$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593.cer File: 018c659d-c0a8-48c7-93fe-29a288a55593.cer (raw, json) Hash identifier: P2Yu4qykEiGuj5NCQydiPW01nfIAIHoQJaBYPXxRTfM= Subject key identifier: 33:2F:12:1C:E9:7D:05:BD:0B:A0:1C:1A:84:7A:05:16:F1:1D:8C:96 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B84E890327E993EE5126ED40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/018c659d-c0a8-48c7-93fe-29a288a55593.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 13:20:48 +0000 Certificate not after: Thu 05 Aug 2027 13:20:48 +0000 Subordinate resources: IP: 192.197.190.0/24 IP: 199.84.62.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:4e:89:03:27:e9:93:ee:51:26:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 2 13:20:48 2025 GMT Not After : Aug 5 13:20:48 2027 GMT Subject: CN=018c659d-c0a8-48c7-93fe-29a288a55593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:66:ed:32:f6:2a:cd:4a:25:92:f0:35:e4: d5:d7:06:53:4f:51:2b:53:d5:2d:ff:7e:0d:a1:18: cd:fb:af:6a:71:6f:a3:55:46:a8:7a:15:50:9d:72: 89:15:f6:df:bd:7e:5c:3f:6f:be:c6:08:7f:2a:b6: 37:1c:00:39:0a:8a:55:6c:78:23:ab:84:83:c3:44: 27:46:2e:bb:a3:2a:50:ae:9f:73:b7:a0:43:42:79: 7a:ec:6f:53:76:9c:33:09:a5:bd:3a:64:18:d7:8d: 23:1c:8f:ba:63:c8:6d:5b:f8:44:96:93:3f:bd:6c: 92:c1:49:c2:0b:59:c6:f8:bd:1a:26:e9:a4:54:7c: f0:b4:a7:67:14:76:a9:40:f8:47:f8:cd:0f:c1:91: ba:cd:a4:3c:14:81:f2:ee:98:13:b9:53:e3:ef:38: 8e:0a:33:e7:a5:9a:58:07:2d:05:db:f1:d7:45:89: 6d:56:09:43:dd:7b:4b:71:e3:94:3f:ce:1e:ac:50: 4d:3b:68:fa:eb:1e:71:16:8a:62:52:df:50:d6:0a: fa:ce:97:50:72:2b:f8:8b:48:0f:5a:c0:2e:2d:bf: 26:4c:62:4b:30:26:b3:81:83:6c:77:ed:f6:f4:62: 6b:1e:86:5d:c0:f1:49:e4:42:1c:b9:38:e1:92:4f: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:12:1C:E9:7D:05:BD:0B:A0:1C:1A:84:7A:05:16:F1:1D:8C:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/018c659d-c0a8-48c7-93fe-29a288a55593.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.197.190.0/24 199.84.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:02:8d:63:f8:d4:17:20:e6:92:e4:2e:50:db:b3:4a:02: df:20:75:18:e7:47:62:51:69:a9:0a:09:bf:7c:d9:2e:5e:b0: 81:26:6f:0b:60:18:98:a1:46:0c:2d:35:16:74:2e:b0:1e:9d: 5b:ae:dd:fe:72:0c:61:b8:ad:68:ad:8b:1e:17:40:05:91:a6: 92:6f:6a:53:fa:23:d9:6f:2a:e5:27:82:01:f9:21:56:0f:e4: 43:37:d5:b9:e7:a1:03:b3:51:c8:24:c1:e3:b2:2f:d8:e0:4b: cc:63:af:f7:db:66:6c:36:ec:e9:11:c7:e9:8f:78:50:80:ad: f6:83:4b:0b:8f:e1:b3:d3:b7:ab:2d:ab:71:03:2e:90:25:16: 52:51:f8:fb:68:fc:f7:b3:45:c8:17:dc:e8:6a:72:0c:cd:4f: 04:2c:c6:21:4a:0a:6c:a2:ac:5d:5c:0f:4b:48:8b:40:d6:5b: 44:03:62:83:1d:59:29:9f:05:6f:a7:5f:8f:d5:c6:5f:91:a2: e3:98:dd:7e:c3:29:40:c1:96:8b:54:26:34:cd:61:82:cc:42: 8b:e8:46:d5:43:e4:fa:63:14:f1:68:2c:ca:20:77:55:74:ae: b2:51:83:88:95:dd:4d:ce:8d:07:7b:8d:ae:bb:c8:36:f2:ec: 87:f1:23:5b -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEm4TokDJ+mT7lEm7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwMjEzMjA0OFoXDTI3MDgwNTEzMjA0OFowLzEtMCsGA1UEAxMk MDE4YzY1OWQtYzBhOC00OGM3LTkzZmUtMjlhMjg4YTU1NTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBm7TL2Ks1KJZLwNeTV1wZTT1ErU9Ut/34N oRjN+69qcW+jVUaoehVQnXKJFfbfvX5cP2++xgh/KrY3HAA5CopVbHgjq4SDw0Qn Ri67oypQrp9zt6BDQnl67G9TdpwzCaW9OmQY140jHI+6Y8htW/hElpM/vWySwUnC C1nG+L0aJumkVHzwtKdnFHapQPhH+M0PwZG6zaQ8FIHy7pgTuVPj7ziOCjPnpZpY By0F2/HXRYltVglD3XtLceOUP84erFBNO2j66x5xFopiUt9Q1gr6zpdQciv4i0gP WsAuLb8mTGJLMCazgYNsd+329GJrHoZdwPFJ5EIcuTjhkk8f7QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFDMvEhzpfQW9C6AcGoR6BRbxHYyWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w MThjNjU5ZC1jMGE4LTQ4YzctOTNmZS0yOWEyODhhNTU1OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzAxOGM2NTlkLWMwYTgtNDhjNy05 M2ZlLTI5YTI4OGE1NTU5My8wMThjNjU5ZC1jMGE4LTQ4YzctOTNmZS0yOWEyODhh NTU1OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAxb4DBAHHVD4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADhcCjWP41Bcg 5pLkLlDbs0oC3yB1GOdHYlFpqQoJv3zZLl6wgSZvC2AYmKFGDC01FnQusB6dW67d /nIMYbitaK2LHhdABZGmkm9qU/oj2W8q5SeCAfkhVg/kQzfVueehA7NRyCTB47Iv 2OBLzGOv99tmbDbs6RHH6Y94UICt9oNLC4/hs9O3qy2rcQMukCUWUlH4+2j897NF yBfc6GpyDM1PBCzGIUoKbKKsXVwPS0iLQNZbRANigx1ZKZ8Fb6dfj9XGX5Gi45jd fsMpQMGWi1QmNM1hgsxCi+hG1UPk+mMU8WgsyiB3VXSuslGDiJXdTc6NB3uNrrvI NvLsh/EjWw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:11 2025 by rpki-client