$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer File: a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer (raw, json) Hash identifier: TbFFgSpwUw0uoIqb5b/JuMCnffk0UZzE/g4/Xw3ptbM= Subject key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858499C0F246B4A34B4D57F2ABF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 10:30:26 +0000 Certificate not after: Thu 25 Jun 2026 00:45:21 +0000 Subordinate resources: IP: 138.129.16.0 -- 138.129.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:0f:24:6b:4a:34:b4:d5:7f:2a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 22 10:30:26 2025 GMT Not After : Jun 25 00:45:21 2026 GMT Subject: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:62:80:a1:c5:97:d5:81:6a:24:f2:6d:8e: 52:af:90:23:b6:74:35:6e:fb:4e:4c:23:74:82:6d: eb:23:d3:e1:58:af:96:b4:c5:fe:61:ff:ca:bd:6c: d9:a6:c7:43:ce:72:12:a7:85:8d:3f:f2:2f:38:c3: 88:10:ca:c5:9c:fc:8c:68:bc:35:ec:fe:3a:af:9e: 6e:b2:38:30:c0:59:37:ef:2b:8f:e7:c5:63:0f:41: 98:4b:56:62:33:ec:93:ef:e3:bd:f7:9f:91:09:87: 04:62:24:39:80:a1:c5:10:b1:a4:7c:46:ce:0c:3e: d7:ef:24:98:99:9d:da:c8:c2:8e:49:cb:15:cf:7f: 29:53:4e:ad:62:39:2f:13:ef:4d:c9:5e:6a:5a:d9: 8c:68:f0:44:4b:15:ef:7c:86:54:36:95:5b:5e:9d: 3e:f4:27:ce:0e:76:41:13:55:9f:08:c0:6a:15:b5: 3e:24:7f:90:6c:97:44:9a:17:9f:f7:28:43:cd:7e: f3:e2:5c:0c:c5:d4:c1:85:e5:c7:e3:70:29:53:c7: 40:9f:3e:99:29:e3:a8:d3:2c:ad:17:22:cf:6a:09: ef:25:30:7e:a0:1b:db:1f:d0:02:d1:37:27:c4:ee: 1a:67:99:24:05:b5:e1:32:51:12:75:91:d3:26:dc: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 138.129.16.0-138.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bd:6d:f4:d5:44:c3:93:1b:4e:0d:f3:ea:be:7f:3c:8b:ed: ac:5c:47:77:27:40:bc:52:34:d1:01:ea:f0:79:0e:4a:b3:f2: 39:35:d4:fb:75:50:c5:cf:47:ba:a6:48:0c:db:76:c0:39:0f: e3:7f:36:33:a9:24:a4:1d:39:01:af:76:cf:62:4b:ef:60:2d: 97:f6:ed:12:81:19:64:9d:9b:75:27:56:3d:d0:f0:09:1d:bf: da:d7:80:3c:e5:f8:33:bc:99:47:91:72:f2:9b:22:9e:c0:10: 9a:ee:72:3e:c9:52:70:d2:82:2e:9c:a8:c7:0a:55:9a:36:8b: 44:0a:92:72:b2:48:f1:ec:2e:78:25:34:22:9d:69:22:c0:c7: 24:eb:0a:8a:1a:34:78:ec:16:25:c7:d2:89:55:99:62:5e:4f: e8:18:cc:27:1c:6d:c9:48:8c:07:98:0a:5e:66:3f:e5:92:35: 39:c6:2c:5e:4d:3e:67:44:84:c8:b1:18:5d:e4:0e:f9:22:3d: 1d:19:64:fd:45:ab:41:c2:d4:d8:91:79:c2:ff:c2:1d:4f:d2: 9c:d1:82:b5:e1:61:01:66:59:f3:d9:e7:b9:ab:c5:77:39:17: 9b:bf:ba:a9:13:b5:c9:cb:e2:16:98:fd:f2:1f:6b:41:0c:23: 44:3e:a4:4e -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWEmcDyRrSjS01X8qv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQyMjEwMzAyNloXDTI2MDYyNTAwNDUyMVowLzEtMCsGA1UEAxMk YTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgxMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+BigKHFl9WBaiTybY5Sr5AjtnQ1bvtOTCN0 gm3rI9PhWK+WtMX+Yf/KvWzZpsdDznISp4WNP/IvOMOIEMrFnPyMaLw17P46r55u sjgwwFk37yuP58VjD0GYS1ZiM+yT7+O995+RCYcEYiQ5gKHFELGkfEbODD7X7ySY mZ3ayMKOScsVz38pU06tYjkvE+9NyV5qWtmMaPBESxXvfIZUNpVbXp0+9CfODnZB E1WfCMBqFbU+JH+QbJdEmhef9yhDzX7z4lwMxdTBheXH43ApU8dAnz6ZKeOo0yyt FyLPagnvJTB+oBvbH9AC0TcnxO4aZ5kkBbXhMlESdZHTJtw5NQIDAQABo4IEBjCC BAIwHQYDVR0OBBYEFCXOW9bSKmxT+Zcl9pdh1vnGsuiHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h NjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E2MmFlZWY4LWIzNWItNGNhNi1i N2EzLTkzYmUxYTE4MTMzOC9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWEx ODEzMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJgYIKwYBBQUH AQcBAf8EFzAVMBMEAgABMA0wCwMEBIqBEAMDAYqAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACG9bfTVRMOT G04N8+q+fzyL7axcR3cnQLxSNNEB6vB5Dkqz8jk11Pt1UMXPR7qmSAzbdsA5D+N/ NjOpJKQdOQGvds9iS+9gLZf27RKBGWSdm3UnVj3Q8Akdv9rXgDzl+DO8mUeRcvKb Ip7AEJrucj7JUnDSgi6cqMcKVZo2i0QKknKySPHsLnglNCKdaSLAxyTrCooaNHjs FiXH0olVmWJeT+gYzCccbclIjAeYCl5mP+WSNTnGLF5NPmdEhMixGF3kDvkiPR0Z ZP1Fq0HC1NiRecL/wh1P0pzRgrXhYQFmWfPZ57mrxXc5F5u/uqkTtcnL4haY/fIf a0EMI0Q+pE4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:55 2025 by rpki-client