$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer File: 1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer (raw, json) Hash identifier: HWdREY5AcVUL1zihtb8CtlJUAB77UDl5h+Pcl7SzIcY= Subject key identifier: 63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A11A498A913A5DA1D37F47900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 13:21:09 +0000 Certificate not after: Mon 06 Sep 2027 13:21:09 +0000 Subordinate resources: IP: 141.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:a4:98:a9:13:a5:da:1d:37:f4:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 3 13:21:09 2025 GMT Not After : Sep 6 13:21:09 2027 GMT Subject: CN=1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:a2:17:dd:6a:0b:ab:8b:8e:2e:4e:75:90: e1:28:53:47:61:1e:0d:67:c3:b5:c4:67:27:20:3d: 05:28:5f:88:ef:fa:2d:80:03:21:66:6d:3d:51:26: a4:6f:1e:94:1f:95:a0:18:64:f0:5b:68:aa:38:c4: c5:11:8a:0b:4e:60:93:c0:21:ae:fd:c0:e6:09:26: 30:49:e0:ae:3a:f6:77:c1:58:56:a9:08:4b:e6:c9: 66:5f:5d:de:82:a9:4b:ca:fc:b7:07:3f:ca:95:59: c2:8a:30:5b:2f:dd:89:a2:fd:c8:68:a9:f8:66:ec: 10:98:e7:95:9b:68:53:ac:45:83:9f:51:c7:cc:05: aa:8c:f1:18:02:b1:06:1b:d9:67:7f:95:12:38:51: 33:0d:a2:17:7e:31:cf:3c:9a:1f:d8:79:ca:6e:6b: 8b:61:6b:f5:44:75:67:a0:75:64:71:ef:80:97:68: 24:00:c8:06:b5:b5:9c:af:c6:69:90:5c:cd:f2:0b: 2a:b8:4b:79:18:f7:ad:4c:e2:5e:b2:bd:29:53:46: d4:e5:49:d8:e3:7a:ad:73:1a:16:c0:43:6a:e9:bb: dd:f7:f8:e4:fa:89:2e:1e:31:bc:9c:78:93:f8:9b: ef:2d:3e:9b:e0:17:71:23:1c:0b:47:73:aa:1f:04: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 141.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:94:df:ab:a2:d8:15:08:3c:74:91:25:fa:89:8d:d0:a0:de: 76:84:bf:a4:eb:a8:0a:3c:ee:32:dd:e6:0d:14:5f:99:dd:b2: 2d:11:b5:ab:e7:bb:ab:4f:b2:46:21:15:25:ac:95:4b:06:d2: 2a:b1:41:aa:e0:b2:62:24:c1:8f:34:3d:c3:d0:d5:b3:80:ef: 97:b1:24:9c:58:b4:ef:48:8e:3f:7f:77:3d:d6:90:38:38:09: 98:80:f3:f8:6b:83:a6:d2:a5:4b:ec:24:1a:04:67:fb:c4:b5: 08:bc:4d:e3:82:01:b7:8b:c0:56:a2:e3:a8:6d:3f:4b:95:de: 41:10:9e:61:7c:79:dd:91:10:d1:46:ec:64:bb:a0:83:cf:30: 9c:28:43:db:ff:00:9d:e5:d5:ce:91:76:a9:ad:4f:c0:6f:20: 8b:09:45:19:7a:76:00:c3:ca:4f:00:4a:c6:47:49:83:40:29: b9:b3:45:68:c5:33:00:7a:e8:3c:09:bc:39:60:33:83:69:26: 0b:9f:db:07:e0:6f:aa:39:ac:20:40:13:0f:be:62:21:fb:69: 6e:10:2b:de:29:f4:f8:ff:76:c9:71:78:12:f3:f2:c3:72:72: d8:6a:ce:89:0b:0e:d8:38:ce:f6:4f:b9:c6:dd:fc:b6:d4:35: 02:39:b1:8d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEoRpJipE6XaHTf0eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwMzEzMjEwOVoXDTI3MDkwNjEzMjEwOVowLzEtMCsGA1UEAxMk MWNmNzU2NGItYzZiYy00Yjc4LTljNTEtZTViNTJlYmQ4MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmiF91qC6uLji5OdZDhKFNHYR4NZ8O1xGcn ID0FKF+I7/otgAMhZm09USakbx6UH5WgGGTwW2iqOMTFEYoLTmCTwCGu/cDmCSYw SeCuOvZ3wVhWqQhL5slmX13egqlLyvy3Bz/KlVnCijBbL92Jov3IaKn4ZuwQmOeV m2hTrEWDn1HHzAWqjPEYArEGG9lnf5USOFEzDaIXfjHPPJof2HnKbmuLYWv1RHVn oHVkce+Al2gkAMgGtbWcr8ZpkFzN8gsquEt5GPetTOJesr0pU0bU5UnY43qtcxoW wENq6bvd9/jk+okuHjG8nHiT+JvvLT6b4BdxIxwLR3OqHwQJbQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFGPjUk8hDIM902NLqQewYaoPEZNhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x Y2Y3NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1MmViZDgyYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFjZjc1NjRiLWM2YmMtNGI3OC05 YzUxLWU1YjUyZWJkODJhYi8xY2Y3NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1MmVi ZDgyYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCNoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAklN+rotgVCDx0kSX6iY3Q oN52hL+k66gKPO4y3eYNFF+Z3bItEbWr57urT7JGIRUlrJVLBtIqsUGq4LJiJMGP ND3D0NWzgO+XsSScWLTvSI4/f3c91pA4OAmYgPP4a4Om0qVL7CQaBGf7xLUIvE3j ggG3i8BWouOobT9Lld5BEJ5hfHndkRDRRuxku6CDzzCcKEPb/wCd5dXOkXaprU/A byCLCUUZenYAw8pPAErGR0mDQCm5s0VoxTMAeug8Cbw5YDODaSYLn9sH4G+qOawg QBMPvmIh+2luECveKfT4/3bJcXgS8/LDcnLYas6JCw7YOM72T7nG3fy21DUCObGN -----END CERTIFICATE-----Generated at Wed Jun 18 12:45:31 2025 by rpki-client