$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer File: ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer (raw, json) Hash identifier: fvhNnKgtuFNtKVzMVgWUsiBn6xVI2yNWojsAYr25l9U= Subject key identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DA3F864DFC46B15BCBD42AB8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 17:08:02 +0000 Certificate not after: Tue 17 Aug 2027 17:08:02 +0000 Subordinate resources: IP: 137.28.0.0/16 IP: 192.133.95.0/24 IP: 192.231.219.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:3f:86:4d:fc:46:b1:5b:cb:d4:2a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 14 17:08:02 2025 GMT Not After : Aug 17 17:08:02 2027 GMT Subject: CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:15:e2:fb:3d:47:24:c3:cd:bd:f2:85:17: b5:bc:5b:d7:6b:a6:cc:25:ce:d0:34:92:97:b6:33: 1a:e6:81:90:8d:30:2b:0a:31:3d:bb:ff:7b:a4:1a: 59:d5:6c:66:b2:1d:4a:0e:46:b1:2e:5f:13:15:a4: fb:6d:58:c1:fe:2e:12:2b:d7:5f:c3:fb:bb:fd:cc: 75:5a:a3:6a:91:fe:7a:9c:ef:d4:a4:f9:82:b4:93: 88:e3:68:b2:77:2f:e9:6f:f5:8d:39:d8:82:b9:bd: 7b:6f:f3:a5:ef:44:64:3e:53:f8:a7:8e:75:63:47: 01:fe:e9:d1:38:52:d2:9a:91:45:e2:99:82:5e:34: 83:5c:50:14:f3:c0:c7:25:83:fa:4b:07:5b:eb:39: ef:8c:b6:ae:d4:df:d7:b4:08:68:2e:12:fa:e5:ed: 6e:91:85:e9:5c:60:f0:bc:5d:44:90:f6:b6:ce:6d: 9c:f1:0a:af:70:56:e3:f5:5b:2b:c0:3c:7a:93:3c: ab:51:7a:c7:a1:95:30:c9:ef:e0:8e:d4:4e:43:d6: 5e:0d:9a:50:42:b4:db:30:21:3b:cd:90:4e:aa:68: de:b9:94:a1:60:82:f2:d6:12:1a:7b:66:77:4e:0b: 1b:bd:dd:dd:ff:9e:c8:65:79:22:9c:c1:d7:14:e4: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 137.28.0.0/16 192.133.95.0/24 192.231.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:62:24:a0:33:dd:d8:4d:63:06:7f:87:04:9b:9c:d9:ca: 3b:44:13:be:61:99:97:85:8f:e2:bc:6b:8c:97:6f:da:a2:7f: 39:7d:b6:c9:97:a7:79:86:dc:88:ba:df:8b:6e:0c:fd:8d:cf: 38:2f:f7:8a:ea:1b:77:14:c4:7b:b1:08:b5:b5:b0:3f:4b:a6: 82:64:4d:09:d5:50:2b:3f:84:be:3f:09:d4:bc:d1:7c:08:19: 55:08:7c:7f:f3:45:e1:2e:a7:48:51:e5:12:3b:3a:41:c2:87: 44:c9:6b:19:ae:f8:b8:ff:aa:61:69:fe:02:13:f1:7a:d6:18: c6:6a:86:4c:e4:74:e0:51:60:1d:4d:06:c9:c1:f5:a2:23:7b: 58:ad:3c:d9:68:d4:44:35:1d:b8:c0:0d:3a:93:82:e7:f6:b9: 1c:d4:e6:19:00:89:46:ac:a3:19:50:e0:61:8e:ee:9e:ef:9c: 37:b1:9c:a1:fd:15:cc:ab:02:9c:72:66:b4:47:24:08:3c:98: d2:25:93:d6:83:c4:95:be:5c:80:42:f5:51:92:81:9b:26:63: 44:63:0a:7d:57:59:4a:91:4e:d1:db:0c:eb:fc:2d:aa:89:cc: 5c:95:4b:d6:90:bc:de:12:dd:a3:61:bc:bc:d9:1f:d2:bb:76: 32:20:4b:7c -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWEnaP4ZN/EaxW8vUKrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNDE3MDgwMloXDTI3MDgxNzE3MDgwMlowLzEtMCsGA1UEAxMk ZWE5N2MzMWMtODNkMi00ZTI0LWE0ZjQtOWQ2OWIzZmZhMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb0V4vs9RyTDzb3yhRe1vFvXa6bMJc7QNJKX tjMa5oGQjTArCjE9u/97pBpZ1Wxmsh1KDkaxLl8TFaT7bVjB/i4SK9dfw/u7/cx1 WqNqkf56nO/UpPmCtJOI42iydy/pb/WNOdiCub17b/Ol70RkPlP4p451Y0cB/unR OFLSmpFF4pmCXjSDXFAU88DHJYP6Swdb6znvjLau1N/XtAhoLhL65e1ukYXpXGDw vF1EkPa2zm2c8QqvcFbj9VsrwDx6kzyrUXrHoZUwye/gjtROQ9ZeDZpQQrTbMCE7 zZBOqmjeuZShYILy1hIae2Z3Tgsbvd3d/57IZXkinMHXFOReKwIDAQABo4IECjCC BAYwHQYDVR0OBBYEFB95CPwOzLUNk/8reGVX0Qa2LoUDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YTk3YzMxYy04M2QyLTRlMjQtYTRmNC05ZDY5YjNmZmExODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VhOTdjMzFjLTgzZDItNGUyNC1h NGY0LTlkNjliM2ZmYTE4My9lYTk3YzMxYy04M2QyLTRlMjQtYTRmNC05ZDY5YjNm ZmExODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCJHAMEAMCFXwMEAMDn2zBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh82Ik oDPd2E1jBn+HBJuc2co7RBO+YZmXhY/ivGuMl2/aon85fbbJl6d5htyIut+Lbgz9 jc84L/eK6ht3FMR7sQi1tbA/S6aCZE0J1VArP4S+PwnUvNF8CBlVCHx/80XhLqdI UeUSOzpBwodEyWsZrvi4/6phaf4CE/F61hjGaoZM5HTgUWAdTQbJwfWiI3tYrTzZ aNRENR24wA06k4Ln9rkc1OYZAIlGrKMZUOBhju6e75w3sZyh/RXMqwKccma0RyQI PJjSJZPWg8SVvlyAQvVRkoGbJmNEYwp9V1lKkU7R2wzr/C2qicxclUvWkLzeEt2j Yby82R/Su3YyIEt8 -----END CERTIFICATE-----Generated at Wed Jun 18 10:42:36 2025 by rpki-client