$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer File: a295a695-e91a-4c5a-8a31-a920a42ea44d.cer (raw, json) Hash identifier: IFQb2TLYxlm0k6QAtur05NII8W79nWWkbf/XxAy8+eQ= Subject key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ABC78C39B495EADD8F027294 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 01:39:07 +0000 Certificate not after: Sun 01 Aug 2027 01:39:07 +0000 Subordinate resources: AS: 21748 IP: 104.37.232.0/21 IP: 2606:8b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:c7:8c:39:b4:95:ea:dd:8f:02:72:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 01:39:07 2025 GMT Not After : Aug 1 01:39:07 2027 GMT Subject: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:c3:d9:d5:37:9b:ea:c1:66:67:2e:89:47: 8e:0d:84:f0:08:e1:15:da:48:51:a0:11:d7:d7:9c: f1:a6:ba:c2:e0:59:d2:aa:f1:d0:5b:f2:71:32:e6: 28:89:21:77:03:b4:06:00:0d:9d:9e:7f:5f:02:bb: fe:a9:f2:0e:38:c6:68:01:27:67:98:4a:c1:43:5d: b4:78:73:dd:5c:b7:62:ab:c6:e3:0a:90:6b:bc:12: 1e:ab:40:71:67:21:62:a1:b4:75:cf:2d:46:96:bd: e2:02:77:04:a9:01:ce:d1:85:5b:86:69:79:6f:49: 90:ee:93:43:26:f3:ac:d6:dd:20:77:ca:4b:40:76: 9d:7e:5d:b0:d4:00:a4:72:4f:dd:6a:e8:2d:21:db: 21:19:7d:81:80:60:ab:2b:66:86:47:ae:c2:86:d0: 3c:58:ea:2e:8a:08:1e:73:be:65:b0:63:9a:54:e2: b5:f9:9f:32:5e:4e:fa:26:1a:a3:b6:1c:22:62:57: 92:a7:de:75:ab:80:b2:ee:f9:94:1b:1d:ed:85:82: bf:1e:ac:44:61:4c:1b:c1:f9:73:49:3b:2f:bd:65: d4:23:5a:69:3a:65:74:e9:d0:43:e7:7c:39:34:4c: dc:22:7f:5f:1a:d1:89:6e:00:a8:92:36:0e:99:32: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21748 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:eb:58:4d:c7:08:30:ad:04:6f:e7:53:33:ba:1c:c9:10:ae: d6:c9:61:67:d2:07:45:8e:32:72:f4:a6:c4:fd:ba:d2:7d:c9: 51:5e:ad:2d:6c:cf:79:92:fd:a9:73:1e:e8:55:e1:6c:41:89: a3:85:73:73:93:4a:66:2f:cd:de:72:b3:85:19:e8:0f:95:aa: 05:76:d2:c0:55:42:96:0c:de:d2:3b:81:94:0a:97:3f:ec:da: cf:f0:23:01:23:fe:be:36:ed:15:bc:ca:d8:a0:4b:00:bd:87: 88:46:b7:84:94:a4:6e:7e:bd:e0:25:10:a7:3a:b5:0f:ab:d1: 79:dd:a7:60:29:4f:88:40:43:18:df:57:51:58:b5:b9:dc:57: a8:73:3c:4f:30:3b:a4:40:70:9c:1f:12:85:e2:54:16:46:f9: 3d:af:be:35:55:c3:8b:06:0e:d6:47:2d:a7:a4:90:83:fc:79: 30:1f:a1:7b:6b:c7:1c:f6:43:39:3b:1b:ce:94:29:42:aa:20: f4:fb:5f:cb:ef:46:6c:cf:38:09:2c:6e:79:62:54:39:eb:3d: c1:e3:0a:c7:10:68:ed:56:be:d0:da:d1:ce:9a:d0:d6:2d:f1: 67:27:a6:ea:e3:91:ed:e3:ce:6e:55:21:b5:19:40:f4:1d:aa: b1:9d:28:a6 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEmrx4w5tJXq3Y8CcpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODAxMzkwN1oXDTI3MDgwMTAxMzkwN1owLzEtMCsGA1UEAxMk YTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVhNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoTD2dU3m+rBZmcuiUeODYTwCOEV2khRoBHX 15zxprrC4FnSqvHQW/JxMuYoiSF3A7QGAA2dnn9fArv+qfIOOMZoASdnmErBQ120 eHPdXLdiq8bjCpBrvBIeq0BxZyFiobR1zy1Glr3iAncEqQHO0YVbhml5b0mQ7pND JvOs1t0gd8pLQHadfl2w1ACkck/daugtIdshGX2BgGCrK2aGR67ChtA8WOouigge c75lsGOaVOK1+Z8yXk76JhqjthwiYleSp951q4Cy7vmUGx3thYK/HqxEYUwbwflz STsvvWXUI1ppOmV06dBD53w5NEzcIn9fGtGJbgCokjYOmTLRFwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMa3Y5CdmUJuFvWeki0g9YgwwapsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h Mjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyOTVhNjk1LWU5MWEtNGM1YS04 YTMxLWE5MjBhNDJlYTQ0ZC9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQy ZWE0NGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANoJegwDQQCAAIwBwMFACYGi0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU+tYTccIMK0Eb+dTM7ocyRCu1slh Z9IHRY4ycvSmxP260n3JUV6tLWzPeZL9qXMe6FXhbEGJo4Vzc5NKZi/N3nKzhRno D5WqBXbSwFVClgze0juBlAqXP+zaz/AjASP+vjbtFbzK2KBLAL2HiEa3hJSkbn69 4CUQpzq1D6vRed2nYClPiEBDGN9XUVi1udxXqHM8TzA7pEBwnB8SheJUFkb5Pa++ NVXDiwYO1kctp6SQg/x5MB+he2vHHPZDOTsbzpQpQqog9Ptfy+9GbM84CSxueWJU Oes9weMKxxBo7Va+0NrRzprQ1i3xZyem6uOR7ePOblUhtRlA9B2qsZ0opg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:44 2025 by rpki-client