$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer File: 65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer (raw, json) Hash identifier: 0VuRznz17UFy/8vkCCMyvvAn3s3JqFJL3yMxdqsEtPg= Subject key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A25B70A9B75AE7EAAA444DE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Jun 2025 17:54:29 +0000 Certificate not after: Thu 29 Jul 2027 20:25:01 +0000 Subordinate resources: AS: 30417 IP: 172.81.4.0/22 IP: 192.64.196.0/23 IP: 199.85.245.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:b7:0a:9b:75:ae:7e:aa:a4:44:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 10 17:54:29 2025 GMT Not After : Jul 29 20:25:01 2027 GMT Subject: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:b4:f0:07:de:67:20:fc:92:28:a9:12:df: c4:52:85:68:3d:69:26:a7:e4:71:34:97:eb:81:ec: 93:ee:06:0b:92:58:19:f3:3b:a7:42:17:b1:2c:47: 6e:cb:33:fd:5f:27:e2:f2:d4:91:0e:5a:eb:6b:06: 48:23:cb:32:ee:04:47:60:a1:bd:8a:3a:37:cc:bb: 0c:ec:bb:01:b4:52:6b:e3:95:bc:59:38:b4:3e:af: 8e:77:bc:9b:76:56:95:54:3a:c8:b6:d6:40:af:9d: 18:01:e0:13:7c:2c:47:9c:83:9e:e9:89:5c:71:25: b7:d7:ca:71:7d:19:71:ba:0d:bb:ed:e7:9d:76:2b: 6f:22:ff:7e:4b:f3:f8:ca:51:81:e1:a3:37:e1:89: 79:77:cf:75:86:1a:b7:f6:4c:7f:12:81:e5:27:f2: a8:64:bb:c2:6b:a8:ac:54:19:39:21:4b:60:db:29: 42:a7:55:7c:c6:5c:45:18:d4:60:01:07:4d:8b:d7: e6:20:d6:40:08:c7:09:54:5b:c3:a5:ce:c2:fa:f5: aa:1f:30:21:8f:2e:98:98:f9:05:ca:b8:19:06:75: ab:03:71:fd:a1:9b:07:dd:50:ed:b2:e2:f2:e1:2d: ff:27:95:1e:9d:19:08:0d:42:a0:d5:12:fe:c9:6f: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 199.85.245.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30417 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:78:64:d6:e6:59:56:2d:90:3b:30:eb:2f:e3:c9:2b:36:ac: b1:c2:d6:b1:29:73:58:69:b5:25:93:9e:94:e8:47:73:ea:f0: 58:e8:e2:e0:c6:d4:86:4a:39:64:b6:b8:01:b9:c5:5a:20:55: 6c:fd:44:6e:b7:60:73:ff:68:e7:ba:07:de:47:b7:23:95:fa: 21:60:86:5c:ea:cf:1b:23:e8:26:c2:83:a6:f7:60:87:4c:68: 8e:02:a5:8a:41:9e:b1:23:45:24:4e:db:91:3d:59:94:78:23: 5a:69:b4:0e:89:14:ea:08:d1:cb:97:3d:16:f2:d9:73:56:7c: 71:1b:78:45:2b:64:ea:d1:f5:07:cf:6c:d4:11:3c:46:a9:c4: 62:71:e0:dc:1b:d3:86:4b:4a:2a:56:ef:71:47:4f:f0:cd:6d: 76:db:98:48:17:f6:8d:ed:f0:b7:bf:59:e0:9a:ff:f7:eb:f9: 38:a1:22:02:87:7a:9f:7f:2d:73:8c:32:5d:d5:09:45:c2:80: ae:dd:07:6f:51:8f:a0:bd:08:f2:ac:8d:fe:73:82:fa:08:6c: de:c6:68:ab:dd:b2:f7:a5:e6:2c:39:c6:0c:5b:e6:ee:b4:b0: 48:10:f7:35:10:c2:9f:b4:75:43:67:79:7d:ca:c9:d8:cc:fb: 04:19:e8:0e -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEoltwqbda5+qqRE3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxMDE3NTQyOVoXDTI3MDcyOTIwMjUwMVowLzEtMCsGA1UEAxMk NjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNhM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidy08AfeZyD8kiipEt/EUoVoPWkmp+RxNJfr geyT7gYLklgZ8zunQhexLEduyzP9Xyfi8tSRDlrrawZII8sy7gRHYKG9ijo3zLsM 7LsBtFJr45W8WTi0Pq+Od7ybdlaVVDrIttZAr50YAeATfCxHnIOe6YlccSW318px fRlxug277eedditvIv9+S/P4ylGB4aM34Yl5d891hhq39kx/EoHlJ/KoZLvCa6is VBk5IUtg2ylCp1V8xlxFGNRgAQdNi9fmINZACMcJVFvDpc7C+vWqHzAhjy6YmPkF yrgZBnWrA3H9oZsH3VDtsuLy4S3/J5UenRkIDUKg1RL+yW/bqwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFMP37WsB42MnvJu6CfoLibSDz5ciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY1ZGY3MmE1LWYwZGEtNGM2NC05 NTNhLTE1YTYyZDVjYTNiMC82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1 Y2EzYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKsUQQDBAHAQMQDBADHVfUwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICdtEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADnhk1uZZVi2QOzDrL+PJKzasscLWsSlz WGm1JZOelOhHc+rwWOji4MbUhko5ZLa4AbnFWiBVbP1Ebrdgc/9o57oH3ke3I5X6 IWCGXOrPGyPoJsKDpvdgh0xojgKlikGesSNFJE7bkT1ZlHgjWmm0DokU6gjRy5c9 FvLZc1Z8cRt4RStk6tH1B89s1BE8RqnEYnHg3BvThktKKlbvcUdP8M1tdtuYSBf2 je3wt79Z4Jr/9+v5OKEiAod6n38tc4wyXdUJRcKArt0Hb1GPoL0I8qyN/nOC+ghs 3sZoq92y96XmLDnGDFvm7rSwSBD3NRDCn7R1Q2d5fcrJ2Mz7BBnoDg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:37 2025 by rpki-client