$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer File: 8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer (raw, json) Hash identifier: cqhkneGKKaPcrRkw/samCpSdd/ZnNf/WRj4/WfXMPLo= Subject key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A20EDB95C0D8A2C4455CCAA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Jun 2025 00:45:37 +0000 Certificate not after: Sun 12 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 198.99.189.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:ed:b9:5c:0d:8a:2c:44:55:cc:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 9 00:45:37 2025 GMT Not After : Sep 12 00:45:37 2027 GMT Subject: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:58:1a:c1:67:8d:4a:26:2a:19:99:2b:6c:e2: b8:fa:14:69:b4:00:25:98:a3:fb:3e:1b:73:85:87: 88:b0:3c:1b:79:90:33:87:34:32:39:8f:dc:21:44: e0:1d:5e:28:3f:dd:07:fc:94:07:25:36:6a:9d:cc: c4:e2:33:3b:85:5e:e0:b4:54:3b:91:de:80:27:26: a8:67:48:bb:c0:ef:39:4b:0d:a9:27:5f:3e:fb:0d: a4:1c:d9:e5:36:c4:5c:4d:62:f0:32:00:a0:fb:6c: a9:b8:8f:92:53:f5:31:0e:d1:7a:c7:1e:7e:3e:d4: b5:b7:21:1a:fc:04:ca:f1:a3:84:4d:8a:6d:1e:de: 8d:0f:9b:a3:7c:8c:69:58:07:92:64:e8:c4:13:bb: ee:97:23:6a:7b:8e:90:86:6e:ba:9d:77:34:1e:12: ae:b3:38:8e:a0:bf:8a:68:46:c3:14:b3:77:f7:cd: 4e:06:1e:31:0a:6e:47:23:41:2c:27:b2:9b:80:b6: 5d:bb:48:0e:bf:18:39:ca:05:38:64:dd:6b:a0:97: eb:d9:c8:85:00:71:e1:6a:bf:db:da:0c:e2:70:0d: 72:35:b3:7c:9d:ee:3f:86:54:28:89:20:6c:bc:dd: 5b:8d:f8:43:a7:5b:24:bf:f8:af:fa:95:19:b9:e1: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:64:de:ea:e0:32:22:4b:de:4e:0c:22:69:48:f9:e9:53:c5: ba:38:08:f4:e7:37:65:cc:f1:71:10:89:d8:9c:62:b5:a6:cd: 4e:3d:fe:d3:5d:7b:26:60:8a:95:80:26:e2:25:92:31:81:06: fd:c3:69:69:25:ff:d0:e9:2f:e9:00:ca:c5:05:c5:3f:b9:4e: 17:2a:d7:aa:7a:6e:94:65:19:d0:50:b3:e9:32:df:f9:3c:4b: f3:83:ba:1a:b9:b3:18:75:38:ba:c8:c2:4e:57:28:d5:e2:28: 45:5e:11:4c:f8:21:69:ff:ee:37:4f:8b:97:5a:56:5c:17:b4: 17:0c:5e:1b:39:81:ad:97:cb:c9:5a:ac:d3:e4:0a:ee:1f:38: 05:3a:ae:d9:6e:69:01:b5:12:81:6f:a0:a0:01:97:eb:1e:80: 91:2a:25:2a:93:03:22:78:bc:79:87:5e:a9:d1:92:01:27:44: 40:ee:f1:40:df:e8:29:44:33:13:7d:10:b6:a1:4c:ca:68:aa: 30:19:f3:f8:06:22:6f:c8:ea:69:ef:a5:e6:03:9b:bf:88:c4: 35:8b:40:db:05:78:af:63:03:f5:d0:88:a9:0d:d5:3c:6a:1a: bd:ff:25:f4:5d:d8:ad:3a:c8:9a:85:ae:78:a0:98:3c:2b:ad: cf:ed:13:ab -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEog7blcDYosRFXMqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYwOTAwNDUzN1oXDTI3MDkxMjAwNDUzN1owLzEtMCsGA1UEAxMk OGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlhMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklgawWeNSiYqGZkrbOK4+hRptAAlmKP7Phtz hYeIsDwbeZAzhzQyOY/cIUTgHV4oP90H/JQHJTZqnczE4jM7hV7gtFQ7kd6AJyao Z0i7wO85Sw2pJ18++w2kHNnlNsRcTWLwMgCg+2ypuI+SU/UxDtF6xx5+PtS1tyEa /ATK8aOETYptHt6ND5ujfIxpWAeSZOjEE7vulyNqe46Qhm66nXc0HhKusziOoL+K aEbDFLN3981OBh4xCm5HI0EsJ7KbgLZdu0gOvxg5ygU4ZN1roJfr2ciFAHHhar/b 2gzicA1yNbN8ne4/hlQoiSBsvN1bjfhDp1skv/iv+pUZueHn1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPh+Gaz5DRJI/7PIV2JUehKsG9MZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhhMmFkOTIzLTdkYmMtNGVkNC1i MzUxLWUyZmQyMzU5YTIxNi84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1 OWEyMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGY70wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkWTe6uAyIkveTgwiaUj5 6VPFujgI9Oc3ZczxcRCJ2JxitabNTj3+0117JmCKlYAm4iWSMYEG/cNpaSX/0Okv 6QDKxQXFP7lOFyrXqnpulGUZ0FCz6TLf+TxL84O6GrmzGHU4usjCTlco1eIoRV4R TPghaf/uN0+Ll1pWXBe0FwxeGzmBrZfLyVqs0+QK7h84BTqu2W5pAbUSgW+goAGX 6x6AkSolKpMDIni8eYdeqdGSASdEQO7xQN/oKUQzE30QtqFMymiqMBnz+AYib8jq ae+l5gObv4jENYtA2wV4r2MD9dCIqQ3VPGoavf8l9F3YrTrImoWueKCYPCutz+0T qw== -----END CERTIFICATE-----Generated at Sat Jun 14 20:19:54 2025 by rpki-client