$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer File: 69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer (raw, json) Hash identifier: knR8nfDlSrwHVHs6aGKiP4rO61kF8jABc4pWvlZXR28= Subject key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A71E38F2AD7C90532E7490A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 00:45:36 +0000 Certificate not after: Mon 11 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 74.112.112.0/21 IP: 168.100.180.0/22 IP: 204.8.8.0/21 IP: 208.70.40.0/21 IP: 208.88.248.0/21 IP: 2606:5d00::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:e3:8f:2a:d7:c9:05:32:e7:49:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 8 00:45:36 2025 GMT Not After : Oct 11 00:45:36 2027 GMT Subject: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:4e:a1:92:19:47:18:75:4d:0e:3a:a1:02: 0a:a5:5f:cf:8d:ba:f4:b8:57:ce:4c:b7:0c:d6:98: c1:b8:78:22:0a:7f:e1:68:19:ca:31:ba:b8:fd:3f: 45:fa:d6:4b:55:58:f9:c0:2a:cb:ba:dd:dd:a5:5c: 3d:ea:d5:52:5b:6f:a6:25:a2:8f:cc:4f:fe:ba:dd: c6:08:e7:c9:54:6d:40:a9:6b:5a:3e:2b:a0:d6:7b: 65:f1:40:58:8d:fb:41:6c:c7:41:30:e8:d4:47:fc: db:be:29:37:89:2c:ec:71:57:a4:f0:7c:96:54:b3: c6:80:42:4b:ba:77:ee:ef:a8:be:ba:e2:2f:60:b2: ca:16:a1:a5:77:14:d4:96:4b:eb:ed:8d:83:7c:43: 9c:d0:b1:b3:d5:1e:a4:33:1e:3e:21:b3:30:a0:f0: 3c:26:43:7e:a0:d6:96:33:c5:ce:4e:c9:fc:54:6a: f8:f5:e2:11:c1:a8:de:f9:1e:54:5d:ca:a6:d6:1c: 20:45:37:f7:52:60:d0:85:43:1c:0e:3c:e7:b8:37: 62:9e:d4:ad:70:c3:fe:91:a8:3a:b5:6d:02:f8:7b: 9b:75:14:b5:9c:b5:b9:19:f9:b9:8e:e8:85:81:8e: 0e:37:bd:93:5a:fb:dc:44:9e:fc:80:96:38:3b:50: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.112.112.0/21 168.100.180.0/22 204.8.8.0/21 208.70.40.0/21 208.88.248.0/21 IPv6: 2606:5d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:d7:a5:ed:89:5a:ae:21:4c:15:4f:d9:09:0d:66:27:76: a5:61:95:11:59:b8:47:12:f7:14:2a:cb:46:6f:a2:ee:48:2f: 8a:01:66:22:4c:aa:3b:72:bf:2f:8e:9f:58:3d:7c:cd:30:37: 13:7e:e6:ba:49:f2:89:84:44:4e:49:2b:b5:49:b9:3d:07:aa: b1:03:49:f3:5b:41:a2:fb:e8:7b:30:9f:3a:bb:7b:5e:22:dc: cd:12:c3:fe:bf:33:f6:7c:be:95:d3:cd:28:2a:21:7d:34:1b: 82:aa:bf:88:22:db:59:9c:45:dd:1f:62:1a:0c:c9:09:ae:5f: 32:95:46:1a:fc:63:b3:c8:fd:28:13:b0:7d:32:b5:0d:b7:f2: 44:00:c0:fe:c2:b1:f1:75:69:da:62:7b:a5:55:63:71:60:2e: d0:c8:45:f9:c1:08:c9:a8:8e:9c:de:3d:c2:85:7b:30:ec:33: 24:fe:44:3a:6c:df:d8:fa:ac:ca:b7:8b:d5:bb:23:7d:a0:db: df:32:61:b3:27:4f:3a:f5:6c:d7:c2:4f:51:23:97:c5:8a:f1: 29:d9:9c:7b:83:32:3d:a8:5b:e8:25:84:66:b2:0a:e8:df:46: 25:40:14:f5:48:c8:40:d2:9a:f9:65:84:5d:2a:92:36:06:21: 9e:3c:e7:02 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEpx448q18kFMudJCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcwODAwNDUzNloXDTI3MTAxMTAwNDUzNlowLzEtMCsGA1UEAxMk NjllOWJkMGUtZGFlZC00Yjk0LTk2YTUtZTI4YjY5OGU5ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVxOoZIZRxh1TQ46oQIKpV/Pjbr0uFfOTLcM 1pjBuHgiCn/haBnKMbq4/T9F+tZLVVj5wCrLut3dpVw96tVSW2+mJaKPzE/+ut3G COfJVG1AqWtaPiug1ntl8UBYjftBbMdBMOjUR/zbvik3iSzscVek8HyWVLPGgEJL unfu76i+uuIvYLLKFqGldxTUlkvr7Y2DfEOc0LGz1R6kMx4+IbMwoPA8JkN+oNaW M8XOTsn8VGr49eIRwaje+R5UXcqm1hwgRTf3UmDQhUMcDjznuDdintStcMP+kag6 tW0C+HubdRS1nLW5Gfm5juiFgY4ON72TWvvcRJ78gJY4O1DG/wIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFAbudOE89Kv5B4x22SkrmuSNc66+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4ZTlkMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY5ZTliZDBlLWRhZWQtNGI5NC05 NmE1LWUyOGI2OThlOWQzNy82OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4 ZTlkMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBANKcHADBAKoZLQDBAPMCAgDBAPQRigDBAPQWPgw DQQCAAIwBwMFBCYGXQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVCDXpe2JWq4hTBVP2QkNZid2pWGVEVm4 RxL3FCrLRm+i7kgvigFmIkyqO3K/L46fWD18zTA3E37muknyiYRETkkrtUm5PQeq sQNJ81tBovvoezCfOrt7XiLczRLD/r8z9ny+ldPNKCohfTQbgqq/iCLbWZxF3R9i GgzJCa5fMpVGGvxjs8j9KBOwfTK1DbfyRADA/sKx8XVp2mJ7pVVjcWAu0MhF+cEI yaiOnN49woV7MOwzJP5EOmzf2PqsyreL1bsjfaDb3zJhsydPOvVs18JPUSOXxYrx Kdmce4MyPahb6CWEZrIK6N9GJUAU9UjIQNKa+WWEXSqSNgYhnjznAg== -----END CERTIFICATE-----Generated at Wed Jul 9 16:44:01 2025 by rpki-client