$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer File: e49f1cd9-302a-4377-9a40-b12c78b69f87.cer (raw, json) Hash identifier: p4Mcqpt7Qhf6WwAkB0rJn4RvYuD97736NoP6Xd8YGnA= Subject key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849F17814AB607ECEF801448880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 May 2025 00:45:35 +0000 Certificate not after: Thu 26 Aug 2027 00:45:35 +0000 Subordinate resources: IP: 192.195.107.0/24 IP: 205.134.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:78:14:ab:60:7e:ce:f8:01:44:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 23 00:45:35 2025 GMT Not After : Aug 26 00:45:35 2027 GMT Subject: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:b2:16:7b:ec:af:24:26:ec:08:8d:99:09: 90:04:d2:c5:0c:6e:42:d1:39:7b:5d:62:6c:2e:f8: 40:cd:50:87:8e:88:a9:d1:c7:30:30:22:b6:5d:a9: 03:ea:20:a7:8c:04:1d:fe:8f:b3:81:38:32:13:cc: fa:48:82:43:e9:77:be:53:67:b2:e1:88:92:bd:60: 07:3a:4b:c7:fd:92:1c:4b:e5:fd:e0:82:d7:35:b3: 52:92:f1:f0:fe:2a:f4:0c:c5:6d:2a:22:3a:47:a9: f0:30:ff:47:e8:7d:91:80:26:19:ca:51:f7:14:f2: bc:69:9c:9d:48:85:ef:b7:a0:e4:e0:ee:da:73:5f: 90:65:69:e9:00:29:30:bf:24:9b:d2:58:7c:5c:05: bf:60:a2:06:05:bd:e7:b3:5e:19:64:36:d1:2b:69: 17:46:5d:6d:d0:1f:3e:0a:77:d6:67:ba:d5:38:0f: 51:93:1a:fd:71:2e:99:57:81:63:1c:61:73:a2:02: 0e:8f:77:73:21:e7:3f:11:f0:75:4d:5f:7c:57:c0: 28:1d:00:f4:51:54:ad:a2:0c:55:14:09:e7:b8:ac: da:bb:15:54:3d:d5:e7:50:fc:58:66:ec:79:ec:e5: 6a:9c:51:5b:16:29:13:44:4f:3d:c1:32:f1:3a:7e: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.195.107.0/24 205.134.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0e:6b:72:e3:dd:30:b9:1b:75:08:7a:20:eb:77:18:c0:61: bb:de:0d:c2:5f:e3:b9:63:c5:a0:53:1d:27:72:72:d4:b6:48: bf:17:f6:dd:49:2a:ed:8a:1c:12:cf:78:ce:64:a5:80:b7:6a: cf:35:03:a2:b9:23:62:79:50:4c:73:56:58:3e:08:4d:c4:df: 23:60:4f:73:47:06:0a:34:17:e3:f0:1b:e3:4e:0f:f2:34:b4: 63:d7:19:0e:dc:62:e5:45:4c:a4:04:b2:5f:2b:8d:3d:84:61: 18:a8:15:27:ae:e7:50:da:fc:00:a1:aa:ad:b3:9f:07:1f:05: de:24:87:a0:5c:34:3d:08:f1:99:35:6c:47:59:8a:e3:6a:1a: bb:c9:88:16:c2:c6:96:53:6f:86:71:81:e2:57:14:65:d3:f8: f7:aa:04:91:64:78:b7:47:b7:f7:8c:f9:a0:14:52:03:e8:4a: 4c:0a:5d:08:4c:4b:15:e8:0a:40:13:36:79:6e:4c:9c:15:47: 55:b3:bb:e4:23:97:ad:ad:f6:05:6a:48:17:e4:ac:01:c6:6a: c8:90:46:7b:1b:10:74:8b:bd:4b:75:c2:45:35:b8:65:d1:68: 63:9a:8c:62:c5:4a:43:c2:58:46:84:dd:cb:44:c4:b7:8a:d2: e6:54:a0:c3 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEnxeBSrYH7O+AFEiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUyMzAwNDUzNVoXDTI3MDgyNjAwNDUzNVowLzEtMCsGA1UEAxMk ZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbayFnvsryQm7AiNmQmQBNLFDG5C0Tl7XWJs LvhAzVCHjoip0ccwMCK2XakD6iCnjAQd/o+zgTgyE8z6SIJD6Xe+U2ey4YiSvWAH OkvH/ZIcS+X94ILXNbNSkvHw/ir0DMVtKiI6R6nwMP9H6H2RgCYZylH3FPK8aZyd SIXvt6Dk4O7ac1+QZWnpACkwvySb0lh8XAW/YKIGBb3ns14ZZDbRK2kXRl1t0B8+ CnfWZ7rVOA9Rkxr9cS6ZV4FjHGFzogIOj3dzIec/EfB1TV98V8AoHQD0UVStogxV FAnnuKzauxVUPdXnUPxYZux57OVqnFFbFikTRE89wTLxOn4hQwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOdgDxLBAryXN6PzadKnPETlTrzfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U0OWYxY2Q5LTMwMmEtNDM3Ny05 YTQwLWIxMmM3OGI2OWY4Ny9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhi NjlmODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAw2sDBAXNhmAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASg5rcuPdMLkb dQh6IOt3GMBhu94Nwl/juWPFoFMdJ3Jy1LZIvxf23Ukq7YocEs94zmSlgLdqzzUD orkjYnlQTHNWWD4ITcTfI2BPc0cGCjQX4/Ab404P8jS0Y9cZDtxi5UVMpASyXyuN PYRhGKgVJ67nUNr8AKGqrbOfBx8F3iSHoFw0PQjxmTVsR1mK42oau8mIFsLGllNv hnGB4lcUZdP496oEkWR4t0e394z5oBRSA+hKTApdCExLFegKQBM2eW5MnBVHVbO7 5COXra32BWpIF+SsAcZqyJBGexsQdIu9S3XCRTW4ZdFoY5qMYsVKQ8JYRoTdy0TE t4rS5lSgww== -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:46 2025 by rpki-client