$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer File: b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer (raw, json) Hash identifier: e7cSy7DZ58uB5v+lq8jUX09/vFBWHozuUgN8GC2l4Os= Subject key identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A2683188F7AA3AFD35BF80920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 00:45:37 +0000 Certificate not after: Tue 14 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 140.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:83:18:8f:7a:a3:af:d3:5b:f8:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 11 00:45:37 2025 GMT Not After : Sep 14 00:45:37 2027 GMT Subject: CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:7e:18:52:1c:f4:ef:3b:99:af:98:51:33: d4:3a:1c:af:05:99:7d:be:fa:7d:29:aa:ff:ac:8b: 21:74:93:1b:24:5f:a5:6a:bc:dc:6c:a6:a0:d5:b4: 40:79:37:16:36:ec:1e:42:6b:dd:1c:c7:13:15:f9: 8e:a9:a7:60:11:e2:5c:a4:4f:44:48:60:d0:9a:e3: 0b:93:f8:da:a1:ec:c8:cf:da:9d:d3:96:1c:80:45: 8c:cf:d5:2a:00:ff:0d:af:e4:02:a8:4d:0b:30:8c: c3:e1:9f:1b:d7:02:fa:13:fb:db:f2:4d:8c:71:42: f0:d0:f2:a2:7e:5f:46:a3:c8:89:13:0e:ce:ae:c2: 02:50:70:6c:c3:0f:79:8b:8d:d0:08:94:14:5e:1e: 02:9d:fa:57:55:52:fa:fe:77:7f:94:2b:6e:4e:0b: 30:ed:96:14:dc:ef:ee:73:01:97:96:1e:16:99:1e: 79:03:d2:b9:5d:3e:7e:89:ea:3f:99:f0:79:ec:f6: df:e0:d2:6b:33:8d:ab:78:40:12:87:f6:ee:f3:f3: 57:e7:f0:b6:c6:87:44:05:14:a0:32:18:61:fd:4e: cb:20:75:31:10:b4:6f:21:34:cc:02:96:f0:4b:d1: 1a:93:09:91:ae:08:b3:98:59:8a:b9:1a:0b:bc:46: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 140.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3a:7c:3b:ae:23:0f:a4:c6:f0:80:d9:4d:ab:c5:e6:55:07: fb:38:15:c7:e5:fa:d8:99:d3:9e:af:bd:16:9b:d1:47:85:c8: bd:c4:ab:fa:38:7d:b6:99:f3:56:22:0f:54:cc:4e:90:88:ee: 5d:4e:38:c0:ad:41:36:80:e7:ec:4f:99:98:bd:45:9c:fe:9e: 56:23:9b:31:31:ed:cd:de:6f:92:34:28:5e:b4:45:a6:9c:f5: 35:35:fa:4d:59:0c:3d:fb:0b:fe:ab:fa:80:83:cf:fe:d4:0f: 66:5c:13:71:3e:79:4f:a2:69:9e:36:8c:c5:d4:2d:f7:55:e6: e0:32:d2:b9:08:26:5c:71:df:18:b9:ef:f2:ad:e8:5d:85:56: 06:08:c1:d8:cc:60:30:69:fe:3e:86:c1:c3:b3:cd:40:76:e0: 27:a1:71:25:be:ce:64:dd:8e:0b:0b:8a:0a:4d:3b:6c:f9:2d: ba:7a:c8:38:7e:53:32:18:e7:f3:2e:12:96:fb:79:06:fe:1c: a5:6b:37:10:e7:3b:02:6f:d4:cb:da:63:6d:ce:8d:7c:75:be: 3e:13:fd:0c:cc:fe:5a:e3:55:c9:a3:12:b5:97:c0:a2:be:cd: 9b:a8:04:c3:87:30:6d:d5:d1:d6:4e:00:35:13:13:08:2b:1a: be:0a:25:38 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEomgxiPeqOv01v4CSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMTAwNDUzN1oXDTI3MDkxNDAwNDUzN1owLzEtMCsGA1UEAxMk YjdhYzljYzgtNDE3My00NWNmLWJjNTktMjAwYThkNmQ5YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdR+GFIc9O87ma+YUTPUOhyvBZl9vvp9Kar/ rIshdJMbJF+larzcbKag1bRAeTcWNuweQmvdHMcTFfmOqadgEeJcpE9ESGDQmuML k/jaoezIz9qd05YcgEWMz9UqAP8Nr+QCqE0LMIzD4Z8b1wL6E/vb8k2McULw0PKi fl9Go8iJEw7OrsICUHBsww95i43QCJQUXh4CnfpXVVL6/nd/lCtuTgsw7ZYU3O/u cwGXlh4WmR55A9K5XT5+ieo/mfB57Pbf4NJrM42reEASh/bu8/NX5/C2xodEBRSg Mhhh/U7LIHUxELRvITTMApbwS9EakwmRrgizmFmKuRoLvEbpTwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLfhEYDjsTzhC3Hf3/0ADoODQBF+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i N2FjOWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBhOGQ2ZDliMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I3YWM5Y2M4LTQxNzMtNDVjZi1i YzU5LTIwMGE4ZDZkOWIzNi9iN2FjOWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBhOGQ2 ZDliMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCMoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuOnw7riMPpMbwgNlNq8Xm VQf7OBXH5frYmdOer70Wm9FHhci9xKv6OH22mfNWIg9UzE6QiO5dTjjArUE2gOfs T5mYvUWc/p5WI5sxMe3N3m+SNChetEWmnPU1NfpNWQw9+wv+q/qAg8/+1A9mXBNx PnlPommeNozF1C33VebgMtK5CCZccd8Yue/yrehdhVYGCMHYzGAwaf4+hsHDs81A duAnoXElvs5k3Y4LC4oKTTts+S26esg4flMyGOfzLhKW+3kG/hylazcQ5zsCb9TL 2mNtzo18db4+E/0MzP5a41XJoxK1l8Civs2bqATDhzBt1dHWTgA1ExMIKxq+CiU4 -----END CERTIFICATE-----Generated at Sun Jun 15 05:08:34 2025 by rpki-client