$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.cer File: ccea9ef3-18b8-4cea-8252-4728b9bd8c88.cer (raw, json) Hash identifier: 0936VSjPGmoaK+5PkUm+pb79LQIYdoWkFqPfNTM7jGg= Subject key identifier: 1E:DE:FF:22:12:E2:DD:F6:8B:44:1D:C5:E9:1A:E6:5D:6F:28:DA:99 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A365D0419F424BCC339E5D300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 17:01:50 +0000 Certificate not after: Sun 19 Sep 2027 17:01:50 +0000 Subordinate resources: AS: 397303 IP: 50.20.112.0/20 IP: 147.160.7.0/24 IP: 2605:c840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:5d:04:19:f4:24:bc:c3:39:e5:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 16 17:01:50 2025 GMT Not After : Sep 19 17:01:50 2027 GMT Subject: CN=ccea9ef3-18b8-4cea-8252-4728b9bd8c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:38:6a:29:a1:62:5e:60:5b:d0:c1:dc:03: 08:52:da:a2:86:fd:ac:1b:25:4d:e4:5e:5b:75:ad: f6:8b:0a:05:88:b6:ff:7f:1a:2b:1c:ae:d2:e5:e5: 27:69:93:07:a8:bc:a3:66:3c:88:14:3e:32:0d:d8: be:e1:b4:6d:fb:dc:45:3e:72:17:3b:93:a3:94:89: ee:8b:d9:be:15:25:2b:12:23:02:57:79:77:57:aa: 57:b9:12:a7:97:51:5c:e6:62:f1:d2:ff:66:73:75: 27:bf:4a:4e:03:a5:2e:bf:33:45:f5:f1:1e:c2:89: 14:47:35:c1:cd:fe:d3:47:4a:0b:af:d8:2a:21:af: 19:28:87:0f:0e:09:71:78:8e:5e:c6:10:97:42:c5: b3:e1:e9:45:4a:d4:be:e1:fd:2f:d3:d1:42:83:28: 36:af:00:a1:0d:98:76:fd:33:c9:ee:52:ea:ee:78: d9:83:0a:d5:49:0f:70:1c:7a:13:87:7c:e8:ce:4c: f7:83:02:5d:25:4a:43:1d:8e:36:3f:60:53:f3:ab: d0:57:b6:80:cf:33:b2:39:5e:4d:a7:f5:5f:fa:91: ae:94:6e:66:76:5a:cd:53:67:de:84:b8:fd:36:5c: 36:a2:bb:bf:e3:4c:50:06:22:5a:62:d7:f1:3b:f5: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DE:FF:22:12:E2:DD:F6:8B:44:1D:C5:E9:1A:E6:5D:6F:28:DA:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 50.20.112.0/20 147.160.7.0/24 IPv6: 2605:c840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4a:59:70:73:e4:12:90:0e:5b:6a:15:20:2c:bb:ae:e0:cc: ec:6f:10:83:c7:ef:e4:d1:48:19:28:38:ec:95:f4:02:48:f2: f6:48:c6:15:8c:00:75:ed:53:aa:aa:7a:17:25:1f:91:eb:e6: 65:7e:1f:19:bb:3e:52:5d:74:aa:ba:07:fd:30:51:b5:93:15: 17:dc:f8:4b:cb:23:c8:e3:3f:9a:66:1e:cc:07:aa:a0:5e:8b: fd:73:ce:2e:cf:2e:16:f6:c6:ee:77:9b:b2:0d:21:38:39:63: 7f:42:ee:e5:89:af:eb:86:59:80:5e:25:e7:cc:85:36:2d:ec: 28:fe:9f:00:48:06:6a:12:84:4f:2a:bf:7a:cb:16:6a:ab:0d: 25:fb:e3:90:89:08:ca:4f:dc:ad:a7:52:bf:dd:5f:d0:09:77: 49:47:71:e7:0b:50:2f:a8:99:a7:46:12:b2:52:c6:41:74:2a: bb:85:dc:a8:02:27:0f:65:04:97:a1:6f:ce:06:58:3b:68:67: 56:08:ad:a3:40:f3:4a:03:52:7c:63:2e:a9:65:a0:45:f8:3b: fe:b2:02:62:ab:bb:56:9a:25:bd:eb:bf:6d:92:bc:a4:9d:73: 67:da:5a:1f:67:79:ac:46:f0:91:e0:3e:56:7c:ae:0b:3c:f0: ce:49:e5:5f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEo2XQQZ9CS8wznl0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxNjE3MDE1MFoXDTI3MDkxOTE3MDE1MFowLzEtMCsGA1UEAxMk Y2NlYTllZjMtMThiOC00Y2VhLTgyNTItNDcyOGI5YmQ4Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5k4aimhYl5gW9DB3AMIUtqihv2sGyVN5F5b da32iwoFiLb/fxorHK7S5eUnaZMHqLyjZjyIFD4yDdi+4bRt+9xFPnIXO5OjlInu i9m+FSUrEiMCV3l3V6pXuRKnl1Fc5mLx0v9mc3Unv0pOA6UuvzNF9fEewokURzXB zf7TR0oLr9gqIa8ZKIcPDglxeI5exhCXQsWz4elFStS+4f0v09FCgyg2rwChDZh2 /TPJ7lLq7njZgwrVSQ9wHHoTh3zozkz3gwJdJUpDHY42P2BT86vQV7aAzzOyOV5N p/Vf+pGulG5mdlrNU2fehLj9Nlw2oru/40xQBiJaYtfxO/Vs0QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFB7e/yIS4t32i0Qdxeka5l1vKNqZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j Y2VhOWVmMy0xOGI4LTRjZWEtODI1Mi00NzI4YjliZDhjODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NjZWE5ZWYzLTE4YjgtNGNlYS04 MjUyLTQ3MjhiOWJkOGM4OC9jY2VhOWVmMy0xOGI4LTRjZWEtODI1Mi00NzI4Yjli ZDhjODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAQyFHADBACToAcwDQQCAAIwBwMFACYFyEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBg/3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGRKWXBz5BKQDltqFSAs u67gzOxvEIPH7+TRSBkoOOyV9AJI8vZIxhWMAHXtU6qqehclH5Hr5mV+Hxm7PlJd dKq6B/0wUbWTFRfc+EvLI8jjP5pmHswHqqBei/1zzi7PLhb2xu53m7INITg5Y39C 7uWJr+uGWYBeJefMhTYt7Cj+nwBIBmoShE8qv3rLFmqrDSX745CJCMpP3K2nUr/d X9AJd0lHcecLUC+omadGErJSxkF0KruF3KgCJw9lBJehb84GWDtoZ1YIraNA80oD UnxjLqlloEX4O/6yAmKru1aaJb3rv22SvKSdc2faWh9neaxG8JHgPlZ8rgs88M5J 5V8= -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:41 2025 by rpki-client