$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.cer File: 184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.cer (raw, json) Hash identifier: i+qF5iw378croz2xxihkxU1K40Nc9600LF/45O5aWno= Subject key identifier: AF:E2:DF:1C:03:20:CA:50:2C:59:6C:22:B4:F9:17:F7:75:D4:12:88 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A078691AB2D535DE03CB09A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 May 2025 22:22:34 +0000 Certificate not after: Thu 02 Sep 2027 22:22:34 +0000 Subordinate resources: IP: 173.244.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:86:91:ab:2d:53:5d:e0:3c:b0:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 30 22:22:34 2025 GMT Not After : Sep 2 22:22:34 2027 GMT Subject: CN=184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:a8:65:4d:af:4f:68:8c:80:d5:47:36:85: 48:c6:1f:bb:c2:23:3c:17:92:81:b7:eb:27:67:26: af:06:a2:c8:ab:1c:0b:02:b5:03:6f:09:1e:0e:37: d7:d9:ce:a8:d4:74:21:65:de:20:79:a5:4c:1a:68: ae:e0:84:98:86:63:47:f0:6a:9b:61:f3:1d:55:cb: 4b:f7:b9:38:d4:26:da:80:32:3b:17:21:c1:71:8f: 71:a5:68:4d:9e:85:c6:5c:46:46:ce:10:06:04:60: e2:a8:c0:a4:43:64:04:1d:3c:07:4a:2b:06:33:7b: 24:65:24:a8:ce:5f:9a:32:7d:3f:c0:b8:a2:23:b1: 9d:01:cf:d4:48:09:3e:b4:2d:24:22:b8:18:22:8d: 22:e1:76:d7:57:f7:07:62:86:da:ba:2a:07:bf:65: 95:40:be:61:77:39:fb:97:f8:f7:19:8f:71:75:b6: a0:1e:66:ff:c0:d3:78:ee:7e:c8:35:7b:de:fd:6c: 61:cb:2d:6f:fc:fc:39:b3:d5:86:5c:e1:0d:0f:6d: f7:6e:f2:88:b1:b8:2c:cb:9c:cf:6c:d8:d0:3f:88: 3e:47:39:2f:0f:38:e4:36:7e:9a:4f:3e:81:a9:39: 52:94:c6:3a:bd:ab:43:be:8f:d1:4e:05:4a:15:09: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E2:DF:1C:03:20:CA:50:2C:59:6C:22:B4:F9:17:F7:75:D4:12:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.244.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e3:f1:70:1e:db:c9:90:7e:9e:55:1b:21:df:33:7b:92:9d: a1:40:66:60:5e:47:45:1e:b9:0d:8c:6e:1f:2d:eb:d9:d0:9d: 7e:d5:86:95:65:0d:06:1b:ec:45:e6:e7:89:f9:52:bc:75:c1: 5f:25:3d:3f:6e:4a:6d:16:2a:14:b0:a4:b7:6e:e6:10:4b:08: 01:72:44:e0:b7:53:3e:63:78:ae:35:72:1f:43:68:d4:4c:53: a7:e2:17:fb:97:2f:76:66:0d:35:bf:4f:f1:f6:94:7e:25:36: 73:b5:e0:21:17:24:fe:59:d0:d9:6c:a3:c5:68:a1:d9:94:4d: 71:17:ee:ea:dd:66:48:75:08:c4:ce:ad:97:97:fe:0a:6d:e8: 93:8a:f5:20:a3:17:2b:1b:bd:f3:4a:9f:78:5b:e1:fe:b6:77: 1a:59:e1:8e:0f:63:79:1a:1b:ec:83:99:69:63:40:75:5c:ec: 7e:61:e5:56:d5:4b:ba:f0:2e:0a:92:cd:3a:db:1c:80:51:b7: 53:a1:08:63:63:f8:b8:ea:2b:c1:8b:27:b8:95:76:ca:ce:5f: 62:7d:5b:e5:b7:f7:d9:f4:d9:cd:0c:1a:b6:40:87:51:1e:9b: a7:7c:37:8b:49:8f:c6:4b:3e:bc:ff:99:64:92:c4:33:1a:c8: 08:01:ed:65 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEoHhpGrLVNd4DywmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUzMDIyMjIzNFoXDTI3MDkwMjIyMjIzNFowLzEtMCsGA1UEAxMk MTg0YTVhM2MtNWM3Yy00ZDhkLThmZWQtZWYyZDdkNjNjMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhuoZU2vT2iMgNVHNoVIxh+7wiM8F5KBt+sn ZyavBqLIqxwLArUDbwkeDjfX2c6o1HQhZd4geaVMGmiu4ISYhmNH8GqbYfMdVctL 97k41CbagDI7FyHBcY9xpWhNnoXGXEZGzhAGBGDiqMCkQ2QEHTwHSisGM3skZSSo zl+aMn0/wLiiI7GdAc/USAk+tC0kIrgYIo0i4XbXV/cHYobauioHv2WVQL5hdzn7 l/j3GY9xdbagHmb/wNN47n7INXve/Wxhyy1v/Pw5s9WGXOEND233bvKIsbgsy5zP bNjQP4g+RzkvDzjkNn6aTz6BqTlSlMY6vatDvo/RTgVKFQmJCQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK/i3xwDIMpQLFlsIrT5F/d11BKIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ODRhNWEzYy01YzdjLTRkOGQtOGZlZC1lZjJkN2Q2M2MyMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE4NGE1YTNjLTVjN2MtNGQ4ZC04 ZmVkLWVmMmQ3ZDYzYzIwNy8xODRhNWEzYy01YzdjLTRkOGQtOGZlZC1lZjJkN2Q2 M2MyMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASt9GAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKuPxcB7byZB+nlUbId8z e5KdoUBmYF5HRR65DYxuHy3r2dCdftWGlWUNBhvsRebniflSvHXBXyU9P25KbRYq FLCkt27mEEsIAXJE4LdTPmN4rjVyH0No1ExTp+IX+5cvdmYNNb9P8faUfiU2c7Xg IRck/lnQ2WyjxWih2ZRNcRfu6t1mSHUIxM6tl5f+Cm3ok4r1IKMXKxu980qfeFvh /rZ3Glnhjg9jeRob7IOZaWNAdVzsfmHlVtVLuvAuCpLNOtscgFG3U6EIY2P4uOor wYsnuJV2ys5fYn1b5bf32fTZzQwatkCHUR6bp3w3i0mPxks+vP+ZZJLEMxrICAHt ZQ== -----END CERTIFICATE-----Generated at Sun Oct 26 00:44:30 2025 by rpki-client