$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer File: 3f61b400-76de-4d47-93da-b04c33b5a504.cer (raw, json) Hash identifier: uIw/dMJoi8wKo3QKKyQ5zpOL59wNW0Q1Oe01nGybj8w= Subject key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584943DE0A78EA6D123A0D08DA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 20:20:22 +0000 Certificate not after: Thu 24 Jun 2027 20:20:22 +0000 Subordinate resources: IP: 192.67.7.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:de:0a:78:ea:6d:12:3a:0d:08:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 21 20:20:22 2025 GMT Not After : Jun 24 20:20:22 2027 GMT Subject: CN=3f61b400-76de-4d47-93da-b04c33b5a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:49:94:22:ad:c5:35:32:f0:95:62:ca:56: e0:2b:73:ce:d1:20:92:69:5b:86:ca:85:e1:9f:8b: 54:8b:9f:49:b2:77:b7:b5:50:ea:ea:59:aa:26:53: 37:69:89:74:81:c1:a6:c0:76:d1:b7:91:fe:e6:08: 5e:79:8f:dc:e9:53:a1:91:58:bb:12:9d:fe:63:fc: 48:f8:7a:91:e2:0c:ca:3e:ea:10:20:d3:95:ee:59: 0e:70:d1:70:12:b0:4e:53:88:78:e4:11:2c:41:a6: a2:00:c7:f9:c5:07:f5:38:06:07:ba:b4:3f:e6:24: 5b:e7:cd:a5:01:74:46:08:e9:1f:46:89:69:28:17: ea:54:4a:8f:77:64:c2:82:87:2e:31:16:47:d9:8d: dc:92:5d:4f:86:13:cb:10:7f:9a:54:cb:b5:d7:ed: b1:e1:ba:2f:f8:85:c3:d0:74:1e:67:42:f3:40:c9: 95:cb:26:a3:71:a6:59:9d:d5:68:b2:08:41:1f:c1: 74:a6:77:8b:3e:09:61:ee:ef:0f:16:e8:c4:5f:82: fb:70:00:52:02:68:1b:93:5d:99:92:b8:b6:db:58: f6:59:3f:d9:be:d4:54:18:d9:c9:bb:bd:4e:ae:20: 6f:27:dc:2e:6b:37:21:02:3f:55:88:66:f9:f1:e2: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.67.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:02:ca:1c:83:de:c6:d3:67:23:be:c9:47:47:68:57:19:70: 29:5a:08:a2:1d:26:39:8f:63:01:69:73:96:64:07:b5:5e:d6: fa:c6:91:f3:ef:3b:b1:c8:bc:5c:61:bc:11:b6:ae:cb:02:5b: e1:4f:f6:6c:93:31:12:eb:28:2e:b3:b6:8d:b3:eb:3d:56:65: 8c:96:b7:a7:4f:9c:72:8a:93:74:a3:36:df:ee:0a:67:b1:f8: 66:42:95:0d:7e:aa:18:dd:e4:92:67:30:10:4b:68:c9:34:a1: 8f:84:1b:55:82:a1:b1:43:16:87:d0:2b:cb:78:55:50:16:5d: c0:8a:e5:e9:0c:18:de:02:a8:d8:6f:8f:3b:c3:b5:be:fc:93: 90:65:2d:85:a0:88:9d:c1:86:f5:09:2c:10:03:d1:a3:49:50: 5d:0d:0e:0c:5f:66:a5:25:0a:9f:02:8e:23:32:8b:af:8f:15: 0d:53:55:96:ac:52:f1:fe:8c:f4:53:9a:1d:e0:5b:95:bb:e9: 3c:5b:83:a3:b1:6d:68:71:b3:71:20:72:52:50:08:97:0e:ed: 1b:50:fc:16:c9:c1:4e:74:4c:a2:8f:24:22:8c:5f:5f:fc:af: 63:8e:65:ed:9d:ac:ed:ee:c0:6b:80:a6:58:1e:b9:e8:93:aa: 6e:20:61:18 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElD3gp46m0SOg0I2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyMTIwMjAyMloXDTI3MDYyNDIwMjAyMlowLzEtMCsGA1UEAxMk M2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVhNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8tJlCKtxTUy8JViylbgK3PO0SCSaVuGyoXh n4tUi59Jsne3tVDq6lmqJlM3aYl0gcGmwHbRt5H+5gheeY/c6VOhkVi7Ep3+Y/xI +HqR4gzKPuoQINOV7lkOcNFwErBOU4h45BEsQaaiAMf5xQf1OAYHurQ/5iRb582l AXRGCOkfRolpKBfqVEqPd2TCgocuMRZH2Y3ckl1PhhPLEH+aVMu11+2x4bov+IXD 0HQeZ0LzQMmVyyajcaZZndVosghBH8F0pneLPglh7u8PFujEX4L7cABSAmgbk12Z kri221j2WT/ZvtRUGNnJu71OriBvJ9wuazchAj9ViGb58eJ5AwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCa5JloGLxI37vBp1BTbn3Q6aoA/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNmNjFiNDAwLTc2ZGUtNGQ0Ny05 M2RhLWIwNGMzM2I1YTUwNC8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNi NWE1MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAQwcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJALKHIPextNnI77JR0do VxlwKVoIoh0mOY9jAWlzlmQHtV7W+saR8+87sci8XGG8EbauywJb4U/2bJMxEuso LrO2jbPrPVZljJa3p0+ccoqTdKM23+4KZ7H4ZkKVDX6qGN3kkmcwEEtoyTShj4Qb VYKhsUMWh9Ary3hVUBZdwIrl6QwY3gKo2G+PO8O1vvyTkGUthaCIncGG9QksEAPR o0lQXQ0ODF9mpSUKnwKOIzKLr48VDVNVlqxS8f6M9FOaHeBblbvpPFuDo7FtaHGz cSByUlAIlw7tG1D8FsnBTnRMoo8kIoxfX/yvY45l7Z2s7e7Aa4CmWB656JOqbiBh GA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:05 2025 by rpki-client