$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer File: 5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer (raw, json) Hash identifier: ismZkQiEWbb4wvqpxJ/fQZQejAbiOk36IszPpZ0gqjY= Subject key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A20EDB9420B2461EED6808A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Jun 2025 00:45:37 +0000 Certificate not after: Sun 12 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 198.184.131.0/24 IP: 198.184.155.0 -- 198.184.158.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:ed:b9:42:0b:24:61:ee:d6:80:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 9 00:45:37 2025 GMT Not After : Sep 12 00:45:37 2027 GMT Subject: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:39:42:10:4c:f3:1b:e3:4e:f6:a8:b5:e3: d6:74:45:2e:fb:2c:66:19:28:d4:91:6b:72:35:86: 13:b7:29:71:24:d8:0c:e8:e6:eb:3b:90:ca:aa:4b: e1:9e:ab:e9:5c:0b:53:26:fe:f4:4b:a3:95:c8:2d: 53:27:f2:a4:1c:b9:fd:cb:fe:ff:0c:e3:c5:d5:52: 68:a5:40:82:d0:3e:c7:31:50:9d:b7:a9:d9:02:2b: cd:40:78:73:f8:65:19:06:e2:e6:56:b9:86:11:cb: a8:35:9b:c4:2a:60:46:b6:52:58:a2:c9:55:51:ba: 69:66:2a:36:fb:37:46:4a:c3:11:94:de:89:9c:66: be:76:ce:9c:03:df:43:5d:b3:58:03:32:9b:57:57: ef:53:b5:ed:8c:80:15:ba:0c:e6:eb:4e:3a:3a:87: 53:74:13:b8:e2:36:f7:80:a0:36:28:b7:6e:99:2d: 83:48:6a:78:fa:3e:c6:bb:d8:4b:d2:e8:5a:3c:52: 5e:26:94:77:2d:e1:d5:86:d2:9e:0a:d9:a4:13:2f: 07:00:0f:17:0b:6a:72:ca:8c:d7:d7:cc:a0:5c:42: e0:e3:25:f1:68:3a:c2:8a:00:5a:04:12:dc:13:a5: e2:b5:c7:5e:02:69:e7:2b:67:ad:3d:bc:4d:bd:8c: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 198.184.155.0-198.184.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:13:80:08:3f:d5:8c:05:85:d1:b8:48:d5:51:aa:bf:51:3a: f1:3e:78:37:67:90:fd:e4:41:98:1b:21:9b:bf:2a:25:5c:73: 22:11:8f:e0:37:25:59:9c:c5:5e:41:51:92:8f:a6:80:f6:16: d1:b4:a8:4f:1e:97:20:e4:bb:ed:94:53:4c:61:e1:54:61:80: c4:f5:8d:68:77:35:82:d2:ef:89:c6:76:c4:db:c0:6c:ad:7e: 33:86:6e:8e:0e:7d:3d:00:fd:3c:70:80:cf:9c:99:14:d4:58: 7f:59:bd:36:bb:5c:11:17:30:23:80:5b:2b:cd:f4:be:4b:70: 0a:2e:49:53:48:65:e1:bd:e0:62:fe:fb:bf:46:b6:3a:64:61: e8:d6:b3:a0:59:1f:2c:c3:97:e3:bc:7c:f1:c1:fe:0b:77:18: 5b:75:0a:f1:5d:3d:1a:b7:cf:5d:fe:7d:88:e9:6f:6c:bd:0c: c4:33:9d:9a:be:ce:be:5e:62:d2:72:b9:50:08:9e:0c:eb:d3: ca:15:0c:51:e3:7f:15:52:0a:1d:85:de:de:4c:41:5c:5b:fa: d0:24:bc:fd:84:eb:66:c9:a5:55:33:18:65:7b:e4:26:ee:60: c0:09:80:68:32:c5:00:ec:26:8f:e0:e0:5e:06:80:9c:77:a5: ae:7a:a6:5a -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEog7blCCyRh7taAigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwOTAwNDUzN1oXDTI3MDkxMjAwNDUzN1owLzEtMCsGA1UEAxMk NWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZmNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs5QhBM8xvjTvaotePWdEUu+yxmGSjUkWty NYYTtylxJNgM6ObrO5DKqkvhnqvpXAtTJv70S6OVyC1TJ/KkHLn9y/7/DOPF1VJo pUCC0D7HMVCdt6nZAivNQHhz+GUZBuLmVrmGEcuoNZvEKmBGtlJYoslVUbppZio2 +zdGSsMRlN6JnGa+ds6cA99DXbNYAzKbV1fvU7XtjIAVugzm6046OodTdBO44jb3 gKA2KLdumS2DSGp4+j7Gu9hL0uhaPFJeJpR3LeHVhtKeCtmkEy8HAA8XC2pyyozX 18ygXELg4yXxaDrCigBaBBLcE6XitcdeAmnnK2etPbxNvYzL6wIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNP17OBeItnP1jSCiPw4iV/mV8IXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkN2Y4MjdiLWY1OWMtNDBmNC04 M2E1LWNkMGM0YjE2ZjQyZS81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIx NmY0MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADGuIMwDAMEAMa4mwMEAMa4njBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ E4AIP9WMBYXRuEjVUaq/UTrxPng3Z5D95EGYGyGbvyolXHMiEY/gNyVZnMVeQVGS j6aA9hbRtKhPHpcg5LvtlFNMYeFUYYDE9Y1odzWC0u+JxnbE28BsrX4zhm6ODn09 AP08cIDPnJkU1Fh/Wb02u1wRFzAjgFsrzfS+S3AKLklTSGXhveBi/vu/RrY6ZGHo 1rOgWR8sw5fjvHzxwf4LdxhbdQrxXT0at89d/n2I6W9svQzEM52avs6+XmLScrlQ CJ4M69PKFQxR438VUgodhd7eTEFcW/rQJLz9hOtmyaVVMxhle+Qm7mDACYBoMsUA 7CaP4OBeBoCcd6WueqZa -----END CERTIFICATE-----Generated at Sun Jun 15 04:48:11 2025 by rpki-client