$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164.cer File: c11316e8-f762-407f-83bf-824a49a98164.cer (raw, json) Hash identifier: pkN2C0tGqvhk5T1ml7xgI0LbJ+uPwwQYXwYrt0JMOFw= Subject key identifier: C6:EB:08:18:57:D9:15:3E:5C:01:F9:B9:06:63:8F:B5:CC:26:F4:29 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A7FD8FAB5CE46F7E13EC6AB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/c11316e8-f762-407f-83bf-824a49a98164.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Jul 2025 00:45:36 +0000 Certificate not after: Sat 16 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 198.1.16.0 -- 198.1.25.255 IP: 206.208.64.0/21 IP: 207.183.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:d8:fa:b5:ce:46:f7:e1:3e:c6:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 13 00:45:36 2025 GMT Not After : Oct 16 00:45:36 2027 GMT Subject: CN=c11316e8-f762-407f-83bf-824a49a98164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:cf:60:1e:f6:01:ed:d1:3e:08:b5:e6:5d: fb:39:83:7f:5a:0d:76:70:b5:71:96:e0:ce:5d:8d: dd:be:9c:49:e2:b7:5c:86:92:15:f2:e0:1c:a8:96: ef:b5:a2:05:2d:c7:a2:74:0e:34:29:9a:64:df:a3: 0c:b0:6a:ed:3f:08:78:00:13:c0:25:e3:0d:8b:3a: a7:cf:0a:bc:32:14:c3:11:79:71:10:6e:4e:5e:38: 33:80:26:74:21:0d:d3:35:ab:4e:55:25:8a:3a:77: 01:9d:91:ef:5e:74:06:0c:b8:dc:b7:59:a7:58:23: ba:99:95:83:86:49:1e:f4:b6:05:2c:45:20:94:5f: 77:a2:8d:91:25:aa:38:61:81:94:11:b1:98:c2:92: 90:a2:30:70:cc:4e:cd:26:0b:8e:30:66:8e:34:66: c6:32:7a:dd:e7:af:4e:25:5f:f3:f8:9b:3b:3f:12: 06:03:cc:db:bc:18:9f:25:69:4a:94:46:99:aa:2d: d4:04:ba:c4:2e:c0:0a:1f:d7:d1:e8:3e:ef:64:52: 98:c9:e2:5d:39:97:4c:a5:7a:1a:e1:8b:64:2c:21: be:b9:61:21:94:09:4a:76:a6:3e:c9:c3:30:d5:a9: d3:e7:0e:d8:96:32:e5:ba:da:fd:f4:1f:8e:e5:04: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:08:18:57:D9:15:3E:5C:01:F9:B9:06:63:8F:B5:CC:26:F4:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/c11316e8-f762-407f-83bf-824a49a98164.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 198.1.16.0-198.1.25.255 206.208.64.0/21 207.183.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fd:eb:89:09:19:12:30:98:7d:6e:8d:d7:7d:c7:ec:f6:00: 6c:9f:3b:38:f7:3d:90:ae:a9:51:80:01:b4:b1:78:3a:84:eb: fa:87:7d:3b:14:f7:ae:55:26:23:3d:6d:5d:46:be:8d:fb:ea: d2:4f:ad:0c:6f:92:4b:e4:39:8f:66:98:9e:8b:a9:b6:3a:0b: c5:44:71:c4:9c:41:32:da:2e:4a:23:c5:86:b9:63:22:b1:bf: b0:2c:54:8e:04:0c:02:64:3b:d3:d8:8c:8e:00:86:3e:36:c1: d6:77:61:a2:94:85:4d:d1:c4:b2:48:43:01:af:ea:2c:95:19: 5e:57:0a:de:34:f6:f9:2a:3b:ae:22:c6:24:44:0d:5a:12:f2: 43:49:f1:3e:82:f3:85:fd:02:8c:47:62:37:19:66:58:fc:c1: 0e:c7:11:6f:b2:ad:aa:69:e1:de:e9:ef:7d:b4:5e:a7:ee:5c: 18:97:a1:57:8c:44:e1:eb:87:78:03:cf:3c:b1:05:ed:1d:4f: d4:ec:23:f1:cc:a8:ac:69:44:49:9a:24:5b:de:c8:dc:59:ba: 6f:8b:89:70:e6:27:92:f7:24:e2:1d:78:c4:be:32:0f:a4:fe: eb:e1:01:05:e6:41:71:4d:11:c8:f6:3e:1f:b0:64:f7:fb:5c: f7:63:10:fc -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEp/2Pq1zkb34T7GqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxMzAwNDUzNloXDTI3MTAxNjAwNDUzNlowLzEtMCsGA1UEAxMk YzExMzE2ZTgtZjc2Mi00MDdmLTgzYmYtODI0YTQ5YTk4MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HLPYB72Ae3RPgi15l37OYN/Wg12cLVxluDO XY3dvpxJ4rdchpIV8uAcqJbvtaIFLceidA40KZpk36MMsGrtPwh4ABPAJeMNizqn zwq8MhTDEXlxEG5OXjgzgCZ0IQ3TNatOVSWKOncBnZHvXnQGDLjct1mnWCO6mZWD hkke9LYFLEUglF93oo2RJao4YYGUEbGYwpKQojBwzE7NJguOMGaONGbGMnrd569O JV/z+Js7PxIGA8zbvBifJWlKlEaZqi3UBLrELsAKH9fR6D7vZFKYyeJdOZdMpXoa 4YtkLCG+uWEhlAlKdqY+ycMw1anT5w7YljLlutr99B+O5QRW0QIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFMbrCBhX2RU+XAH5uQZjj7XMJvQpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MTEzMTZlOC1mNzYyLTQwN2YtODNiZi04MjRhNDlhOTgxNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MxMTMxNmU4LWY3NjItNDA3Zi04 M2JmLTgyNGE0OWE5ODE2NC9jMTEzMTZlOC1mNzYyLTQwN2YtODNiZi04MjRhNDlh OTgxNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBowDAMEBMYBEAMEAcYBGAMEA87QQAMEBc+3ADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBT/euJCRkSMJh9bo3Xfcfs9gBsnzs49z2QrqlRgAG0sXg6hOv6h307FPeu VSYjPW1dRr6N++rST60Mb5JL5DmPZpiei6m2OgvFRHHEnEEy2i5KI8WGuWMisb+w LFSOBAwCZDvT2IyOAIY+NsHWd2GilIVN0cSySEMBr+oslRleVwreNPb5KjuuIsYk RA1aEvJDSfE+gvOF/QKMR2I3GWZY/MEOxxFvsq2qaeHe6e99tF6n7lwYl6FXjETh 64d4A888sQXtHU/U7CPxzKisaURJmiRb3sjcWbpvi4lw5ieS9yTiHXjEvjIPpP7r 4QEF5kFxTRHI9j4fsGT3+1z3YxD8 -----END CERTIFICATE-----Generated at Mon Aug 4 08:22:45 2025 by rpki-client