$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer File: 690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer (raw, json) Hash identifier: Ee7vLZkSQcU598ztIwQYxkJDp5PM85vktWghhLMPhU4= Subject key identifier: 82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B22373CD738FC32E13BDFF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 08:19:09 +0000 Certificate not after: Tue 03 Aug 2027 08:19:09 +0000 Subordinate resources: AS: 7781 AS: 21570 IP: 63.250.96.0/19 IP: 67.211.112.0/20 IP: 68.232.64.0/20 IP: 104.244.188.0/22 IP: 162.212.200.0/21 IP: 162.246.12.0/22 IP: 168.245.240.0/20 IP: 173.244.112.0/20 IP: 199.244.198.0/23 IP: 204.232.64.0/20 IP: 205.207.120.0/21 IP: 205.207.160.0 -- 205.207.169.255 IP: 206.108.128.0/18 IP: 207.189.208.0/20 IP: 208.113.0.0/18 IP: 216.234.32.0/19 IP: 2606:6200::/32 IP: 2610:38::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:23:73:cd:73:8f:c3:2e:13:bd:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 08:19:09 2025 GMT Not After : Aug 3 08:19:09 2027 GMT Subject: CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:43:d6:16:76:5a:f8:d9:00:da:e1:ae:a8: e7:bb:56:c5:f2:eb:77:08:bd:3e:6b:b6:a0:9a:bb: 48:55:d8:a4:3a:53:7c:19:17:1b:a8:08:3d:ee:79: d3:c7:66:b3:17:55:90:81:de:cc:cb:55:78:d0:df: bc:25:01:54:6a:b2:cf:ee:cc:c4:ac:98:cf:f7:c7: ad:94:62:45:47:2b:ce:e4:cc:df:32:63:97:65:80: c2:a9:0f:a5:d6:58:d5:8c:fc:fa:95:dc:db:cb:93: 3d:77:1c:1e:c4:5c:e6:1e:b6:3c:95:c3:a7:d2:96: 37:1c:d9:c0:5c:be:16:64:bc:ec:33:14:3a:81:e1: 9d:c1:e8:4d:0b:8d:a8:5e:9b:ee:99:8d:23:fd:18: 60:51:48:1e:f2:7f:c9:9c:07:28:2f:17:d9:ff:ff: 1a:9b:4e:fd:ea:ce:f2:48:db:2e:15:43:ab:9d:ab: e2:03:10:3d:00:5d:97:77:44:9b:12:83:93:d0:84: 7c:b2:78:42:60:6e:a9:df:22:dd:cb:63:f7:15:83: be:5d:d7:96:8d:f1:05:43:4c:bc:c1:ee:d5:4c:d4: 83:fa:0b:8f:9d:c4:ad:a0:8a:f1:32:19:81:8d:09: b6:ab:e0:84:37:71:16:d2:62:d0:ac:13:9f:64:39: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 63.250.96.0/19 67.211.112.0/20 68.232.64.0/20 104.244.188.0/22 162.212.200.0/21 162.246.12.0/22 168.245.240.0/20 173.244.112.0/20 199.244.198.0/23 204.232.64.0/20 205.207.120.0/21 205.207.160.0-205.207.169.255 206.108.128.0/18 207.189.208.0/20 208.113.0.0/18 216.234.32.0/19 IPv6: 2606:6200::/32 2610:38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7781 21570 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b4:56:0f:91:96:7e:4b:df:e3:45:9c:86:43:09:21:1c:a9: d6:20:c5:1f:ce:a1:fe:16:d0:0a:ec:90:30:16:97:df:73:d1: 