$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer File: 453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer (raw, json) Hash identifier: dWGv2StEEKslOI6puR7dUIS70rWpMKNH539cIdi5UkQ= Subject key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A6F18E1430E9303AFF402DD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 00:45:37 +0000 Certificate not after: Sun 10 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 55034 IP: 192.243.40.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:18:e1:43:0e:93:03:af:f4:02:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 7 00:45:37 2025 GMT Not After : Oct 10 00:45:37 2027 GMT Subject: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:12:a5:16:37:ed:90:76:d2:7e:41:95:97: f1:f0:64:b3:30:a0:56:ff:c1:f3:55:4d:64:aa:8b: 33:69:91:e2:62:68:c0:81:7f:cb:32:82:bb:bd:77: 3e:7c:10:de:50:04:1b:b5:74:f6:ed:af:41:4a:d7: 20:5d:6c:f6:7a:6c:6e:83:d6:a4:f9:4f:4b:a2:1d: f8:a7:b9:41:c6:d1:41:c7:6d:aa:5b:dd:3a:61:1e: 62:30:65:ea:10:7b:37:1e:0e:31:b4:b3:29:20:24: 53:56:27:11:50:37:6f:0d:97:94:19:c3:66:78:ab: 7e:14:db:22:cb:a0:69:2c:4d:ac:7e:3c:38:e5:b5: f1:ae:03:32:bb:3f:ac:d6:c8:a2:d4:3b:ba:fa:bf: c4:15:c1:b8:94:82:66:24:e3:82:6c:d5:68:c5:77: c4:6f:1b:db:95:6f:77:4f:3d:1d:a9:ff:35:91:9a: 3d:d5:3a:35:5f:df:42:c6:2f:70:77:4b:56:d1:96: 54:56:17:3a:21:2f:83:40:ba:73:c4:0e:06:80:b5: d0:b3:35:e0:6d:ae:ff:e2:1d:77:35:07:75:54:32: ab:47:02:a7:56:25:21:a6:23:a2:b8:34:b7:7d:9b: 86:22:40:d5:4a:25:49:2d:65:53:f8:5c:2b:86:3e: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3e:c5:4b:cc:24:b6:5c:23:88:26:76:af:2e:3f:da:ff:03: 5f:30:77:0e:9d:ed:b1:06:b6:54:59:22:d4:d8:28:77:64:3e: 20:8d:0d:40:49:d3:34:ad:d0:7b:b0:49:24:33:c3:c4:43:13: 6d:bf:51:73:9f:7c:8f:19:9e:30:3a:6c:1b:54:25:e1:75:9b: fa:54:a3:d8:e8:62:b5:f3:68:3f:ca:96:b4:ce:c0:ab:e7:07: d8:a0:5a:85:9b:4f:31:d3:23:a1:42:7d:94:33:49:8b:aa:7a: bb:5f:79:38:ab:6f:26:fa:8c:af:45:13:22:6c:bd:51:9b:11: 65:96:9a:3a:32:2e:18:a2:68:f3:7a:06:74:84:33:57:de:31: f1:25:b2:d1:cd:aa:16:b6:fd:aa:c5:ec:38:c1:80:db:36:cc: 07:e6:44:aa:6a:8b:90:71:ed:c3:77:73:9d:64:40:5f:53:fc: 33:f2:7f:d1:cc:ca:1c:16:39:fd:7e:c5:d0:e7:c6:fc:7f:67: aa:96:1b:43:f2:2d:26:db:26:fc:6f:e7:bd:7a:45:f6:c3:c3: 66:67:d9:26:03:ea:85:73:dc:86:4f:23:d4:3b:bc:90:5f:ec: 11:a5:8f:4c:92:5c:d8:b3:41:90:a5:2a:64:0d:c7:97:9a:83: c1:5b:35:27 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpvGOFDDpMDr/QC3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcwNzAwNDUzN1oXDTI3MTAxMDAwNDUzN1owLzEtMCsGA1UEAxMk NDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYISpRY37ZB20n5BlZfx8GSzMKBW/8HzVU1k qoszaZHiYmjAgX/LMoK7vXc+fBDeUAQbtXT27a9BStcgXWz2emxug9ak+U9Loh34 p7lBxtFBx22qW906YR5iMGXqEHs3Hg4xtLMpICRTVicRUDdvDZeUGcNmeKt+FNsi y6BpLE2sfjw45bXxrgMyuz+s1sii1Du6+r/EFcG4lIJmJOOCbNVoxXfEbxvblW93 Tz0dqf81kZo91To1X99Cxi9wd0tW0ZZUVhc6IS+DQLpzxA4GgLXQszXgba7/4h13 NQd1VDKrRwKnViUhpiOiuDS3fZuGIkDVSiVJLWVT+Fwrhj4dSQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIeEDz4ojev6wFhzqnczKgYV09wHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1i NWJhLWJhOGUwYmRjOWNhOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJk YzljYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPA8ygwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANb6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFs+xUvMJLZcI4gmdq8uP9r/A18wdw6d7bEGtlRZItTYKHdk PiCNDUBJ0zSt0HuwSSQzw8RDE22/UXOffI8ZnjA6bBtUJeF1m/pUo9joYrXzaD/K lrTOwKvnB9igWoWbTzHTI6FCfZQzSYuqertfeTirbyb6jK9FEyJsvVGbEWWWmjoy LhiiaPN6BnSEM1feMfElstHNqha2/arF7DjBgNs2zAfmRKpqi5Bx7cN3c51kQF9T /DPyf9HMyhwWOf1+xdDnxvx/Z6qWG0PyLSbbJvxv5716RfbDw2Zn2SYD6oVz3IZP I9Q7vJBf7BGlj0ySXNizQZClKmQNx5eag8FbNSc= -----END CERTIFICATE-----Generated at Wed Jul 9 21:15:35 2025 by rpki-client