$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer File: d416e28d-79e4-4432-b727-97e9702afe09.cer (raw, json) Hash identifier: xuRvTzW220PKa7tXsE++n8qe8eh5mXvz5dbTrZkvu2I= Subject key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A6F18E14EF8A60BC66566334E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 00:45:37 +0000 Certificate not after: Sun 10 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 208.73.212.0/22 IP: 2602:fb92::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:18:e1:4e:f8:a6:0b:c6:65:66:33:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 7 00:45:37 2025 GMT Not After : Oct 10 00:45:37 2027 GMT Subject: CN=d416e28d-79e4-4432-b727-97e9702afe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:c9:cf:6e:4d:23:01:1c:92:e9:12:df:af: 80:0c:71:21:e3:e0:90:5a:d3:3f:95:57:8f:56:f2: de:09:0d:7a:af:39:c3:6a:71:de:31:ff:8c:4d:0d: 89:d5:74:79:36:5b:da:50:83:e2:df:b9:a7:66:a2: 33:fb:b8:30:33:7e:39:22:bb:d8:fe:e8:4c:53:50: 8b:11:1d:62:0e:ab:3c:57:cf:d5:a1:d1:cc:6e:97: 40:96:ee:60:73:36:1a:bd:0a:89:c6:2b:c8:bb:ec: ca:56:52:44:62:5f:48:bd:8b:5d:b9:c7:b2:b2:d4: f3:1f:be:23:90:1e:b6:0f:b5:2e:cc:fd:d6:f3:24: 27:fc:f3:26:3f:49:2a:5a:48:a5:3b:36:a0:35:a0: c7:d8:df:91:9d:7c:e4:15:3a:67:e3:48:0c:f6:f9: d3:83:e3:60:78:c4:c9:eb:38:18:67:aa:ff:78:cf: 14:64:33:0e:53:e2:2c:07:d9:40:4b:af:3c:6e:63: 83:53:e6:16:27:bc:41:c4:a7:97:37:57:c4:24:a5: 21:82:5e:7e:42:2d:2e:ca:cc:5f:dd:50:87:60:9f: d1:9e:5a:e8:a9:39:19:24:9e:a6:6d:99:ce:14:47: 58:38:13:f7:4e:65:ac:a7:92:0d:e2:c5:3e:40:b7: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 208.73.212.0/22 IPv6: 2602:fb92::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6b:bc:28:17:f6:64:cb:1f:03:db:88:3a:79:94:89:84:45: 12:6c:c6:1b:7b:3a:8c:66:5b:a0:60:c7:35:69:0d:21:1a:aa: a4:a6:a5:ab:72:55:ea:84:77:30:d6:b0:35:6d:90:3b:6c:60: 3c:38:5d:2d:48:26:9f:4c:f0:73:fa:91:54:5f:67:ad:ce:ab: cd:13:c8:84:cb:80:79:d0:48:1f:c4:45:db:26:6f:72:37:a2: 79:87:75:20:aa:16:bf:73:0d:f9:08:e9:24:0f:56:ec:df:da: 46:c6:38:ba:de:a2:47:0a:f7:4c:92:a3:00:05:50:d7:4a:b8: 46:c8:51:0c:7d:be:d0:be:6b:8a:16:e2:63:52:88:0a:ab:e5: 92:59:bf:df:94:3e:5d:e4:61:54:4b:83:4e:8a:14:4e:ef:82: 49:fa:17:d2:2c:b5:e2:8a:e4:e7:f0:ac:ff:86:74:3e:3a:ae: a6:6e:ed:f4:94:0c:9e:5e:72:e4:4a:6c:c3:04:e4:76:a3:23: 53:1b:11:be:92:5a:74:1b:1a:5a:fb:02:b9:1a:25:fe:58:d5: da:80:98:e7:5d:b6:16:3a:e2:8a:8c:d2:ba:e3:92:86:f5:a6: 8a:52:75:00:3e:d9:b3:6b:7d:5f:d6:b6:da:14:38:c1:6c:49: ad:81:b8:c9 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEpvGOFO+KYLxmVmM04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcwNzAwNDUzN1oXDTI3MTAxMDAwNDUzN1owLzEtMCsGA1UEAxMk ZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj63Jz25NIwEckukS36+ADHEh4+CQWtM/lVeP VvLeCQ16rznDanHeMf+MTQ2J1XR5NlvaUIPi37mnZqIz+7gwM345IrvY/uhMU1CL ER1iDqs8V8/VodHMbpdAlu5gczYavQqJxivIu+zKVlJEYl9IvYtduceystTzH74j kB62D7UuzP3W8yQn/PMmP0kqWkilOzagNaDH2N+RnXzkFTpn40gM9vnTg+NgeMTJ 6zgYZ6r/eM8UZDMOU+IsB9lAS688bmODU+YWJ7xBxKeXN1fEJKUhgl5+Qi0uysxf 3VCHYJ/RnlroqTkZJJ6mbZnOFEdYOBP3TmWsp5IN4sU+QLf74wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKzAJjIEU5LeYrvYp2zSdtsFUjq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MTZlMjhkLTc5ZTQtNDQzMi1i NzI3LTk3ZTk3MDJhZmUwOS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAy YWZlMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALQSdQwDgQCAAIwCAMGBCYC+5IAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADVrvCgX9mTLHwPbiDp5lImERRJsxht7OoxmW6BgxzVpDSEaqqSmpatyVeqEdzDW sDVtkDtsYDw4XS1IJp9M8HP6kVRfZ63Oq80TyITLgHnQSB/ERdsmb3I3onmHdSCq Fr9zDfkI6SQPVuzf2kbGOLreokcK90ySowAFUNdKuEbIUQx9vtC+a4oW4mNSiAqr 5ZJZv9+UPl3kYVRLg06KFE7vgkn6F9IsteKK5OfwrP+GdD46rqZu7fSUDJ5ecuRK bMME5HajI1MbEb6SWnQbGlr7ArkaJf5Y1dqAmOddthY64oqM0rrjkob1popSdQA+ 2bNrfV/WttoUOMFsSa2BuMk= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:28 2025 by rpki-client