$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer File: d96f592a-8fa9-4ec8-a272-b56c2537919c.cer (raw, json) Hash identifier: HJsLKB3gtO+S8JtxzTxp0l2J856WjJE4Xt078jARU8E= Subject key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A15825C2F19ABE638C82D2DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Jun 2025 22:35:24 +0000 Certificate not after: Tue 07 Sep 2027 22:35:24 +0000 Subordinate resources: AS: 399587 IP: 23.139.228.0/24 IP: 2602:f623::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:82:5c:2f:19:ab:e6:38:c8:2d:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 4 22:35:24 2025 GMT Not After : Sep 7 22:35:24 2027 GMT Subject: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:fd:d5:5a:f0:6b:04:40:3d:06:d2:6d:8b: a3:37:39:95:3d:ea:f5:3a:aa:4d:36:7a:b5:b4:3c: 75:81:67:ad:3f:d8:f9:2b:dc:a9:ec:1d:ca:70:ba: d1:0b:20:b4:8b:16:a3:f6:a2:0d:d4:df:2c:40:ec: d0:0c:c4:49:1c:94:a6:ce:fa:aa:b2:03:b3:c3:a8: 98:f1:d7:83:92:96:bf:9f:90:c8:da:22:c8:18:be: b6:f1:83:58:31:95:dc:ba:39:a9:10:e5:90:4e:3b: 81:cd:3d:e6:a6:97:9e:78:ba:bd:df:2b:5e:23:c1: fe:8a:8c:49:92:a4:84:27:c1:48:15:9d:37:b3:26: 0a:c0:d5:6f:22:27:c7:2d:1c:f7:15:4d:6a:80:a4: f5:25:78:2f:a9:64:ff:57:e3:57:0f:80:78:dc:00: fa:b4:07:d9:bd:0f:77:24:b7:71:8a:50:c8:76:27: a5:b8:c5:e0:5f:47:26:8c:b4:f5:29:ea:73:26:b4: c9:9b:ea:72:82:04:ce:20:3b:5a:b1:7a:f0:d6:89: 4a:39:3f:2a:62:86:9a:dd:64:28:0a:b3:15:25:90: 8e:25:e0:42:57:fd:20:f6:a6:58:21:da:20:e9:87: 39:9a:b6:25:aa:c0:e6:3f:d5:ae:59:bc:da:00:bb: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 IPv6: 2602:f623::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399587 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2f:00:66:e3:f2:48:7a:f3:61:78:8b:aa:18:5d:8d:f6:fb: 01:fb:b9:fb:83:27:0e:d8:fd:ab:91:d5:64:d0:de:bf:98:d2: 32:48:1e:37:7b:c2:bb:48:18:58:f2:c6:bc:6b:b5:94:60:e3: ad:3f:fc:6b:28:d7:d9:79:b0:14:ef:9a:84:f8:03:7a:67:86: 1b:91:f1:65:3d:41:d0:8f:06:4f:e3:aa:60:47:2b:95:14:fa: 47:3a:fa:24:a6:4e:63:32:04:16:f9:73:36:1a:06:40:67:9b: f7:22:05:4c:c3:0a:72:1c:38:4f:4e:74:af:03:e2:18:2b:2f: 0d:3f:54:ec:40:3a:9e:74:7b:df:e9:82:ad:4a:d6:45:f2:57: b9:5f:b0:5c:08:f6:af:b4:63:0e:5b:c1:c6:2e:2f:2a:1a:b5: fb:d7:a0:bd:ed:b9:8d:fa:64:d0:de:d2:d8:27:96:d4:de:c7: 1e:62:e5:4c:13:55:fd:05:1d:a9:29:ba:25:bc:be:5f:a4:99: 4d:6c:67:16:5a:de:8b:e1:25:42:e8:18:a1:eb:88:56:b3:a7: 34:a5:6f:81:d7:b3:b7:35:c6:2b:e0:f7:d7:fa:0c:50:89:6e: 1e:08:77:cc:27:33:b0:c1:b6:8d:82:3c:9d:2a:50:05:cc:ca: 55:7c:12:2a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEoVglwvGavmOMgtLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNDIyMzUyNFoXDTI3MDkwNzIyMzUyNFowLzEtMCsGA1UEAxMk ZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00H91VrwawRAPQbSbYujNzmVPer1OqpNNnq1 tDx1gWetP9j5K9yp7B3KcLrRCyC0ixaj9qIN1N8sQOzQDMRJHJSmzvqqsgOzw6iY 8deDkpa/n5DI2iLIGL628YNYMZXcujmpEOWQTjuBzT3mppeeeLq93yteI8H+ioxJ kqSEJ8FIFZ03syYKwNVvIifHLRz3FU1qgKT1JXgvqWT/V+NXD4B43AD6tAfZvQ93 JLdxilDIdieluMXgX0cmjLT1KepzJrTJm+pyggTOIDtasXrw1olKOT8qYoaa3WQo CrMVJZCOJeBCV/0g9qZYIdog6Yc5mrYlqsDmP9WuWbzaALtkIQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBSe/r9q2QEoOhZ+THDTY0FHgELyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k OTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q5NmY1OTJhLThmYTktNGVjOC1h MjcyLWI1NmMyNTM3OTE5Yy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUz NzkxOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi+QwDgQCAAIwCAMGBCYC9iMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYY4zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMLwBm4/JIevNheIuqGF2N9vsB +7n7gycO2P2rkdVk0N6/mNIySB43e8K7SBhY8sa8a7WUYOOtP/xrKNfZebAU75qE +AN6Z4YbkfFlPUHQjwZP46pgRyuVFPpHOvokpk5jMgQW+XM2GgZAZ5v3IgVMwwpy HDhPTnSvA+IYKy8NP1TsQDqedHvf6YKtStZF8le5X7BcCPavtGMOW8HGLi8qGrX7 16C97bmN+mTQ3tLYJ5bU3sceYuVME1X9BR2pKbolvL5fpJlNbGcWWt6L4SVC6Bih 64hWs6c0pW+B17O3NcYr4PfX+gxQiW4eCHfMJzOwwbaNgjydKlAFzMpVfBIq -----END CERTIFICATE-----Generated at Sat Jun 7 19:51:57 2025 by rpki-client