$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer File: 91625b8e-8d13-496f-b542-d170ffd5f3fa.cer (raw, json) Hash identifier: sai5AoGoD7DY8xBV61uGkie4x3XX83TLCL+A4+EjoKk= Subject key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4F55C915E1AA33E1C0A67680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 15:42:28 +0000 Certificate not after: Thu 29 Jul 2027 06:07:04 +0000 Subordinate resources: AS: 5065 AS: 6207 IP: 148.222.158.0/24 IP: 165.140.192.0/22 IP: 2604:1560::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:55:c9:15:e1:aa:33:e1:c0:a6:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 25 15:42:28 2025 GMT Not After : Jul 29 06:07:04 2027 GMT Subject: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:43:9f:0c:b9:d6:86:4f:49:e8:e2:2b:59:fa: fc:da:49:40:c3:51:71:a3:98:d5:3b:d0:9e:6f:99: b3:2c:67:d7:77:f1:15:19:20:8e:ca:c3:e3:f1:30: 4c:8d:ba:76:24:b3:0a:65:4e:47:f8:68:c0:34:40: e5:e9:2c:d1:61:20:d8:68:eb:04:79:f1:7b:ad:a1: 00:f1:c2:a4:9a:95:42:76:8e:24:87:5e:2f:96:fb: f8:8f:53:c7:c9:74:e8:44:90:1f:a1:fd:42:9c:bc: c7:79:1d:be:a7:57:c7:a6:97:19:b7:45:11:51:d1: af:9b:73:63:82:b8:5f:b0:86:f4:ce:a4:7e:66:1c: c5:58:57:04:1b:14:f9:db:bc:5b:d4:79:09:3d:ab: e3:fa:e2:12:5f:dc:70:89:79:00:7f:1a:f1:7d:51: a4:ec:51:fe:82:bc:a6:3c:e8:68:81:c2:a0:1d:82: 09:f9:f1:8c:ef:d9:5b:58:d3:a5:48:4b:df:8b:42: 5d:c6:48:2f:a5:84:ff:d6:fe:3e:ce:08:20:57:82: 8f:e2:8c:ff:72:21:a4:8b:b9:d7:96:32:5b:6d:ec: 8f:c6:f3:1c:69:70:60:0d:a9:51:c5:14:eb:89:5a: 5e:7d:4f:1d:bf:75:9f:51:b4:29:65:10:5a:21:bc: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 148.222.158.0/24 165.140.192.0/22 IPv6: 2604:1560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5065 6207 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:df:1b:e6:e4:1a:d7:a2:50:13:84:9c:a5:e2:3d:26:c5:92: 33:4b:19:0d:07:dd:be:82:9f:8d:55:55:de:d8:71:e4:cf:5e: 71:88:f3:d4:4c:f5:44:ea:0a:70:20:49:b8:c4:94:e2:1a:06: 58:57:1e:06:39:83:50:e0:8a:c4:41:72:2f:c7:6c:22:43:19: c1:0c:d0:5e:4e:51:ba:84:06:4d:0d:d8:e7:4d:6e:0e:53:6c: 5e:be:ca:69:bd:ed:ca:de:3e:05:2c:4c:99:a3:56:dd:aa:d3: a8:a3:1a:33:3f:90:b0:ca:ab:38:bc:a0:ea:b0:86:0f:eb:a9: a8:14:da:b9:76:c6:8c:e3:e4:77:f4:f2:de:9c:83:69:78:8e: 2b:44:1f:56:4f:2a:46:c8:a7:69:49:3e:3d:43:32:bd:3b:ab: d1:bf:3b:d4:de:f9:61:e4:5d:15:07:14:ba:ed:4c:a6:ba:40: 93:92:23:ec:83:e2:64:98:7d:e5:a5:da:61:c8:a7:50:51:de: f3:c6:ef:32:91:29:74:b2:32:9b:8f:1b:42:5d:03:9b:3c:58: 8e:86:bf:04:e5:aa:1b:74:1b:fb:a1:15:5d:f5:c6:ae:53:4b: f8:75:82:6c:e2:91:2f:ca:a5:42:c7:13:98:03:9e:cb:51:f4: 7d:75:5e:bb -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEpPVckV4aoz4cCmdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNTE1NDIyOFoXDTI3MDcyOTA2MDcwNFowLzEtMCsGA1UEAxMk OTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVmM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkOfDLnWhk9J6OIrWfr82klAw1Fxo5jVO9Ce b5mzLGfXd/EVGSCOysPj8TBMjbp2JLMKZU5H+GjANEDl6SzRYSDYaOsEefF7raEA 8cKkmpVCdo4kh14vlvv4j1PHyXToRJAfof1CnLzHeR2+p1fHppcZt0URUdGvm3Nj grhfsIb0zqR+ZhzFWFcEGxT527xb1HkJPavj+uISX9xwiXkAfxrxfVGk7FH+grym POhogcKgHYIJ+fGM79lbWNOlSEvfi0JdxkgvpYT/1v4+zgggV4KP4oz/ciGki7nX ljJbbeyPxvMcaXBgDalRxRTriVpefU8dv3WfUbQpZRBaIbxcPQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFJX7XefvtMK4EcadA4swRbzeCRCrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkxNjI1YjhlLThkMTMtNDk2Zi1i NTQyLWQxNzBmZmQ1ZjNmYS85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZk NWYzZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACU3p4DBAKljMAwDQQCAAIwBwMFACYEFWAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICE8kCAhg/MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF/fG+bkGteiUBOE nKXiPSbFkjNLGQ0H3b6Cn41VVd7YceTPXnGI89RM9UTqCnAgSbjElOIaBlhXHgY5 g1DgisRBci/HbCJDGcEM0F5OUbqEBk0N2OdNbg5TbF6+ymm97crePgUsTJmjVt2q 06ijGjM/kLDKqzi8oOqwhg/rqagU2rl2xozj5Hf08t6cg2l4jitEH1ZPKkbIp2lJ Pj1DMr07q9G/O9Te+WHkXRUHFLrtTKa6QJOSI+yD4mSYfeWl2mHIp1BR3vPG7zKR KXSyMpuPG0JdA5s8WI6GvwTlqht0G/uhFV31xq5TS/h1gmzikS/KpULHE5gDnstR 9H11Xrs= -----END CERTIFICATE-----Generated at Sun Oct 26 00:46:42 2025 by rpki-client