$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer File: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer (raw, json) Hash identifier: BwTgZkkVWrPpZmAENxi1URabJ7AWTaaqhCXWGpK/8tU= Subject key identifier: C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849F9D8266D8F4D829534602FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 May 2025 00:45:37 +0000 Certificate not after: Sun 29 Aug 2027 00:45:37 +0000 Subordinate resources: IP: 192.70.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:d8:26:6d:8f:4d:82:95:34:60:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 26 00:45:37 2025 GMT Not After : Aug 29 00:45:37 2027 GMT Subject: CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:57:fb:97:e0:86:95:c5:cf:31:23:48:41: 9e:5d:59:a2:61:5e:f5:78:5d:2f:3f:fb:76:04:10: bd:28:04:4c:f9:40:ba:eb:67:6f:3c:66:cf:84:f8: a9:52:f7:2e:04:88:80:b8:7b:42:96:ab:48:de:c2: f1:9c:89:38:4d:40:40:27:9f:04:a5:4e:57:5a:ad: ac:34:8a:63:10:f3:af:ad:d4:7b:69:dc:35:bd:42: 41:79:db:fc:63:f8:12:d9:6d:94:e2:3e:9f:79:2f: 8e:bc:3b:19:3c:22:0e:2a:45:6d:e3:4a:8f:4f:e4: 41:f6:db:68:0b:69:96:e3:12:63:e5:cb:a4:0b:8e: db:01:b3:3d:44:ad:63:eb:d7:32:18:f6:d0:34:70: 61:83:a7:63:ae:e8:03:1b:35:1a:82:c3:25:33:09: 39:ed:a3:4c:20:c4:61:e6:13:17:b1:8d:6b:6c:8f: 13:a8:ee:3a:f9:dd:95:59:d5:1f:80:81:9a:2d:3a: de:65:8a:7f:9b:c2:4c:51:84:7a:32:43:8b:67:1d: 80:d3:f9:04:49:50:a7:42:c0:f2:e7:f5:a9:5f:96: 42:ab:c3:89:da:7f:ae:55:0b:11:d5:cc:94:b2:62: 7a:96:9f:8b:fe:8e:01:4a:fd:5b:e0:14:75:87:4b: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.70.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dd:d6:dc:06:2a:8c:23:7a:d2:bf:19:2b:6d:29:d7:6b:08: d9:e4:f4:d8:61:e8:64:77:3f:3f:6d:f6:4b:10:9a:8b:1f:99: 35:07:32:d2:37:59:48:e4:0a:4c:d8:6f:55:dd:01:4c:00:f8: 48:f3:a8:b5:fe:3e:50:50:1a:bb:c3:eb:ee:cd:ab:b0:19:a8: fc:f1:b8:55:46:80:3e:54:b6:87:ac:72:37:80:69:de:83:e6: 7d:51:e8:02:8f:c9:8f:f8:34:a3:b1:61:0d:8c:5e:ad:1b:fe: ce:a8:cd:74:85:f4:82:fe:0f:02:88:5b:ed:06:12:fd:e7:40: 81:ef:c1:0f:6d:78:88:5f:19:26:ac:46:64:24:02:48:ef:f4: 29:51:df:a3:30:76:fe:b9:cb:8e:a1:c0:0a:11:0e:5f:76:03: 5e:16:5f:d7:0f:3e:25:fd:88:ff:78:00:01:0a:55:92:0a:ee: 09:b0:5c:bd:79:90:49:c9:cb:65:95:c9:63:8d:27:f5:95:ee: d8:30:e3:6e:05:7c:ba:3d:49:df:70:f4:dd:d4:3f:bb:9c:8e: 46:5a:25:06:8f:6c:f2:3a:b8:7c:93:56:1b:ab:49:67:d7:4b: 9e:13:38:20:96:2d:b3:aa:9a:30:b4:c9:0f:c7:5a:11:80:6d: 28:f0:ab:9b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEn52CZtj02ClTRgL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyNjAwNDUzN1oXDTI3MDgyOTAwNDUzN1owLzEtMCsGA1UEAxMk NjVmNjU5OWUtZjBjYy00NjQxLWI3Y2QtOWUwYTJlYjJiYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2VX+5fghpXFzzEjSEGeXVmiYV71eF0vP/t2 BBC9KARM+UC662dvPGbPhPipUvcuBIiAuHtClqtI3sLxnIk4TUBAJ58EpU5XWq2s NIpjEPOvrdR7adw1vUJBedv8Y/gS2W2U4j6feS+OvDsZPCIOKkVt40qPT+RB9tto C2mW4xJj5cukC47bAbM9RK1j69cyGPbQNHBhg6djrugDGzUagsMlMwk57aNMIMRh 5hMXsY1rbI8TqO46+d2VWdUfgIGaLTreZYp/m8JMUYR6MkOLZx2A0/kESVCnQsDy 5/WpX5ZCq8OJ2n+uVQsR1cyUsmJ6lp+L/o4BSv1b4BR1h0tfWwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMmXxyFt9MCZu6xdmVQanrKayUiHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 NWY2NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBhMmViMmJjOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY1ZjY1OTllLWYwY2MtNDY0MS1i N2NkLTllMGEyZWIyYmM5Zi82NWY2NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBhMmVi MmJjOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADARv8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASN3W3AYqjCN60r8ZK20p 12sI2eT02GHoZHc/P232SxCaix+ZNQcy0jdZSOQKTNhvVd0BTAD4SPOotf4+UFAa u8Pr7s2rsBmo/PG4VUaAPlS2h6xyN4Bp3oPmfVHoAo/Jj/g0o7FhDYxerRv+zqjN dIX0gv4PAohb7QYS/edAge/BD214iF8ZJqxGZCQCSO/0KVHfozB2/rnLjqHAChEO X3YDXhZf1w8+Jf2I/3gAAQpVkgruCbBcvXmQScnLZZXJY40n9ZXu2DDjbgV8uj1J 33D03dQ/u5yORlolBo9s8jq4fJNWG6tJZ9dLnhM4IJYts6qaMLTJD8daEYBtKPCr mw== -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:02 2025 by rpki-client