$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer File: 980354e2-3c42-4edd-9777-d1d6e1642181.cer (raw, json) Hash identifier: y1xAlj8ZkN2+Y4wyjuHxYQQCOdIwGZpvABsjj7f8Dsk= Subject key identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849AD786A4A8AF78188FDFB1888 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 16:11:17 +0000 Certificate not after: Sun 01 Aug 2027 16:11:17 +0000 Subordinate resources: IP: 207.166.139.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:78:6a:4a:8a:f7:81:88:fd:fb:18:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 16:11:17 2025 GMT Not After : Aug 1 16:11:17 2027 GMT Subject: CN=980354e2-3c42-4edd-9777-d1d6e1642181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:b9:57:2e:cb:49:aa:fb:bf:28:b2:62:cc: c0:1f:63:8c:81:31:d9:75:33:e9:f0:cc:18:50:90: d8:db:b0:d6:30:5c:12:f0:a1:28:5f:dd:62:8a:9e: 94:76:64:fe:70:3d:1f:14:7b:0e:a7:82:75:85:c4: 27:e4:d7:c6:6e:bd:16:75:57:ce:4f:50:7a:2f:5f: 1f:00:9e:32:bb:da:ee:52:8a:6b:8d:ec:8b:48:b1: 82:79:cb:63:d9:11:4c:84:74:40:4b:2e:b2:21:48: df:91:29:e8:b6:f9:26:c7:aa:38:f7:4d:1d:f1:ce: 58:2e:fa:8a:b1:15:22:b6:6e:f6:55:25:6b:ec:c3: d0:3c:d2:da:2d:2a:15:25:e2:73:1e:0f:80:23:24: ed:4c:4f:c2:e3:95:09:f3:7c:d6:66:39:b1:8a:3e: fb:30:32:7c:6d:c3:8f:8f:a4:95:91:a5:aa:4a:fa: 24:1f:5e:63:b8:28:db:cf:91:4d:c1:a7:49:04:30: 18:83:ff:d1:72:7c:89:7a:16:f1:a0:4d:38:ab:cd: f7:af:f6:fa:b7:70:e1:bd:9c:95:15:02:b0:a6:de: 7d:0c:37:44:b3:27:59:42:66:49:2e:e3:07:ad:c4: 10:b0:f6:fc:8f:5c:76:4b:fb:c7:d0:9a:28:6d:75: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 207.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:da:cf:a0:27:bb:50:b6:61:9d:b7:67:7e:b8:6f:4c:94:29: 59:af:2f:b4:32:dd:d2:7a:de:00:5d:c3:e8:da:50:2a:b3:0b: ef:ca:47:78:51:7a:f4:31:1d:78:32:a0:da:09:a4:ca:8f:18: 8e:19:4f:55:5d:8b:cb:40:4d:c8:e0:b2:c9:d7:83:fc:b7:33: 66:28:f8:cf:f7:7e:b2:3c:e2:20:d5:d7:2d:4e:9c:3d:18:f0: 66:94:d7:62:18:59:38:73:a1:6a:4d:b4:07:4e:a7:f0:29:ea: 03:cc:1c:51:d3:44:1e:e5:9a:34:c2:41:83:3d:ea:bd:30:3b: 49:f2:4a:30:47:c3:d8:3f:2d:8d:56:d4:f2:59:2f:cf:a4:60: 97:bc:a5:b3:18:b3:fb:10:9e:ee:72:c5:4b:7d:bc:c1:b8:2e: ae:ca:81:91:ec:16:cf:a0:8b:91:b8:45:52:96:ce:c9:59:d2: 9a:1c:4c:5e:3c:92:86:7a:d4:f8:d7:75:72:36:e3:41:e0:36: b2:d8:8f:89:b9:7a:5c:17:8a:55:2b:26:51:1c:05:0e:23:80: 15:e8:c6:10:6e:5d:f2:00:cf:ba:77:67:78:be:3f:89:14:38: d4:93:21:d7:44:84:f2:f4:bf:89:6f:39:5b:03:e8:fa:e6:ea: e0:26:f9:f4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmteGpKiveBiP37GIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODE2MTExN1oXDTI3MDgwMTE2MTExN1owLzEtMCsGA1UEAxMk OTgwMzU0ZTItM2M0Mi00ZWRkLTk3NzctZDFkNmUxNjQyMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie5Vy7LSar7vyiyYszAH2OMgTHZdTPp8MwY UJDY27DWMFwS8KEoX91iip6UdmT+cD0fFHsOp4J1hcQn5NfGbr0WdVfOT1B6L18f AJ4yu9ruUoprjeyLSLGCectj2RFMhHRASy6yIUjfkSnotvkmx6o4900d8c5YLvqK sRUitm72VSVr7MPQPNLaLSoVJeJzHg+AIyTtTE/C45UJ83zWZjmxij77MDJ8bcOP j6SVkaWqSvokH15juCjbz5FNwadJBDAYg//RcnyJehbxoE04q833r/b6t3DhvZyV FQKwpt59DDdEsydZQmZJLuMHrcQQsPb8j1x2S/vH0JoobXUvVwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPRfn5t231gTq4BeeWXb908pKi0IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2NDIxODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzk4MDM1NGUyLTNjNDItNGVkZC05 Nzc3LWQxZDZlMTY0MjE4MS85ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2 NDIxODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPposwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACtrPoCe7ULZhnbdnfrhv TJQpWa8vtDLd0nreAF3D6NpQKrML78pHeFF69DEdeDKg2gmkyo8YjhlPVV2Ly0BN yOCyydeD/LczZij4z/d+sjziINXXLU6cPRjwZpTXYhhZOHOhak20B06n8CnqA8wc UdNEHuWaNMJBgz3qvTA7SfJKMEfD2D8tjVbU8lkvz6Rgl7ylsxiz+xCe7nLFS328 wbgursqBkewWz6CLkbhFUpbOyVnSmhxMXjyShnrU+Nd1cjbjQeA2stiPibl6XBeK VSsmURwFDiOAFejGEG5d8gDPundneL4/iRQ41JMh10SE8vS/iW85WwPo+ubq4Cb5 9A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:48 2025 by rpki-client