$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea.cer File: e0071824-c398-470a-8592-de2954877cea.cer (raw, json) Hash identifier: TXpAo+HsrwyqLLDiMsKTT8AL2C6dhw9AQhKdOnrI188= Subject key identifier: 43:BA:D1:B3:E5:10:8D:AB:6F:C2:3D:6C:7C:29:20:88:18:76:FD:B2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A31ADD4B1CC222EF9E56E1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/e0071824-c398-470a-8592-de2954877cea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Jun 2025 00:45:37 +0000 Certificate not after: Sat 18 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 204.75.186.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:ad:d4:b1:cc:22:2e:f9:e5:6e:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 15 00:45:37 2025 GMT Not After : Sep 18 00:45:37 2027 GMT Subject: CN=e0071824-c398-470a-8592-de2954877cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:90:7d:1b:d4:35:ba:04:0b:9b:90:24:5b: 18:86:b9:3e:55:db:2e:39:89:4c:be:97:ae:51:d2: 23:86:94:b0:c7:3f:f9:84:90:67:ab:9b:1e:47:10: e6:41:7b:7a:60:8b:83:c2:84:68:76:d2:c5:fe:c7: ac:c2:b1:23:65:b1:82:7d:b4:73:95:1f:2a:33:6a: 9c:f4:88:d0:9e:ec:77:4a:82:81:26:44:85:03:7c: fb:ec:e8:b7:d8:29:47:4f:b1:d3:37:e6:c3:e5:6a: 7c:85:2b:6f:25:22:bb:ad:3a:0b:1a:34:53:98:73: 5e:55:f0:b5:1e:52:24:40:2b:d4:63:05:ca:2b:40: f6:32:dd:ab:1f:4c:cf:22:8a:cb:29:e3:ef:d1:6b: 68:73:90:48:01:2f:12:83:45:e3:39:64:6b:d8:00: f8:72:24:f8:f2:d8:80:16:de:d2:c5:82:93:95:61: 88:42:58:ab:62:e0:7d:6d:04:7e:d3:7e:79:8f:b0: da:4c:c8:bc:b0:1b:e1:2c:10:21:3d:20:06:de:56: 5c:23:5d:b2:b1:d7:fb:cc:7d:ec:1d:75:c4:19:0d: cf:8a:62:c9:81:af:bc:fd:5a:60:a3:e6:44:83:cc: 11:ad:af:2d:fd:7c:64:b5:91:ba:66:6b:98:35:7c: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:D1:B3:E5:10:8D:AB:6F:C2:3D:6C:7C:29:20:88:18:76:FD:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/e0071824-c398-470a-8592-de2954877cea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 204.75.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c1:a1:f0:fb:2a:d6:94:a4:c4:56:9a:80:e8:4e:2c:18:5b: 10:cb:cf:a2:5b:57:e5:52:81:cb:92:91:63:cd:9e:17:3e:1f: f9:e0:02:66:cf:38:59:90:92:92:7c:15:8c:c4:39:88:d3:e0: 01:db:dc:18:62:0a:33:50:ae:06:06:1a:80:aa:89:6a:37:60: 99:0a:7c:7e:00:aa:95:98:0f:c3:46:19:f9:88:fd:8a:ad:f4: 26:63:da:f5:90:fd:77:a7:48:af:96:72:1b:1a:f4:5a:8c:88: 4d:b6:a8:72:79:8b:3d:ab:c3:b4:5d:43:09:a8:19:75:04:6b: c4:35:5f:49:dd:cc:cb:74:1b:67:a2:85:fd:31:85:92:bb:d9: 7c:1d:97:e5:af:f3:27:e3:cf:6a:aa:3b:3f:d5:0a:0b:19:06: be:bc:e3:54:39:64:85:5e:37:a3:2d:e9:88:67:74:5e:18:c0: 44:f7:a8:86:e0:24:27:26:11:49:6b:3f:f1:3c:6f:cd:f7:6b: 70:cb:56:8b:f2:45:3f:52:64:69:0b:bb:9a:e7:35:53:86:0d: a3:46:b8:f7:41:19:3c:77:f0:37:d3:02:d8:54:bf:d8:0d:d7: c1:48:51:df:f8:2e:93:f6:1c:28:0f:b6:cf:bd:e1:93:a0:a8: b4:5a:fd:5c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEoxrdSxzCIu+eVuEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNTAwNDUzN1oXDTI3MDkxODAwNDUzN1owLzEtMCsGA1UEAxMk ZTAwNzE4MjQtYzM5OC00NzBhLTg1OTItZGUyOTU0ODc3Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWQfRvUNboEC5uQJFsYhrk+VdsuOYlMvpeu UdIjhpSwxz/5hJBnq5seRxDmQXt6YIuDwoRodtLF/seswrEjZbGCfbRzlR8qM2qc 9IjQnux3SoKBJkSFA3z77Oi32ClHT7HTN+bD5Wp8hStvJSK7rToLGjRTmHNeVfC1 HlIkQCvUYwXKK0D2Mt2rH0zPIorLKePv0Wtoc5BIAS8Sg0XjOWRr2AD4ciT48tiA Ft7SxYKTlWGIQlirYuB9bQR+0355j7DaTMi8sBvhLBAhPSAG3lZcI12ysdf7zH3s HXXEGQ3PimLJga+8/Vpgo+ZEg8wRra8t/XxktZG6ZmuYNXxB6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEO60bPlEI2rb8I9bHwpIIgYdv2yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MDA3MTgyNC1jMzk4LTQ3MGEtODU5Mi1kZTI5NTQ4NzdjZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UwMDcxODI0LWMzOTgtNDcwYS04 NTkyLWRlMjk1NDg3N2NlYS9lMDA3MTgyNC1jMzk4LTQ3MGEtODU5Mi1kZTI5NTQ4 NzdjZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMS7owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAisGh8Psq1pSkxFaagOhO LBhbEMvPoltX5VKBy5KRY82eFz4f+eACZs84WZCSknwVjMQ5iNPgAdvcGGIKM1Cu BgYagKqJajdgmQp8fgCqlZgPw0YZ+Yj9iq30JmPa9ZD9d6dIr5ZyGxr0WoyITbao cnmLPavDtF1DCagZdQRrxDVfSd3My3QbZ6KF/TGFkrvZfB2X5a/zJ+PPaqo7P9UK CxkGvrzjVDlkhV43oy3piGd0XhjARPeohuAkJyYRSWs/8TxvzfdrcMtWi/JFP1Jk aQu7muc1U4YNo0a490EZPHfwN9MC2FS/2A3XwUhR3/guk/YcKA+2z73hk6CotFr9 XA== -----END CERTIFICATE-----Generated at Mon Jun 16 16:13:58 2025 by rpki-client