$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer File: fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer (raw, json) Hash identifier: ZSzcdE/N9lpWsKDCCNdBfLw1gETdKHFaWPR7GLJDsII= Subject key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A17CC0B65EEFA9B772CAAAE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 18:15:29 +0000 Certificate not after: Wed 08 Sep 2027 00:10:03 +0000 Subordinate resources: IP: 198.202.18.0/24 IP: 2604:12e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:cc:0b:65:ee:fa:9b:77:2c:aa:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 5 18:15:29 2025 GMT Not After : Sep 8 00:10:03 2027 GMT Subject: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:40:84:2d:c1:5b:21:e1:77:e9:23:1b:fd: 85:dd:77:c0:64:8d:a4:f8:19:df:50:78:66:b4:05: a9:53:de:a7:dd:38:86:7d:17:57:b3:46:be:ed:d2: 40:40:bc:1a:53:e4:60:36:8f:e8:b6:48:d0:24:5a: 61:61:1a:bb:36:ff:fd:00:a3:91:df:50:7b:ec:ce: 17:48:22:44:b4:7b:96:19:fc:fc:76:ea:ce:b4:4f: 7d:18:1e:cc:cf:a9:1f:88:31:81:f7:24:12:24:4a: 99:37:f7:6d:c2:63:dc:79:12:ed:94:4e:6f:e7:e5: 2a:65:16:1c:73:d3:27:cd:7f:c5:a2:c0:84:c9:22: 23:31:d4:5b:c8:fd:77:84:cd:99:e8:95:0c:49:53: fc:d6:30:39:e9:00:94:e9:e9:ff:70:0b:75:60:4f: 7d:86:ec:b9:3a:67:e8:0b:50:d0:3e:8f:22:05:63: 0c:1c:6c:a7:66:ec:0e:4a:28:79:cc:84:a6:50:29: 5b:37:68:60:eb:f8:1c:a7:34:a7:b1:4d:cd:2a:33: 4f:05:a1:76:0c:1b:1a:ac:5c:8e:d6:9b:e2:fc:75: c4:8b:fc:cb:46:4d:fc:ff:de:5a:44:70:e9:0b:53: 17:3a:56:5a:75:cd:bc:d9:6c:4f:cf:6a:fe:93:b0: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.18.0/24 IPv6: 2604:12e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a9:ec:80:c0:44:8a:79:90:0d:a4:19:a0:a6:77:70:d7:5e: 61:18:7c:94:15:8c:a3:aa:5f:0d:d2:3c:d1:16:d9:28:0d:d4: 81:85:9b:86:77:01:b1:00:2e:49:6c:22:ef:79:15:00:e8:0b: ba:98:c1:eb:bb:7e:c3:dc:8b:06:a1:42:de:f1:5b:1e:3b:87: 47:d3:d2:85:a1:c3:ed:3e:0d:e4:69:43:5c:ec:70:20:c8:22: cd:30:67:a4:ce:f2:97:16:cc:bc:e9:40:c3:f8:24:e8:88:46: 7c:92:06:f4:2f:0f:a3:28:d4:b0:25:ed:a0:69:57:7e:b0:5c: 65:4c:4e:25:1f:3d:1b:c2:c3:64:f6:88:b5:e0:97:5b:e6:b3: 41:41:2a:19:18:3b:4c:b7:54:38:2b:03:4c:77:4b:37:4b:e6: 04:51:4a:43:3c:1a:22:31:17:8a:7d:bf:72:3f:62:0c:4f:a5: 3a:28:54:3a:5f:3b:43:4f:55:25:7b:ac:4c:54:ce:29:a0:ce: 8b:a6:5b:b9:42:03:de:5c:46:0f:66:78:93:8d:2c:b4:73:1d: 12:e7:17:19:c3:aa:36:68:1d:0b:e9:cd:47:de:1e:9e:c4:69: 1a:6d:5d:6d:07:16:00:64:f8:c8:5a:08:52:63:06:56:a7:b9: 52:01:04:35 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEoXzAtl7vqbdyyqrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNTE4MTUyOVoXDTI3MDkwODAwMTAwM1owLzEtMCsGA1UEAxMk ZmIwYzZiYjYtYWJmNi00NzRkLTg1NDctMjk3NWVmYWYzNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKhAhC3BWyHhd+kjG/2F3XfAZI2k+BnfUHhm tAWpU96n3TiGfRdXs0a+7dJAQLwaU+RgNo/otkjQJFphYRq7Nv/9AKOR31B77M4X SCJEtHuWGfz8durOtE99GB7Mz6kfiDGB9yQSJEqZN/dtwmPceRLtlE5v5+UqZRYc c9MnzX/FosCEySIjMdRbyP13hM2Z6JUMSVP81jA56QCU6en/cAt1YE99huy5Omfo C1DQPo8iBWMMHGynZuwOSih5zISmUClbN2hg6/gcpzSnsU3NKjNPBaF2DBsarFyO 1pvi/HXEi/zLRk38/95aRHDpC1MXOlZadc282WxPz2r+k7C9yQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFGBQJLC9FwllrTdN0qGRGrtKfGOKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m YjBjNmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1ZWZhZjM1ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZiMGM2YmI2LWFiZjYtNDc0ZC04 NTQ3LTI5NzVlZmFmMzVlNy9mYjBjNmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1ZWZh ZjM1ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADGyhIwDQQCAAIwBwMFACYEEuAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA GansgMBEinmQDaQZoKZ3cNdeYRh8lBWMo6pfDdI80RbZKA3UgYWbhncBsQAuSWwi 73kVAOgLupjB67t+w9yLBqFC3vFbHjuHR9PShaHD7T4N5GlDXOxwIMgizTBnpM7y lxbMvOlAw/gk6IhGfJIG9C8PoyjUsCXtoGlXfrBcZUxOJR89G8LDZPaIteCXW+az QUEqGRg7TLdUOCsDTHdLN0vmBFFKQzwaIjEXin2/cj9iDE+lOihUOl87Q09VJXus TFTOKaDOi6ZbuUID3lxGD2Z4k40stHMdEucXGcOqNmgdC+nNR94ensRpGm1dbQcW AGT4yFoIUmMGVqe5UgEENQ== -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:39 2025 by rpki-client