$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0.cer File: ee877f0f-35e1-47c6-acc2-7aa5741bd0d0.cer (raw, json) Hash identifier: uNmL9NpPOuGiWXO6/VJz+K8NlUGZJqv0VINGKoNz+sI= Subject key identifier: 6D:1E:93:96:3F:A9:D9:E6:04:8A:48:03:53:E0:17:AE:DD:FF:8E:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A39DE3BD7AC85C3B278A59A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 23:09:37 +0000 Certificate not after: Mon 20 Sep 2027 23:09:37 +0000 Subordinate resources: IP: 199.188.148.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:de:3b:d7:ac:85:c3:b2:78:a5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 17 23:09:37 2025 GMT Not After : Sep 20 23:09:37 2027 GMT Subject: CN=ee877f0f-35e1-47c6-acc2-7aa5741bd0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:ce:3d:bb:df:fc:a7:22:61:06:e9:50:61: 32:d4:55:24:6e:7a:aa:bd:ab:31:f0:aa:4d:88:cc: 57:83:71:f8:f6:07:1b:20:da:a3:74:db:3b:ee:70: 3e:d0:78:ca:6e:08:c2:34:b9:f8:08:db:a7:80:3a: 79:d6:af:8e:96:e3:71:a5:53:93:65:c2:11:fc:49: 64:85:19:d6:b0:2f:03:c5:58:d5:50:b7:b8:59:4f: 66:ef:87:a4:30:20:ea:71:ce:e2:ea:19:f1:8e:d6: ab:c9:01:1e:92:d2:a4:c0:5d:16:5a:3b:5b:5b:35: cf:1a:f2:68:e4:a0:13:95:7e:d4:73:f0:b1:48:61: 26:20:7f:d8:f8:77:36:4d:92:ce:67:a9:f5:0d:ea: 31:bb:2c:2d:e1:ea:d8:a4:7a:fb:fd:cc:6c:4d:2f: b4:05:fc:ba:97:55:50:fe:c2:34:6f:29:0c:de:e4: 6b:cd:1b:46:6e:12:96:53:69:51:03:89:24:53:a1: d7:e4:0f:2c:01:22:33:d2:c4:ff:f8:f8:5e:50:0c: ab:7c:a8:ca:cf:aa:57:a1:26:aa:9c:a6:42:ff:9f: c5:80:bf:34:1e:5e:40:74:89:ef:62:bd:fb:33:1b: 5b:98:bd:22:4b:0c:73:4f:42:4d:16:72:e4:6d:80: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:93:96:3F:A9:D9:E6:04:8A:48:03:53:E0:17:AE:DD:FF:8E:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0/ee877f0f-35e1-47c6-acc2-7aa5741bd0d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.188.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:02:cd:69:9e:35:73:86:33:3e:cc:1e:fa:83:cd:01:2d:07: 04:44:aa:86:11:31:6d:ef:7a:91:52:90:ac:0e:3a:9e:ad:15: 8b:3d:59:3c:09:0c:15:45:4c:6d:03:86:39:b7:1b:7d:e1:d7: 67:dc:06:f8:ed:8c:4c:64:da:75:4c:27:4f:b1:ed:fb:5e:66: 07:16:9f:43:f0:ff:c1:f7:63:82:75:78:26:86:95:fe:d8:15: ad:ac:11:cf:b5:5e:91:24:e8:76:52:32:84:90:62:7f:6b:50: 76:89:e2:a5:d4:21:9a:64:82:0c:95:fc:ce:e6:ca:bb:32:3e: ff:2d:51:f7:19:53:7e:08:cb:76:19:e1:63:db:9c:42:42:7b: 7c:0d:c6:a1:0d:a3:16:f1:a6:5c:ef:6c:9f:98:48:1d:4a:d5: 4c:d4:47:5a:47:c1:8e:1c:1e:81:c6:ca:16:bb:b7:a7:1f:92: 8c:b2:a1:bb:13:0d:d0:b6:bc:d9:06:c8:0e:f2:4b:06:fd:45: f1:46:c9:7a:2c:e9:47:eb:eb:0d:e6:21:0b:8e:42:4a:2e:19: af:ea:12:67:db:d0:63:01:f4:ef:7f:fe:86:e6:88:ec:0b:0f: 9b:ec:51:1e:18:27:10:87:f2:17:02:6f:c5:16:0f:97:fe:54: 51:48:dc:f2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEo53jvXrIXDsnilmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxNzIzMDkzN1oXDTI3MDkyMDIzMDkzN1owLzEtMCsGA1UEAxMk ZWU4NzdmMGYtMzVlMS00N2M2LWFjYzItN2FhNTc0MWJkMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23DOPbvf/KciYQbpUGEy1FUkbnqqvasx8KpN iMxXg3H49gcbINqjdNs77nA+0HjKbgjCNLn4CNungDp51q+OluNxpVOTZcIR/Elk hRnWsC8DxVjVULe4WU9m74ekMCDqcc7i6hnxjtaryQEektKkwF0WWjtbWzXPGvJo 5KATlX7Uc/CxSGEmIH/Y+Hc2TZLOZ6n1Deoxuywt4erYpHr7/cxsTS+0Bfy6l1VQ /sI0bykM3uRrzRtGbhKWU2lRA4kkU6HX5A8sASIz0sT/+PheUAyrfKjKz6pXoSaq nKZC/5/FgL80Hl5AdInvYr37MxtbmL0iSwxzT0JNFnLkbYDlgwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG0ek5Y/qdnmBIpIA1PgF67d/461MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l ZTg3N2YwZi0zNWUxLTQ3YzYtYWNjMi03YWE1NzQxYmQwZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VlODc3ZjBmLTM1ZTEtNDdjNi1h Y2MyLTdhYTU3NDFiZDBkMC9lZTg3N2YwZi0zNWUxLTQ3YzYtYWNjMi03YWE1NzQx YmQwZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHHvJQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACwLNaZ41c4YzPswe+oPN AS0HBESqhhExbe96kVKQrA46nq0Viz1ZPAkMFUVMbQOGObcbfeHXZ9wG+O2MTGTa dUwnT7Ht+15mBxafQ/D/wfdjgnV4JoaV/tgVrawRz7VekSTodlIyhJBif2tQdoni pdQhmmSCDJX8zubKuzI+/y1R9xlTfgjLdhnhY9ucQkJ7fA3GoQ2jFvGmXO9sn5hI HUrVTNRHWkfBjhwegcbKFru3px+SjLKhuxMN0La82QbIDvJLBv1F8UbJeizpR+vr DeYhC45CSi4Zr+oSZ9vQYwH073/+huaI7AsPm+xRHhgnEIfyFwJvxRYPl/5UUUjc 8g== -----END CERTIFICATE-----Generated at Wed Jun 18 07:31:02 2025 by rpki-client