4c:7b:8e:ca:82:27:a8:55:93:ed:14:79:7f:25:b4:f2:49:24: 39:80:7f:e9:74:e1:15:21:d5:9f:f0:15:78:27:db:38:de:0d: 28:83:39:44:c1:32:1e:92:d1:58:3e:e1:34:27:89:ac:bd:75: 74:fd:af:2f:e4:13:be:87:86:c4:3e:69:d4:61:bd:c6:9b:f2: b1:7e:71:4d:80:0e:91:90:56:05:27:eb:a0:0f:26:c5:fe:ed: d0:0e:6b:59:5c:64:39:69:56:e9:fd:cc:1e:2d:70:d5:82:8f: 53:01:fb:5c:59:39:7b:83:a6:84:0c:46:a3:f3:7a:c8:64:50: 11:c7:5b:17:7d:5c:9a:91:4d:a2:90:e3:7e:a9:cb:2e:be:6b: 4d:6e:c4:60:d5:f8:5e:ae:36:ef:ec:a8:a5:6e:9d:0c:be:8d: 41:15:f2:01:23:29:c8:80:5d:a8:72:9b:c0:b0:20:51:ef:e1: cf:d2:d4:dc:6f:90:73:8a:fd:39:85:4c:bf:c6:54:48:56:65: f6:9b:c0:6a:21:5f:6c:8b:82:7c:91:00:6c:6a:e0:44:86:6f: c1:84:43:67 -----BEGIN CERTIFICATE----- MIIHhzCCBm+gAwIBAgIUAQ0Mn0MoWEmyI3PNc4/DLhO9/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDA4MTkwOVoXDTI3MDgwMzA4MTkwOVowLzEtMCsGA1UEAxMk NjkwZDNlNGMtMzkyNy00Y2UwLWE3ODctMzVhZDdkYmVjYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJpD1hZ2WvjZANrhrqjnu1bF8ut3CL0+a7ag mrtIVdikOlN8GRcbqAg97nnTx2azF1WQgd7My1V40N+8JQFUarLP7szErJjP98et lGJFRyvO5MzfMmOXZYDCqQ+l1ljVjPz6ldzby5M9dxwexFzmHrY8lcOn0pY3HNnA XL4WZLzsMxQ6geGdwehNC42oXpvumY0j/RhgUUge8n/JnAcoLxfZ//8am0796s7y SNsuFUOrnaviAxA9AF2Xd0SbEoOT0IR8snhCYG6p3yLdy2P3FYO+XdeWjfEFQ0y8 we7VTNSD+guPncStoIrxMhmBjQm2q+CEN3EW0mLQrBOfZDmbjQIDAQABo4IEmTCC BJUwHQYDVR0OBBYEFIKPr5pTSSt0KUXUcNilKmCuu4zaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 OTBkM2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFkN2RiZWNhYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY5MGQzZTRjLTM5MjctNGNlMC1h Nzg3LTM1YWQ3ZGJlY2FhMS82OTBkM2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFkN2Ri ZWNhYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwgZkGCCsGAQUF BwEHAQH/BIGJMIGGMG4EAgABMGgDBAU/+mADBARD03ADBARE6EADBAJo9LwDBAOi 1MgDBAKi9gwDBASo9fADBASt9HADBAHH9MYDBATM6EADBAPNz3gwDAMEBc3PoAME Ac3PqAMEBs5sgAMEBM+90AMEBtBxAAMEBdjqIDAUBAIAAjAOAwUAJgZiAAMFACYQ ADgwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICHmUCAlRCMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACa0Vg+R ln5L3+NFnIZDCSEcqdYgxR/Oof4W0ArskDAWl99z0Ux7jsqCJ6hVk+0UeX8ltPJJ JDmAf+l04RUh1Z/wFXgn2zjeDSiDOUTBMh6S0Vg+4TQniay9dXT9ry/kE76HhsQ+ adRhvcab8rF+cU2ADpGQVgUn66APJsX+7dAOa1lcZDlpVun9zB4tcNWCj1MB+1xZ OXuDpoQMRqPzeshkUBHHWxd9XJqRTaKQ436pyy6+a01uxGDV+F6uNu/sqKVunQy+ jUEV8gEjKciAXahym8CwIFHv4c/S1NxvkHOK/TmFTL/GVEhWZfabwGohX2yLgnyR AGxq4ESGb8GEQ2c= -----END CERTIFICATE-----Generated at Sun Oct 26 00:42:57 2025 by rpki-client