$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer File: 7df054b7-0dbd-410a-8a6a-10af5728e84a.cer (raw, json) Hash identifier: kFMIBUCcNyZgMnFfoMlNotMFIPe9oEF3USm/VLuedxk= Subject key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABD43ED57EF92BEF247794280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 00:45:24 +0000 Certificate not after: Sun 07 Nov 2027 00:45:24 +0000 Subordinate resources: IP: 167.253.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:43:ed:57:ef:92:be:f2:47:79:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 4 00:45:24 2025 GMT Not After : Nov 7 00:45:24 2027 GMT Subject: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:6f:81:72:65:07:ea:e1:8c:cd:1f:3e:22: 40:8e:c0:d9:75:a4:b8:3d:55:fc:dd:a4:a3:23:9d: e9:35:10:5c:78:a3:0e:98:cd:22:70:ef:32:b9:73: f9:0e:92:bd:4f:b6:5a:09:6a:84:c8:b2:3c:66:72: a7:81:fc:92:fb:eb:4b:0b:0f:1f:3d:4d:65:57:f1: 69:d3:52:4b:8b:b9:b1:7f:e9:39:b7:31:41:9f:a6: 55:fb:69:99:0e:52:2a:30:63:cd:56:76:4c:51:2f: 64:d6:79:ad:ee:63:bb:91:83:ba:57:4b:b6:07:c6: bd:3e:21:bb:6f:23:0d:fb:25:a5:1b:d3:51:63:e4: 70:fe:17:60:6a:09:36:5c:9c:6a:65:84:50:ea:ed: 88:bb:a4:08:0f:79:c2:27:0f:bc:57:97:2e:ad:7f: 53:f0:42:15:00:34:e2:36:a0:74:5f:ac:80:59:4a: 6f:39:e8:22:88:7c:80:39:63:73:11:2c:19:b4:58: ad:4b:7f:f2:79:64:5b:c9:35:2e:da:5a:b8:ee:f2: 3c:77:59:94:62:5a:2f:38:b0:b9:07:3b:05:fc:15: 67:0d:0e:b5:b9:63:cc:5a:0c:eb:82:c5:b8:bb:93: 61:19:1d:35:11:e6:7f:d9:c5:6c:48:a5:3a:95:c1: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3e:39:cd:61:1d:f7:07:14:6e:54:ab:b5:32:a6:58:cf:ec: fd:ba:82:bb:0c:39:8d:75:6b:7e:08:f9:ea:79:b3:ec:a7:97: ad:67:ca:fd:be:e1:07:56:53:1c:11:5e:69:e1:14:c1:25:5b: e9:06:70:22:ca:46:34:a2:34:e3:12:f8:72:34:55:59:11:13: f8:d9:99:3b:e5:07:c5:c9:99:b0:6f:24:f9:19:7a:66:23:61: 74:f7:6a:ce:48:15:ae:a8:70:aa:c3:c6:ee:2b:db:42:3e:a6: 21:61:95:76:e9:e8:55:aa:5a:f4:7e:b9:77:18:01:85:d6:33: 96:fa:25:62:e0:23:38:66:4b:dd:64:bd:be:d2:36:79:67:2d: e5:16:ff:75:e2:7d:94:74:0c:97:d5:07:57:1e:89:72:02:26: af:46:a6:4d:0b:4c:cb:5d:14:cc:92:43:30:37:1c:f9:13:7c: 31:81:1c:fd:88:33:78:95:2d:d3:ae:b7:0d:f0:18:b6:bc:c6: a6:d7:5b:81:1b:1b:77:29:60:53:59:26:25:c7:8f:56:41:c5: a1:0c:3c:67:30:2d:71:10:fa:62:65:88:96:f2:a3:8a:33:a3: f0:dd:ed:b0:ee:f3:bc:ac:b1:17:db:4b:ae:2a:69:55:9d:9f: 86:c4:83:da -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEq9Q+1X75K+8kd5QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNDAwNDUyNFoXDTI3MTEwNzAwNDUyNFowLzEtMCsGA1UEAxMk N2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3MjhlODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApalvgXJlB+rhjM0fPiJAjsDZdaS4PVX83aSj I53pNRBceKMOmM0icO8yuXP5DpK9T7ZaCWqEyLI8ZnKngfyS++tLCw8fPU1lV/Fp 01JLi7mxf+k5tzFBn6ZV+2mZDlIqMGPNVnZMUS9k1nmt7mO7kYO6V0u2B8a9PiG7 byMN+yWlG9NRY+Rw/hdgagk2XJxqZYRQ6u2Iu6QID3nCJw+8V5curX9T8EIVADTi NqB0X6yAWUpvOegiiHyAOWNzESwZtFitS3/yeWRbyTUu2lq47vI8d1mUYlovOLC5 BzsF/BVnDQ61uWPMWgzrgsW4u5NhGR01EeZ/2cVsSKU6lcGNVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOj8O8evIEXWUxeCzlJGmIDlWIArMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdkZjA1NGI3LTBkYmQtNDEwYS04 YTZhLTEwYWY1NzI4ZTg0YS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcy OGU4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/XgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARz45zWEd9wcUblSrtTKm WM/s/bqCuww5jXVrfgj56nmz7KeXrWfK/b7hB1ZTHBFeaeEUwSVb6QZwIspGNKI0 4xL4cjRVWRET+NmZO+UHxcmZsG8k+Rl6ZiNhdPdqzkgVrqhwqsPG7ivbQj6mIWGV dunoVapa9H65dxgBhdYzlvolYuAjOGZL3WS9vtI2eWct5Rb/deJ9lHQMl9UHVx6J cgImr0amTQtMy10UzJJDMDcc+RN8MYEc/YgzeJUt0663DfAYtrzGptdbgRsbdylg U1kmJcePVkHFoQw8ZzAtcRD6YmWIlvKjijOj8N3tsO7zvKyxF9tLrippVZ2fhsSD 2g== -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:20 2025 by rpki-client