$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer File: e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer (raw, json) Hash identifier: RuK90EHflwpOlX5by4fHTj5KD+aDn9E7pEEmWy3FWFw= Subject key identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A707E381076838DB547E9B440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 12:45:36 +0000 Certificate not after: Sun 10 Oct 2027 12:45:36 +0000 Subordinate resources: IP: 137.141.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:7e:38:10:76:83:8d:b5:47:e9:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 12:45:36 2025 GMT Not After : Oct 10 12:45:36 2027 GMT Subject: CN=e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:fb:36:f0:2c:5c:e5:88:3b:95:75:ba:49: 1e:0a:cd:4e:66:a2:93:e2:a8:2d:1b:1c:da:96:fe: 00:bc:08:7b:07:5b:45:aa:91:f4:93:54:88:79:0b: 65:06:c4:bb:28:9c:f3:7c:31:7d:78:d7:f5:02:57: 38:d6:e0:11:a6:e0:f1:66:e4:de:08:da:ec:79:25: f6:df:05:ff:2a:5f:cc:2e:cb:9c:1f:6a:ae:1e:d9: e1:db:4f:19:b7:c7:53:9e:89:5e:2b:1a:a6:2d:71: de:fe:ef:09:49:1a:83:95:77:5b:29:cf:79:a7:36: 0c:24:7a:f5:fd:b8:53:a9:62:80:77:6e:8a:89:a6: 65:09:76:54:b9:ea:43:51:a1:ac:04:f3:77:ae:71: dc:12:03:fd:30:23:63:3e:bd:e6:4c:3a:8f:cb:6a: 1c:0e:da:d2:73:c9:cd:b2:a0:08:80:d8:d0:f8:85: fc:e5:41:ac:2a:a8:8f:be:a6:96:0e:fe:31:61:a0: 00:01:70:c7:65:db:45:cf:1b:78:93:41:27:8c:90: b0:15:2c:b2:9c:a1:31:71:8e:a1:c0:c1:f3:e8:67: c8:e1:32:59:a2:3c:e1:30:2b:de:54:b3:4a:d7:fd: ae:4f:3b:73:02:4c:d4:ce:97:f4:8c:fe:d0:21:69: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 137.141.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:06:07:d5:43:a6:e0:33:7e:d8:c3:04:6e:1e:4d:dc:c2:55: 1f:8f:75:86:05:6a:e5:9e:c8:19:ff:e0:84:d8:46:6f:01:71: 27:9a:ea:9e:85:83:7f:6d:48:8e:a9:9e:91:7a:32:5b:55:8f: e8:b8:c9:ae:68:4e:78:4b:26:61:56:b4:11:4e:97:95:4c:a6: 04:d1:91:59:14:8d:61:80:36:69:08:fe:06:a7:3c:c7:c9:cb: 06:c9:5f:a7:36:8c:7e:61:07:a9:db:f1:2a:fe:4b:62:95:52: cc:96:2a:90:31:71:59:46:0b:d7:a6:c2:1b:ba:d7:82:c6:20: 2f:a9:fd:c9:90:cb:00:1f:a7:80:a9:89:be:23:cc:f4:80:ad: 57:dd:95:c1:c5:3e:af:a8:30:c0:09:10:c9:7d:ef:2b:80:79: ac:c7:3b:c4:66:d2:2e:c9:ab:85:41:4f:32:e9:9e:46:c9:8d: f4:fd:cd:be:41:3c:3b:f9:70:da:b4:88:49:52:84:1e:50:10: 98:5d:14:08:84:cd:f9:13:14:d6:3a:8a:1c:73:e1:71:d1:87: 77:91:de:23:00:9f:67:7b:a2:d8:8f:38:2b:eb:c3:af:f7:0b: 30:1a:b2:0f:6b:d2:fd:de:66:12:d4:5f:8e:f4:59:69:b0:c0: a8:7f:b8:fe -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEpwfjgQdoONtUfptEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzEyNDUzNloXDTI3MTAxMDEyNDUzNlowLzEtMCsGA1UEAxMk ZThmYmZjODQtNWM2Zi00MDBjLWI3YTYtMWFlNGUxNjIzZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGf7NvAsXOWIO5V1ukkeCs1OZqKT4qgtGxza lv4AvAh7B1tFqpH0k1SIeQtlBsS7KJzzfDF9eNf1Alc41uARpuDxZuTeCNrseSX2 3wX/Kl/MLsucH2quHtnh208Zt8dTnoleKxqmLXHe/u8JSRqDlXdbKc95pzYMJHr1 /bhTqWKAd26KiaZlCXZUuepDUaGsBPN3rnHcEgP9MCNjPr3mTDqPy2ocDtrSc8nN sqAIgNjQ+IX85UGsKqiPvqaWDv4xYaAAAXDHZdtFzxt4k0EnjJCwFSyynKExcY6h wMHz6GfI4TJZojzhMCveVLNK1/2uTztzAkzUzpf0jP7QIWlWGQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHu5xjFobYxxUAFYqlJXF4wn8gsfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l OGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2MjNkMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U4ZmJmYzg0LTVjNmYtNDAwYy1i N2E2LTFhZTRlMTYyM2QxZS9lOGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2 MjNkMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJjTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBBgfVQ6bgM37YwwRuHk3c wlUfj3WGBWrlnsgZ/+CE2EZvAXEnmuqehYN/bUiOqZ6RejJbVY/ouMmuaE54SyZh VrQRTpeVTKYE0ZFZFI1hgDZpCP4GpzzHycsGyV+nNox+YQep2/Eq/ktilVLMliqQ MXFZRgvXpsIbuteCxiAvqf3JkMsAH6eAqYm+I8z0gK1X3ZXBxT6vqDDACRDJfe8r gHmsxzvEZtIuyauFQU8y6Z5GyY30/c2+QTw7+XDatIhJUoQeUBCYXRQIhM35ExTW Ooocc+Fx0Yd3kd4jAJ9ne6LYjzgr68Ov9wswGrIPa9L93mYS1F+O9FlpsMCof7j+ -----END CERTIFICATE-----Generated at Fri Jul 11 04:36:26 2025 by rpki-client