$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab.cer File: ef6b36b6-45de-499c-9b34-a884902574ab.cer (raw, json) Hash identifier: 3fHGC6tj8W57Rdl2VUKaH9W69k5+KAFOr6hjjdVVHbA= Subject key identifier: 15:14:D8:36:C9:02:56:72:B4:0C:87:44:8A:4A:2E:0A:96:67:1F:8B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849FE2847EB2F519ADDD37362C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ef6b36b6-45de-499c-9b34-a884902574ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 13:50:18 +0000 Certificate not after: Mon 30 Aug 2027 13:50:18 +0000 Subordinate resources: IP: 199.120.202.0/24 IP: 204.194.56.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:28:47:eb:2f:51:9a:dd:d3:73:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 27 13:50:18 2025 GMT Not After : Aug 30 13:50:18 2027 GMT Subject: CN=ef6b36b6-45de-499c-9b34-a884902574ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:7d:55:41:80:1d:87:4d:e0:50:fd:ad:5c: bb:ef:01:4e:e2:45:83:2e:f8:a7:cb:3f:28:21:f7: 8d:7b:e7:6a:f1:41:c0:fd:8f:48:6a:0e:b9:9e:79: 4b:51:57:41:e1:a3:ac:14:5b:45:9a:ac:89:b5:28: 82:aa:28:86:42:b6:6b:bd:52:fa:93:69:27:54:e5: 0c:e5:01:6e:b5:d9:44:20:81:3d:d8:8f:f1:39:5e: cb:1d:ac:9d:e6:7d:9f:df:c4:2c:9e:f4:fd:aa:22: 26:59:a1:1b:cf:0c:af:3d:1a:e4:b4:54:14:f6:30: 3a:ab:3a:2a:bf:d1:58:af:d4:74:08:1e:fc:58:71: ed:e5:17:a9:0b:36:e5:80:22:0d:1a:11:bc:cb:d3: 99:99:77:89:8e:ce:f0:7a:cc:11:da:fd:99:20:a9: d4:e4:39:3b:36:5f:5c:2e:0b:6d:6f:4c:18:07:49: f7:0e:49:43:e5:a0:58:0f:39:68:5b:46:b8:bd:48: 04:e8:d8:0e:ef:94:fe:5c:2a:68:8c:46:d7:8f:7e: b3:ad:ed:e5:3a:fe:c8:74:8c:27:c8:1f:dd:0f:81: 6f:da:d0:1a:32:29:4e:64:3f:81:ea:57:45:a5:56: ef:c0:a4:cc:a8:08:6f:11:80:1c:96:18:64:87:e3: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:D8:36:C9:02:56:72:B4:0C:87:44:8A:4A:2E:0A:96:67:1F:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ef6b36b6-45de-499c-9b34-a884902574ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.120.202.0/24 204.194.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e3:50:0f:ef:c9:ac:1b:a6:31:13:2b:b8:a2:7b:fd:e1:8f: ad:e2:1a:64:2e:6b:f7:43:f6:d4:ed:34:c6:ec:fe:d9:3e:a7: c9:60:d8:48:e5:3f:56:a2:a4:d9:b0:d0:02:ff:9c:60:75:25: 7c:cf:bd:3b:4a:e5:fe:e4:4f:f2:c5:53:ab:7d:97:c8:44:a0: 99:19:cb:24:c2:26:cb:9e:4b:e4:a3:b0:e0:3e:15:14:a7:5a: ab:3b:56:1e:f4:a3:11:44:e4:5e:b8:2c:0f:5d:fc:fe:32:02: 64:80:a3:dc:38:6d:fa:7e:bb:6a:91:c5:67:2a:dd:ed:00:18: 57:65:3c:a6:d5:bf:77:99:03:19:b3:66:19:2d:45:67:df:49: c1:df:b3:bb:45:a2:e8:2c:d2:ae:7b:3e:ea:b6:25:fb:08:2f: 4c:32:f3:1d:e2:ca:59:09:b8:81:5d:bd:76:03:b3:ad:96:77: ea:f8:49:34:86:87:4c:34:f1:55:1a:e6:e9:92:08:e7:0c:9c: 26:90:97:87:57:61:e8:e0:31:cd:5d:41:a4:98:7f:38:01:cf: de:54:d7:fd:4c:43:d3:98:12:21:f0:58:20:c2:13:e2:48:f1: ad:d7:4b:bb:71:ba:69:8e:17:7d:01:f7:88:fa:74:d4:93:1e: 81:cc:20:fe -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEn+KEfrL1Ga3dNzYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyNzEzNTAxOFoXDTI3MDgzMDEzNTAxOFowLzEtMCsGA1UEAxMk ZWY2YjM2YjYtNDVkZS00OTljLTliMzQtYTg4NDkwMjU3NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcF9VUGAHYdN4FD9rVy77wFO4kWDLvinyz8o IfeNe+dq8UHA/Y9Iag65nnlLUVdB4aOsFFtFmqyJtSiCqiiGQrZrvVL6k2knVOUM 5QFutdlEIIE92I/xOV7LHayd5n2f38QsnvT9qiImWaEbzwyvPRrktFQU9jA6qzoq v9FYr9R0CB78WHHt5RepCzblgCINGhG8y9OZmXeJjs7weswR2v2ZIKnU5Dk7Nl9c Lgttb0wYB0n3DklD5aBYDzloW0a4vUgE6NgO75T+XCpojEbXj36zre3lOv7IdIwn yB/dD4Fv2tAaMilOZD+B6ldFpVbvwKTMqAhvEYAclhhkh+MVAwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFBUU2DbJAlZytAyHRIpKLgqWZx+LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l ZjZiMzZiNi00NWRlLTQ5OWMtOWIzNC1hODg0OTAyNTc0YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VmNmIzNmI2LTQ1ZGUtNDk5Yy05 YjM0LWE4ODQ5MDI1NzRhYi9lZjZiMzZiNi00NWRlLTQ5OWMtOWIzNC1hODg0OTAy NTc0YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHeMoDBAPMwjgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQuNQD+/JrBum MRMruKJ7/eGPreIaZC5r90P21O00xuz+2T6nyWDYSOU/VqKk2bDQAv+cYHUlfM+9 O0rl/uRP8sVTq32XyESgmRnLJMImy55L5KOw4D4VFKdaqztWHvSjEUTkXrgsD138 /jICZICj3Dht+n67apHFZyrd7QAYV2U8ptW/d5kDGbNmGS1FZ99Jwd+zu0Wi6CzS rns+6rYl+wgvTDLzHeLKWQm4gV29dgOzrZZ36vhJNIaHTDTxVRrm6ZII5wycJpCX h1dh6OAxzV1BpJh/OAHP3lTX/UxD05gSIfBYIMIT4kjxrddLu3G6aY4XfQH3iPp0 1JMegcwg/g== -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:15 2025 by rpki-client