$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857.cer File: 5b69689e-73ec-4bfc-a419-09f12ac26857.cer (raw, json) Hash identifier: Qn13LA69B7eYBBaYm0SyzGAThJdfVm3YV3XoTWcPifY= Subject key identifier: 7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849E8BE950BC1361C3E19060E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 21:45:22 +0000 Certificate not after: Sun 22 Aug 2027 21:45:22 +0000 Subordinate resources: IP: 208.84.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e8:be:95:0b:c1:36:1c:3e:19:06:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 19 21:45:22 2025 GMT Not After : Aug 22 21:45:22 2027 GMT Subject: CN=5b69689e-73ec-4bfc-a419-09f12ac26857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:70:b0:62:11:90:55:3e:0e:86:72:4c:d7: 2f:93:19:83:2b:ac:1c:de:d3:2c:d3:48:79:16:63: 1f:40:cb:fb:49:33:e8:66:05:4e:1e:53:a0:dd:46: 46:56:4d:a3:e4:32:a5:fc:2d:e6:d5:8e:19:5c:9d: fe:18:6c:38:43:e0:84:7e:dd:65:2e:34:c5:e2:91: 3a:89:89:96:0d:36:da:03:a4:9f:2a:9f:e6:3d:29: 0f:51:2f:66:b4:d4:d7:ee:2b:25:ba:34:cd:74:7b: 3d:0a:80:66:af:fc:23:ca:ac:db:4b:da:f2:f6:f4: 23:b3:82:7d:a8:f1:72:74:b4:41:ad:21:54:51:31: 43:6f:57:23:60:47:ec:5b:35:7d:a8:98:54:90:76: 8e:22:b3:15:75:95:c9:93:c6:10:a5:01:a2:4a:7c: e5:53:e6:ca:94:17:01:09:81:42:58:b3:5d:f8:9c: 81:5d:c9:7a:95:de:9b:99:00:84:9e:b9:0e:cc:36: f3:ff:2c:ec:73:41:14:de:99:c0:bc:19:b7:dc:2b: 09:0d:9a:a9:c8:b1:95:05:a5:fd:8e:78:d8:01:50: 1f:9f:ad:7f:61:07:28:4c:8c:53:df:1b:6a:07:52: 86:f3:3f:f1:72:e5:e4:89:80:cb:7f:7c:22:73:fb: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 208.84.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:27:15:6a:93:be:a6:10:30:90:cf:33:0d:5e:99:ce:3c:2f: 2a:31:32:70:e3:7d:ff:94:65:0e:bb:ee:7a:40:78:5f:81:76: 79:17:70:54:47:ec:ea:f6:ae:e2:ce:d4:12:6f:d7:7a:30:0a: 7b:f9:14:8b:44:86:9e:ff:f1:31:1b:e0:71:66:59:ce:9e:59: f0:78:00:c3:a2:3b:4a:90:58:7e:85:2f:52:4e:34:4b:f3:06: ce:df:f8:f1:fe:5c:9d:59:38:76:d9:e1:22:a8:cd:2a:6c:68: ca:ed:68:da:97:33:b1:b9:94:15:76:f5:fa:32:71:36:af:da: 11:d3:82:8d:c7:22:f0:29:a6:e1:c5:36:cb:79:1e:1a:e4:e8: 7e:92:1d:54:9e:2f:82:65:c3:59:ca:52:4f:cc:36:d5:d8:15: f3:15:82:0c:41:10:7a:91:ea:51:de:43:af:31:79:72:91:3a: 2f:c7:03:c9:f1:41:4e:60:f7:c4:35:16:85:39:81:b2:a5:37: d7:c2:5b:ba:6c:43:b2:3b:fc:3d:6e:4f:2e:f6:b4:b2:7b:69: 38:e4:31:54:8f:ec:6c:46:ce:0e:36:68:c2:fa:76:3f:a8:47: b9:37:e4:a5:29:f7:28:89:bd:92:a7:bf:41:71:05:8d:ba:be: ba:2f:a5:2b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEnovpULwTYcPhkGDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxOTIxNDUyMloXDTI3MDgyMjIxNDUyMlowLzEtMCsGA1UEAxMk NWI2OTY4OWUtNzNlYy00YmZjLWE0MTktMDlmMTJhYzI2ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwghwsGIRkFU+DoZyTNcvkxmDK6wc3tMs00h5 FmMfQMv7STPoZgVOHlOg3UZGVk2j5DKl/C3m1Y4ZXJ3+GGw4Q+CEft1lLjTF4pE6 iYmWDTbaA6SfKp/mPSkPUS9mtNTX7islujTNdHs9CoBmr/wjyqzbS9ry9vQjs4J9 qPFydLRBrSFUUTFDb1cjYEfsWzV9qJhUkHaOIrMVdZXJk8YQpQGiSnzlU+bKlBcB CYFCWLNd+JyBXcl6ld6bmQCEnrkOzDbz/yzsc0EU3pnAvBm33CsJDZqpyLGVBaX9 jnjYAVAfn61/YQcoTIxT3xtqB1KG8z/xcuXkiYDLf3wic/sxaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHwfAE23qwYemS/n7PiWRARqTAFWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YjY5Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYxMmFjMjY4NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzViNjk2ODllLTczZWMtNGJmYy1h NDE5LTA5ZjEyYWMyNjg1Ny81YjY5Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYxMmFj MjY4NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQVGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOicVapO+phAwkM8zDV6Z zjwvKjEycON9/5RlDrvuekB4X4F2eRdwVEfs6vau4s7UEm/XejAKe/kUi0SGnv/x MRvgcWZZzp5Z8HgAw6I7SpBYfoUvUk40S/MGzt/48f5cnVk4dtnhIqjNKmxoyu1o 2pczsbmUFXb1+jJxNq/aEdOCjcci8Cmm4cU2y3keGuTofpIdVJ4vgmXDWcpST8w2 1dgV8xWCDEEQepHqUd5DrzF5cpE6L8cDyfFBTmD3xDUWhTmBsqU318JbumxDsjv8 PW5PLva0sntpOOQxVI/sbEbODjZowvp2P6hHuTfkpSn3KIm9kqe/QXEFjbq+ui+l Kw== -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:07 2025 by rpki-client