$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer File: 898522c4-7c40-4c25-80fb-b226c0ea4497.cer (raw, json) Hash identifier: Yhl+dlbWHip8A3wOJkjtff+kfF8VguoDGLKADcwTYzg= Subject key identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DA304D23503AC79C00BB3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 16:37:22 +0000 Certificate not after: Tue 17 Aug 2027 16:37:22 +0000 Subordinate resources: IP: 141.233.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:30:4d:23:50:3a:c7:9c:00:bb:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 14 16:37:22 2025 GMT Not After : Aug 17 16:37:22 2027 GMT Subject: CN=898522c4-7c40-4c25-80fb-b226c0ea4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:41:f3:c2:9c:ac:66:d6:fa:34:88:27:d1: db:36:70:a8:35:72:ee:98:dc:2c:0b:12:06:dc:a1: 52:87:7d:ff:72:d1:4b:71:12:97:c2:a8:13:ab:fc: af:56:9d:66:40:0b:ae:38:17:9d:5a:59:16:e0:c5: 2e:52:61:08:cb:62:02:bc:b1:d0:ee:5b:43:04:39: 59:60:43:ae:77:09:d1:14:08:83:62:a6:70:e9:43: fe:f4:f6:70:98:64:98:27:60:54:6e:d2:f3:9d:c8: 20:d1:d0:33:ab:77:4c:b2:96:81:45:62:ac:30:fd: 35:37:b4:43:63:5f:c4:91:ed:92:93:72:51:aa:af: 6b:60:e6:b3:c5:62:bd:12:ad:6a:72:ca:de:68:51: 8e:2a:85:e9:dc:24:64:77:4a:de:1b:52:56:2b:5f: 40:b0:df:1a:d2:8d:0a:19:dc:67:9d:9c:0c:48:97: e8:e5:bc:32:0a:3d:b8:6e:1a:b7:90:d1:b9:c1:c7: 30:91:8a:6f:3b:92:66:a8:01:8b:c3:9c:d1:9a:ca: 81:ea:97:3f:92:fe:a9:58:eb:c7:5e:cb:6b:0e:6c: f7:c5:ca:fe:41:37:1b:eb:95:92:63:19:03:a8:28: 19:4a:87:5f:5b:bc:41:bd:7a:5b:13:ac:01:f9:4a: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 141.233.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:62:e6:0e:ea:c1:27:f8:de:3b:0e:19:7c:37:9d:a7:b2:30: 6c:f0:94:1c:f1:b2:70:98:05:dd:37:5e:09:72:89:7c:e2:44: ab:b2:ff:dc:3f:f2:46:19:aa:82:7c:01:6e:b3:c7:fc:22:fd: 17:9a:2c:45:86:13:09:d4:d7:cb:b0:c6:55:bd:90:11:33:ea: 39:4c:d5:c3:55:fe:c2:ef:a0:30:40:3c:e5:2a:1d:b5:2a:2f: 3d:b5:7a:dc:3f:31:3f:0b:c0:c0:e7:0d:69:8f:d9:ea:ec:be: af:2b:15:11:54:6b:2e:0a:1e:6a:78:08:5e:08:ed:34:6a:f8: 49:36:88:17:d9:ea:8b:b3:0d:ae:c8:ee:3b:34:88:b2:1f:c1: 19:77:00:1d:54:55:48:8c:8d:5c:f3:17:e4:ce:8e:1e:b7:cf: fd:18:06:27:dd:48:b9:d3:90:43:31:cd:fa:89:8c:4e:08:2d: 36:40:1f:b1:fc:25:b6:56:b0:1c:df:17:e6:38:df:a2:70:96: c2:48:01:ac:52:47:ce:c3:a4:61:56:72:3d:c4:17:de:38:91: 0c:45:2a:21:99:82:73:56:21:05:25:fb:6a:8e:63:dc:c2:a7: 4e:f5:c6:69:6d:92:bf:2a:bd:b9:2f:45:44:7c:77:a4:c1:8e: 6c:01:75:45 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEnaME0jUDrHnAC7NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNDE2MzcyMloXDTI3MDgxNzE2MzcyMlowLzEtMCsGA1UEAxMk ODk4NTIyYzQtN2M0MC00YzI1LTgwZmItYjIyNmMwZWE0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMtB88KcrGbW+jSIJ9HbNnCoNXLumNwsCxIG 3KFSh33/ctFLcRKXwqgTq/yvVp1mQAuuOBedWlkW4MUuUmEIy2ICvLHQ7ltDBDlZ YEOudwnRFAiDYqZw6UP+9PZwmGSYJ2BUbtLzncgg0dAzq3dMspaBRWKsMP01N7RD Y1/Eke2Sk3JRqq9rYOazxWK9Eq1qcsreaFGOKoXp3CRkd0reG1JWK19AsN8a0o0K GdxnnZwMSJfo5bwyCj24bhq3kNG5wccwkYpvO5JmqAGLw5zRmsqB6pc/kv6pWOvH XstrDmz3xcr+QTcb65WSYxkDqCgZSodfW7xBvXpbE6wB+UrVjwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFcohyHaDrsHMFWaWH9i7wXmlqSEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 OTg1MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2YzBlYTQ0OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg5ODUyMmM0LTdjNDAtNGMyNS04 MGZiLWIyMjZjMGVhNDQ5Ny84OTg1MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2YzBl YTQ0OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCN6TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFYuYO6sEn+N47Dhl8N52n sjBs8JQc8bJwmAXdN14Jcol84kSrsv/cP/JGGaqCfAFus8f8Iv0XmixFhhMJ1NfL sMZVvZARM+o5TNXDVf7C76AwQDzlKh21Ki89tXrcPzE/C8DA5w1pj9nq7L6vKxUR VGsuCh5qeAheCO00avhJNogX2eqLsw2uyO47NIiyH8EZdwAdVFVIjI1c8xfkzo4e t8/9GAYn3Ui505BDMc36iYxOCC02QB+x/CW2VrAc3xfmON+icJbCSAGsUkfOw6Rh VnI9xBfeOJEMRSohmYJzViEFJftqjmPcwqdO9cZpbZK/Kr25L0VEfHekwY5sAXVF -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:39 2025 by rpki-client