$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer File: 64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer (raw, json) Hash identifier: GD8jYnfBHN6D3+Obuly+AMQFENtdG/oiTOqA8fK9o5U= Subject key identifier: 3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ED609D1BF227C1C8ED4333A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 May 2025 13:35:04 +0000 Certificate not after: Tue 24 Aug 2027 13:35:04 +0000 Subordinate resources: IP: 137.81.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:60:9d:1b:f2:27:c1:c8:ed:43:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 21 13:35:04 2025 GMT Not After : Aug 24 13:35:04 2027 GMT Subject: CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:11:c0:32:69:f0:26:3c:92:91:c0:77:40: 3c:44:63:0a:6e:09:1f:92:7e:c7:34:8f:05:3a:ce: f0:57:72:46:76:1f:04:72:74:d4:87:2f:b7:ce:fc: 9b:6d:a2:9b:be:c3:3c:08:37:ff:49:c0:ea:9f:3e: 7a:00:d1:01:06:ee:77:70:25:48:36:5a:37:5f:cd: 47:02:33:e9:24:cc:ec:bb:08:d1:15:98:5b:8f:eb: 93:7c:43:9e:27:73:c4:a2:cf:83:64:0f:76:ec:57: 3e:18:17:44:c2:95:9f:2b:65:44:bf:2d:30:6e:05: 26:2c:84:3b:8c:bd:ff:0a:94:7f:be:c4:06:38:06: c0:41:55:b4:57:a7:8e:3f:91:17:d2:f5:3f:f9:d1: e2:15:b8:5f:b6:20:b1:a8:43:1f:e2:2b:d7:b3:a1: 04:6b:31:73:32:b9:b0:10:ed:5f:89:e2:c2:8c:34: 36:2f:99:31:1b:ad:fa:50:1e:5a:96:d6:d1:fa:ac: 8d:13:5f:6d:7f:f7:dd:e6:98:bf:49:57:ff:7c:6f: 50:59:02:6b:ff:fc:a1:93:df:d7:54:6d:94:64:fe: 40:3f:dd:2f:14:e5:25:15:71:22:7d:2c:78:47:78: d3:18:55:93:9f:e9:09:47:32:b2:e5:8e:b6:e6:4b: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 137.81.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:24:ea:a0:97:4f:68:b0:fe:75:9b:42:8f:75:f2:54:cf:df: 68:ea:8a:0c:fe:bc:4a:dd:f9:bc:87:96:8f:09:25:9e:0f:82: f2:c5:b5:40:e3:67:55:f0:94:59:d1:74:26:11:2c:5e:4d:40: 1e:70:5b:6d:41:3f:5e:53:c7:de:a8:28:9f:f6:09:ac:46:a8: 84:55:00:fe:8c:45:cd:94:72:83:f4:f8:f6:b4:d1:4d:ec:d3: 87:46:c9:14:33:b4:77:86:d3:d6:34:73:f5:94:05:e5:b3:57: d4:69:9c:c3:b4:d9:b4:4e:db:c9:26:aa:35:39:85:65:1f:16: 17:26:a0:19:15:5b:30:34:58:26:22:7c:cb:53:36:23:c0:de: ff:37:a2:18:c7:e2:18:36:bd:04:34:f4:b9:84:b8:50:d0:66: 7b:33:8f:22:b5:27:3f:58:f6:09:5e:02:43:de:ef:46:6f:53: af:43:2a:a4:92:4d:5a:3a:14:4c:7d:7b:31:a5:5d:7b:c4:8e: f9:1d:ea:28:0a:e4:c0:c3:d3:50:40:9a:b0:79:ed:6b:1d:44: 70:d8:01:24:9c:a7:5a:f7:e0:66:3e:4f:f5:5a:89:4c:b4:59: ec:24:63:27:a2:c7:90:3b:81:9d:3d:82:34:ed:ed:0b:7b:55: 0a:7c:19:3f -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEntYJ0b8ifByO1DM6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMTEzMzUwNFoXDTI3MDgyNDEzMzUwNFowLzEtMCsGA1UEAxMk NjRjMGYwZDItMzZhMy00ZTY0LWI5NzQtYmZiODMwMWJhZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiERwDJp8CY8kpHAd0A8RGMKbgkfkn7HNI8F Os7wV3JGdh8EcnTUhy+3zvybbaKbvsM8CDf/ScDqnz56ANEBBu53cCVINlo3X81H AjPpJMzsuwjRFZhbj+uTfEOeJ3PEos+DZA927Fc+GBdEwpWfK2VEvy0wbgUmLIQ7 jL3/CpR/vsQGOAbAQVW0V6eOP5EX0vU/+dHiFbhftiCxqEMf4ivXs6EEazFzMrmw EO1fieLCjDQ2L5kxG636UB5altbR+qyNE19tf/fd5pi/SVf/fG9QWQJr//yhk9/X VG2UZP5AP90vFOUlFXEifSx4R3jTGFWTn+kJRzKy5Y625kt5WwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFD4QfMHNM2ioZHxy4l0djkEX2ImGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NGMwZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4MzAxYmFmMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY0YzBmMGQyLTM2YTMtNGU2NC1i OTc0LWJmYjgzMDFiYWYyMS82NGMwZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4MzAx YmFmMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCJOqgl09osP51m0KPdfJU z99o6ooM/rxK3fm8h5aPCSWeD4LyxbVA42dV8JRZ0XQmESxeTUAecFttQT9eU8fe qCif9gmsRqiEVQD+jEXNlHKD9Pj2tNFN7NOHRskUM7R3htPWNHP1lAXls1fUaZzD tNm0TtvJJqo1OYVlHxYXJqAZFVswNFgmInzLUzYjwN7/N6IYx+IYNr0ENPS5hLhQ 0GZ7M48itSc/WPYJXgJD3u9Gb1OvQyqkkk1aOhRMfXsxpV17xI75HeooCuTAw9NQ QJqwee1rHURw2AEknKda9+BmPk/1WolMtFnsJGMnoseQO4GdPYI07e0Le1UKfBk/ -----END CERTIFICATE-----Generated at Tue Jun 17 06:49:07 2025 by rpki-client