$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer File: a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer (raw, json) Hash identifier: uCnitHTDALY2OTFoEi5CPKfeSmKiSDUaF9AXCWx5/Wo= Subject key identifier: 72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849F0CD6BB1DA894010ED583D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 19:01:44 +0000 Certificate not after: Wed 25 Aug 2027 19:01:44 +0000 Subordinate resources: IP: 205.236.2.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:cd:6b:b1:da:89:40:10:ed:58:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 22 19:01:44 2025 GMT Not After : Aug 25 19:01:44 2027 GMT Subject: CN=a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:c3:0b:f6:f4:e6:81:08:0f:4b:e1:37:53: 73:e7:a8:33:c0:58:ac:9d:f5:95:6b:b5:70:0e:49: de:be:63:5f:68:4d:e0:3e:3f:87:bf:19:d9:1f:11: 06:55:61:11:55:35:d1:dc:61:67:61:25:2b:1c:c7: ac:b1:22:80:d0:b8:83:df:ac:cf:3a:81:8d:97:ec: d4:01:bd:76:66:9c:4e:76:c2:a2:f5:6e:fa:ac:d8: e3:32:38:08:1f:01:b7:22:ab:3d:63:27:45:ec:88: e3:d6:ac:da:87:84:00:24:5d:f2:09:e7:e1:fc:87: 62:b5:48:33:0e:cc:7c:dc:d6:d9:76:a1:d0:8f:d9: d4:50:ff:e2:22:42:23:37:cd:4f:29:e8:da:18:19: 1b:d4:1d:e4:af:e1:bb:b3:04:57:59:d8:54:42:fb: 1a:82:9e:a1:af:97:e9:c1:ab:68:3f:5a:64:20:59: 0c:bc:c4:77:fc:9f:b9:c7:f1:41:dc:de:8b:bf:e9: 24:e2:c8:5a:4e:3a:96:85:c2:3d:cb:8b:88:e0:6a: 77:30:81:1f:af:e9:28:1a:a3:65:10:21:ab:76:3f: 7d:4e:cb:99:ba:f0:46:12:b7:21:53:b6:09:12:6c: 74:26:0c:d4:ff:64:ec:bf:80:b5:3c:15:7a:0a:d8: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 205.236.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:df:11:75:50:a0:fc:e0:c0:3f:10:a0:2c:e0:7a:c0:f0:27: b1:02:ac:e2:83:30:fa:e3:7c:b3:05:1a:ee:32:73:ce:8a:e4: 7c:72:bc:ca:92:7f:fb:5d:c5:59:6d:c4:e6:0f:3b:4c:02:96: 11:30:8d:8a:6e:70:09:7c:72:36:00:e4:13:71:8e:5d:4b:7a: a3:c8:28:79:92:f3:a1:ba:34:27:d8:f6:82:7c:ab:c9:a2:33: 5d:9e:6b:77:3e:ec:a5:ad:a9:b1:17:02:61:9c:2a:f0:75:2e: 08:90:3e:d2:2d:8b:fb:e3:75:dc:39:79:dd:1c:25:5d:9a:1f: 39:d8:d0:4d:de:9d:81:a1:42:78:5e:57:48:bd:bd:e8:b5:29: 20:34:16:b7:6f:7f:81:fc:f2:c1:a0:56:dd:b6:9d:c2:6e:77: 18:7d:be:4c:d2:91:eb:9e:c5:5f:19:e5:f2:24:a3:3b:fb:10: ca:45:75:03:60:86:a7:46:39:5b:3c:3a:ed:7e:ae:8a:d3:56: b1:1c:e7:25:d5:0f:3c:b3:58:da:0c:51:2a:93:d4:8b:87:f4: 21:ff:37:34:d6:e1:63:dc:1c:8a:49:e4:4e:db:3c:05:81:98: 7f:1c:43:97:39:61:41:06:18:b2:a0:7b:61:a3:b1:b2:9b:8f: 3c:f4:0e:ff -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEnwzWux2olAEO1YPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMjE5MDE0NFoXDTI3MDgyNTE5MDE0NFowLzEtMCsGA1UEAxMk YTdhNWY2ZjgtMTJmNy00NDhjLThjYmMtZWUzZWNkYzFhOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttLDC/b05oEID0vhN1Nz56gzwFisnfWVa7Vw DknevmNfaE3gPj+HvxnZHxEGVWERVTXR3GFnYSUrHMessSKA0LiD36zPOoGNl+zU Ab12ZpxOdsKi9W76rNjjMjgIHwG3Iqs9YydF7Ijj1qzah4QAJF3yCefh/IditUgz Dsx83NbZdqHQj9nUUP/iIkIjN81PKejaGBkb1B3kr+G7swRXWdhUQvsagp6hr5fp watoP1pkIFkMvMR3/J+5x/FB3N6Lv+kk4shaTjqWhcI9y4uI4Gp3MIEfr+koGqNl ECGrdj99TsuZuvBGErchU7YJEmx0JgzU/2Tsv4C1PBV6CthDWwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHKt1OeZ7SBEFmNq6opEVBxcK8D0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h N2E1ZjZmOC0xMmY3LTQ0OGMtOGNiYy1lZTNlY2RjMWE5N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E3YTVmNmY4LTEyZjctNDQ4Yy04 Y2JjLWVlM2VjZGMxYTk3ZS9hN2E1ZjZmOC0xMmY3LTQ0OGMtOGNiYy1lZTNlY2Rj MWE5N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUd8RdVCg/ODAPxCgLOB6 wPAnsQKs4oMw+uN8swUa7jJzzorkfHK8ypJ/+13FWW3E5g87TAKWETCNim5wCXxy NgDkE3GOXUt6o8goeZLzobo0J9j2gnyryaIzXZ5rdz7spa2psRcCYZwq8HUuCJA+ 0i2L++N13Dl53RwlXZofOdjQTd6dgaFCeF5XSL296LUpIDQWt29/gfzywaBW3bad wm53GH2+TNKR657FXxnl8iSjO/sQykV1A2CGp0Y5Wzw67X6uitNWsRznJdUPPLNY 2gxRKpPUi4f0If83NNbhY9wciknkTts8BYGYfxxDlzlhQQYYsqB7YaOxspuPPPQO /w== -----END CERTIFICATE-----Generated at Wed Jun 18 17:43:07 2025 by rpki-client