$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer File: 25b8413b-5254-4959-a9f1-d00f0fc1b819.cer (raw, json) Hash identifier: w3vd4WcR4tueQglVqAgpk5/FGSY0LZAnLuvkltYNEUs= Subject key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A22530FEE5DFF0B580793CDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Jun 2025 12:45:36 +0000 Certificate not after: Sun 12 Sep 2027 12:45:36 +0000 Subordinate resources: IP: 150.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:53:0f:ee:5d:ff:0b:58:07:93:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 9 12:45:36 2025 GMT Not After : Sep 12 12:45:36 2027 GMT Subject: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:93:cb:8e:01:c3:1e:ff:4e:ae:5f:87:53: 80:89:36:d2:1b:5f:03:fb:2a:a5:f6:27:33:f4:c6: 4e:96:9d:a2:b0:4b:66:9f:f0:30:83:63:b0:0f:cd: 6d:54:d8:20:bc:52:a1:55:ea:a7:6f:be:cf:45:16: 02:50:7a:8d:1a:a5:4f:8e:19:16:70:b7:0a:4d:59: be:4b:0c:af:ad:ce:85:ce:ba:ba:2b:fa:dd:66:ed: 97:38:aa:a3:1c:eb:5a:c3:02:52:a6:d6:45:6d:85: 2c:61:fc:f0:20:99:0b:67:b5:e5:17:b5:8d:d8:c7: 98:a0:3b:61:20:4c:05:db:a6:3e:fc:e4:b0:b0:a1: 56:a4:49:b4:bd:64:ef:17:80:82:c9:f6:1d:c1:a5: 42:ac:09:a1:49:a7:49:46:bd:d3:50:47:62:10:4c: 63:73:c7:76:3b:67:96:3d:ef:21:e2:3a:a5:b3:72: 24:3e:21:58:6f:8f:93:1d:d0:50:dc:5e:a6:f5:c0: 89:19:f8:5d:3c:fb:80:9f:d5:6e:67:6c:ae:cd:5b: f8:70:a0:cd:e5:1c:90:b9:d5:98:d7:e9:03:8d:30: 97:51:7c:7a:bb:ee:ba:2c:de:14:50:6c:e2:50:bf: 4c:4b:64:39:73:b4:14:c5:28:77:17:1f:7d:76:a1: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 150.250.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:35:b8:26:4d:9d:66:bf:5f:c1:8d:87:9a:26:d4:74:2a:94: ca:df:64:a3:aa:2c:70:54:ce:73:48:87:d1:61:64:e6:cb:f8: 69:a7:6b:ad:5a:ab:1e:ba:4b:20:81:4b:30:2a:2f:a0:99:58: 03:8b:ef:13:0c:1b:b1:a4:42:72:c4:e2:00:c1:04:fb:8f:90: ca:7b:69:90:84:df:32:95:b1:31:a0:a2:91:f7:20:64:e3:fe: 8a:65:cd:57:ab:71:18:d9:e4:ff:dc:8f:68:06:c4:39:7d:59: 17:de:1e:04:fb:a5:a8:df:0f:c9:71:a2:d6:8b:7f:46:94:b9: 9c:78:ea:33:36:97:e4:da:d8:50:58:9b:b1:61:f4:ac:22:84: a1:52:67:40:0c:05:5f:fa:05:c9:2b:4a:24:78:0d:b7:26:33: cb:ab:a4:fc:1a:53:55:ff:36:c4:9f:3e:97:b9:00:bd:72:fb: ba:b7:50:34:43:db:b0:75:7c:cd:11:84:fc:81:a4:ea:c9:24: 05:61:f1:63:70:65:bd:00:82:bb:38:c2:88:ef:0c:be:1b:7f: 5c:e9:ff:19:23:3a:7e:82:68:0b:9c:a0:3f:d7:07:6c:dc:46: 37:71:c6:54:b2:ee:17:95:2b:fa:44:37:19:62:d5:eb:13:cf: ba:9f:e2:9a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEoiUw/uXf8LWAeTzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwOTEyNDUzNloXDTI3MDkxMjEyNDUzNlowLzEtMCsGA1UEAxMk MjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFiODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUeTy44Bwx7/Tq5fh1OAiTbSG18D+yql9icz 9MZOlp2isEtmn/Awg2OwD81tVNggvFKhVeqnb77PRRYCUHqNGqVPjhkWcLcKTVm+ Swyvrc6Fzrq6K/rdZu2XOKqjHOtawwJSptZFbYUsYfzwIJkLZ7XlF7WN2MeYoDth IEwF26Y+/OSwsKFWpEm0vWTvF4CCyfYdwaVCrAmhSadJRr3TUEdiEExjc8d2O2eW Pe8h4jqls3IkPiFYb4+THdBQ3F6m9cCJGfhdPPuAn9VuZ2yuzVv4cKDN5RyQudWY 1+kDjTCXUXx6u+66LN4UUGziUL9MS2Q5c7QUxSh3Fx99dqGh0QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJvB1fKfDPV2eWffcCVKa4tluR5aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI1Yjg0MTNiLTUyNTQtNDk1OS1h OWYxLWQwMGYwZmMxYjgxOS8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZj MWI4MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCW+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApNbgmTZ1mv1/BjYeaJtR0 KpTK32SjqixwVM5zSIfRYWTmy/hpp2utWqseuksggUswKi+gmVgDi+8TDBuxpEJy xOIAwQT7j5DKe2mQhN8ylbExoKKR9yBk4/6KZc1Xq3EY2eT/3I9oBsQ5fVkX3h4E +6Wo3w/JcaLWi39GlLmceOozNpfk2thQWJuxYfSsIoShUmdADAVf+gXJK0okeA23 JjPLq6T8GlNV/zbEnz6XuQC9cvu6t1A0Q9uwdXzNEYT8gaTqySQFYfFjcGW9AIK7 OMKI7wy+G39c6f8ZIzp+gmgLnKA/1wds3EY3ccZUsu4XlSv6RDcZYtXrE8+6n+Ka -----END CERTIFICATE-----Generated at Sun Jun 15 05:27:55 2025 by rpki-client