:a2:8a:1e:4a:4d:d2:1d:97: 32:2e:83:af:24:db:47:be:c8:fd:1d:90:b0:1b:db: 3c:b8:5c:7f:af:9b:80:e2:a6:9d:99:ec:e1:4f:87: 68:71:49:e6:26:ed:d1:7c:e4:0a:ed:a8:fc:f4:05: 07:f3:b2:7f:c6:1b:3b:c6:fd:8d:bf:ca:8e:26:d6: 59:f7:e7:1b:16:77:b8:52:a7:46:60:ee:b4:a6:93: 61:21:59:b8:ed:f4:90:47:69:c9:0a:e1:0a:32:00: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.148.0/24 IPv6: 2602:f663::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35876 36642 40779 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0a:1a:01:04:2d:90:0f:fd:68:5d:fc:8f:2c:7f:c2:cd:ad: ac:22:f5:59:99:0c:43:c5:0b:ea:e2:a7:35:f1:7d:99:e0:3a: f4:69:6b:be:b2:fd:cc:4f:8e:cd:04:f8:da:9e:ce:cd:f6:e5: 94:19:59:75:02:68:71:ba:1b:5e:5d:fd:5b:bf:4a:1a:8d:ab: b3:8e:0e:f1:c4:96:39:54:c3:fe:e2:4e:4a:fe:37:6e:16:c3: de:fd:0e:a7:8d:dc:09:ce:7d:e7:29:db:71:a3:f1:44:41:ab: b0:61:37:2c:37:df:28:be:02:e5:6e:85:d1:2f:eb:b5:b6:97: 52:52:00:22:58:75:7b:fc:4f:be:3e:35:52:98:3b:02:f8:6e: cf:ae:5f:7a:2d:e6:73:9d:df:17:43:cf:dc:4d:aa:bc:07:0c: 07:03:36:bf:07:7e:96:f1:2a:51:af:eb:8a:fb:16:23:fb:5d: af:46:82:f4:1e:da:f5:25:a5:d7:ce:d4:74:62:0e:a7:af:d3: 2d:0e:12:01:84:d3:9c:5b:4a:ab:d2:9b:99:35:fc:b4:4e:3a: 6b:d8:f3:c6:e7:c1:64:b8:60:73:d0:cf:74:8b:cd:48:dc:61: 07:67:9f:47:43:da:f5:5d:fd:fb:48:50:45:df:0a:ac:bb:cc: 87:47:73:2e -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEm1wiS1t+/4SL9EfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwMTE1MjYxOVoXDTI3MDgwNDE1MjYxOVowLzEtMCsGA1UEAxMk NTVlNjY2MmMtMTY5Ni00MGI1LTkxYzAtZWI0NTQ0ZDU4Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxppmoeab/kf0932NQk0oeCI/FIHyQA9yOs9p OuFVkVxt1KQ5rVMLB7UQSyfPTJNXCMXnjVE26e/v+iwPn3dU/JK2EW515a4Ikrz6 I4wvemBw8t7qyAAp+kJIy2/X5HRhE4yRZTM4XOakQStJql5gzRO46F5zTSrJSI2E 6B5nXZccE/xknqrlH5wFGGq/tOjBtlUmCPBUG1j29CzKoooeSk3SHZcyLoOvJNtH vsj9HZCwG9s8uFx/r5uA4qadmezhT4docUnmJu3RfOQK7aj89AUH87J/xhs7xv2N v8qOJtZZ9+cbFne4UqdGYO60ppNhIVm47fSQR2nJCuEKMgDMzwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFCLU2/4yAvkyAqRMQ8WTr/7RqnxzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 NWU2NjYyYy0xNjk2LTQwYjUtOTFjMC1lYjQ1NDRkNThjNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU1ZTY2NjJjLTE2OTYtNDBiNS05 MWMwLWViNDU0NGQ1OGM3OC81NWU2NjYyYy0xNjk2LTQwYjUtOTFjMC1lYjQ1NDRk NThjNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXipQwDgQCAAIwCAMGACYC9mMAMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwCMJAIDAI8iAgMAn0swVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKAoaAQQtkA/9 aF38jyx/ws2trCL1WZkMQ8UL6uKnNfF9meA69GlrvrL9zE+OzQT42p7OzfbllBlZ dQJocbobXl39W79KGo2rs44O8cSWOVTD/uJOSv43bhbD3v0Op43cCc595ynbcaPx REGrsGE3LDffKL4C5W6F0S/rtbaXUlIAIlh1e/xPvj41Upg7Avhuz65fei3mc53f F0PP3E2qvAcMBwM2vwd+lvEqUa/rivsWI/tdr0aC9B7a9SWl187UdGIOp6/TLQ4S AYTTnFtKq9KbmTX8tE46a9jzxufBZLhgc9DPdIvNSNxhB2efR0Pa9V39+0hQRd8K rLvMh0dzLg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:50 2025 by rpki-client