$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70.cer File: 92e267f9-c6b0-412c-a8aa-8bad32caaf70.cer (raw, json) Hash identifier: 2kGyn2dgug0y7cLHfpA6W9e50QbfgIwuXophtpxVXTU= Subject key identifier: 4F:5A:E4:81:C4:0C:55:A2:17:33:DF:ED:AF:9B:35:67:FD:07:AC:9D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A2E4CF145AAA4A5D8A5380B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/92e267f9-c6b0-412c-a8aa-8bad32caaf70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Jun 2025 19:42:59 +0000 Certificate not after: Thu 16 Sep 2027 19:42:59 +0000 Subordinate resources: IP: 144.39.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:4c:f1:45:aa:a4:a5:d8:a5:38:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 13 19:42:59 2025 GMT Not After : Sep 16 19:42:59 2027 GMT Subject: CN=92e267f9-c6b0-412c-a8aa-8bad32caaf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:40:96:6e:5a:39:e6:b7:48:91:e7:23:c6: 56:8b:18:ef:67:29:3e:7a:64:75:90:fe:83:3a:ac: 69:0a:c3:d6:4e:b8:91:38:5e:1e:03:f3:d8:04:fd: 62:d2:23:9c:35:25:60:ac:e6:12:41:76:68:f4:68: 6d:97:da:ee:2b:69:c8:e5:9a:23:4d:9d:3c:17:48: 16:10:58:bd:67:4f:09:e4:78:ae:7f:46:9e:5c:a5: 29:43:68:d5:55:ce:ba:bd:c9:c5:d5:47:24:f5:e7: 8f:65:a6:80:a4:19:96:f9:6c:bd:74:bb:40:11:96: 99:95:e6:6b:60:3a:a1:0d:19:e2:e5:1f:0f:ea:a7: f6:00:76:39:2a:b2:c9:50:ce:34:99:e2:ad:28:62: 6e:7c:33:70:08:88:24:58:86:56:43:7b:5e:6f:f8: 37:5c:3e:c4:cc:7a:74:17:e6:36:32:17:57:49:ae: 48:6b:15:26:b9:eb:1a:3f:b1:95:17:61:3b:be:36: 98:58:21:4b:3c:b1:16:ce:67:5d:6f:24:22:55:b2: ba:9e:57:95:30:77:b4:63:ef:26:ad:cd:e3:ae:d7: 24:a7:60:11:8c:88:3d:97:3f:8f:86:f2:95:e5:82: 79:9a:a4:32:74:c3:7a:6b:49:39:46:90:11:be:55: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:E4:81:C4:0C:55:A2:17:33:DF:ED:AF:9B:35:67:FD:07:AC:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/92e267f9-c6b0-412c-a8aa-8bad32caaf70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 144.39.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:63:cc:b0:22:66:a3:7b:38:fa:36:2b:6a:6a:58:4a:9d:9b: 92:94:7b:ad:26:fc:b0:5a:55:dd:37:7c:70:9f:43:a5:f1:f7: ad:c4:fa:a9:ef:4f:93:36:93:ca:92:e4:57:62:07:74:7b:09: 23:da:f8:87:47:cd:40:fa:ee:cc:95:77:cf:db:59:3b:a9:7e: 0b:1c:d3:6a:42:75:ee:0d:c1:e9:f1:10:14:43:50:9f:57:e2: 54:2c:ef:07:1b:8f:ce:36:b2:a7:39:2b:49:eb:8d:1f:d0:75: 82:96:32:a2:9a:30:93:52:96:ab:4c:f4:48:67:36:68:b0:04: e0:9a:72:3b:81:45:9c:e9:bf:a2:7a:f5:7a:1f:41:57:ab:80: 31:ed:2d:ce:92:28:ca:39:ea:b2:30:3b:fb:58:26:82:22:34: a7:4b:c1:7e:06:60:70:0e:ca:34:88:d8:5c:49:24:09:bb:40: dc:30:77:b0:78:0e:6b:7e:28:e4:6e:21:0a:02:4c:c1:3f:8d: 23:14:3d:c9:15:3c:f7:cc:da:41:81:ee:f0:a6:39:bc:cd:e9: 64:3b:8a:b1:b7:01:75:a2:17:78:5e:95:34:35:c4:71:58:27: 5b:3c:a3:87:1a:81:8c:68:4c:b4:9a:9a:cf:79:89:2c:17:1c: 2f:5c:74:b6 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEouTPFFqqSl2KU4C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxMzE5NDI1OVoXDTI3MDkxNjE5NDI1OVowLzEtMCsGA1UEAxMk OTJlMjY3ZjktYzZiMC00MTJjLWE4YWEtOGJhZDMyY2FhZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhAlm5aOea3SJHnI8ZWixjvZyk+emR1kP6D OqxpCsPWTriROF4eA/PYBP1i0iOcNSVgrOYSQXZo9Ghtl9ruK2nI5ZojTZ08F0gW EFi9Z08J5Hiuf0aeXKUpQ2jVVc66vcnF1Uck9eePZaaApBmW+Wy9dLtAEZaZleZr YDqhDRni5R8P6qf2AHY5KrLJUM40meKtKGJufDNwCIgkWIZWQ3teb/g3XD7EzHp0 F+Y2MhdXSa5IaxUmuesaP7GVF2E7vjaYWCFLPLEWzmddbyQiVbK6nleVMHe0Y+8m rc3jrtckp2ARjIg9lz+PhvKV5YJ5mqQydMN6a0k5RpARvlUq4QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFE9a5IHEDFWiFzPf7a+bNWf9B6ydMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MmUyNjdmOS1jNmIwLTQxMmMtYThhYS04YmFkMzJjYWFmNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkyZTI2N2Y5LWM2YjAtNDEyYy1h OGFhLThiYWQzMmNhYWY3MC85MmUyNjdmOS1jNmIwLTQxMmMtYThhYS04YmFkMzJj YWFmNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIY8ywImajezj6NitqalhK nZuSlHutJvywWlXdN3xwn0Ol8fetxPqp70+TNpPKkuRXYgd0ewkj2viHR81A+u7M lXfP21k7qX4LHNNqQnXuDcHp8RAUQ1CfV+JULO8HG4/ONrKnOStJ640f0HWCljKi mjCTUparTPRIZzZosATgmnI7gUWc6b+ievV6H0FXq4Ax7S3OkijKOeqyMDv7WCaC IjSnS8F+BmBwDso0iNhcSSQJu0DcMHeweA5rfijkbiEKAkzBP40jFD3JFTz3zNpB ge7wpjm8zelkO4qxtwF1ohd4XpU0NcRxWCdbPKOHGoGMaEy0mprPeYksFxwvXHS2 -----END CERTIFICATE-----Generated at Wed Jun 18 14:29:08 2025 by rpki-client