$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer File: 307683f0-b7f5-4fe1-b163-a8a0ead77634.cer (raw, json) Hash identifier: DvTk2u0vBBahaa14UrXijeZxckIyhriUICo8ciWrk5g= Subject key identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4F7FEB1622D2DC0BEDF35600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 17:07:22 +0000 Certificate not after: Tue 28 Sep 2027 17:07:22 +0000 Subordinate resources: IP: 173.214.216.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:7f:eb:16:22:d2:dc:0b:ed:f3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 25 17:07:22 2025 GMT Not After : Sep 28 17:07:22 2027 GMT Subject: CN=307683f0-b7f5-4fe1-b163-a8a0ead77634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:24:4b:3d:d5:8f:23:66:31:04:c2:c5:b4: 3e:b1:24:1d:2b:18:de:b7:e9:bc:c8:f6:56:5f:f9: 9b:85:d0:aa:97:aa:be:3f:4d:b0:7a:97:70:45:ec: 5c:2f:00:ca:d9:7e:72:92:1a:e4:e5:b4:1e:a1:01: 53:e9:da:43:cb:1b:9e:70:1b:f7:87:dd:39:2d:6c: 81:a4:3f:c3:c9:b4:6a:4a:15:58:0a:7b:b2:27:ca: 6a:8d:4f:c4:a3:89:80:ae:c0:f3:e1:b4:0f:cf:d8: d6:eb:14:02:32:a6:22:24:e6:09:3a:99:24:73:26: f7:ad:a8:6b:17:4f:df:70:96:62:b6:11:8b:5a:33: b0:d2:f4:3a:cc:da:6f:ef:d2:a7:d2:ee:ec:01:7f: 6c:c9:05:82:d3:3b:e8:aa:35:9f:e5:4f:a5:f3:16: 10:44:63:70:83:1a:9c:2d:cd:64:6a:01:5e:a7:47: 2f:de:5a:af:58:a9:0f:b2:58:ae:e5:0a:b1:5c:9c: e4:77:20:ad:57:7e:90:e4:9e:f1:90:53:b1:c4:a7: 5d:73:fd:b0:60:78:0c:cb:88:f6:7f:2e:3d:0a:bc: 1e:93:11:0f:85:29:13:5b:e8:d1:b4:4a:dc:5e:65: df:db:a0:a1:93:84:c7:0e:6f:e3:e7:6c:2c:a8:7c: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.214.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ff:58:12:97:de:a5:eb:3c:7c:26:51:14:02:a0:a9:55:e1: 9e:78:1b:29:cf:07:cd:20:76:62:48:e2:25:87:4f:c1:5c:de: 43:a2:07:69:a5:57:7e:64:10:68:0c:f0:d0:82:db:a1:ff:e8: 43:62:fc:90:a5:86:4b:ac:fc:4a:56:e8:1c:b9:db:30:d1:63: 70:17:c2:ca:96:85:c9:e8:d0:6d:eb:dc:92:94:61:44:94:6e: a7:96:4a:c6:a1:05:44:89:77:2b:18:e1:b6:db:3d:49:cb:26: e0:68:e5:a9:64:f0:ad:ac:90:30:1f:1b:f4:35:f0:b8:76:4e: 0e:cb:74:b1:c2:ee:65:32:2f:62:a6:2e:fe:e8:54:8a:21:a5: c3:50:3e:ef:2d:be:e9:10:1a:05:3e:b1:e9:4b:b1:99:9c:59: 1d:8a:d9:e5:99:b0:16:14:fa:49:a3:bb:4b:aa:90:fd:fc:bf: bf:da:67:3b:a0:9b:c9:26:af:97:c1:cc:f5:c1:f6:ac:1a:20: 3b:3d:47:2f:a7:9b:43:b2:aa:a3:43:35:66:50:81:6a:07:2d: 56:83:16:3b:23:fc:4d:fe:ec:2a:97:1d:b1:ab:be:ed:64:62: 14:b9:85:da:15:32:9a:09:43:d3:a6:05:cb:0d:88:66:10:97: e3:5e:8b:db -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpPf+sWItLcC+3zVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNTE3MDcyMloXDTI3MDkyODE3MDcyMlowLzEtMCsGA1UEAxMk MzA3NjgzZjAtYjdmNS00ZmUxLWIxNjMtYThhMGVhZDc3NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUgkSz3VjyNmMQTCxbQ+sSQdKxjet+m8yPZW X/mbhdCql6q+P02wepdwRexcLwDK2X5ykhrk5bQeoQFT6dpDyxuecBv3h905LWyB pD/DybRqShVYCnuyJ8pqjU/Eo4mArsDz4bQPz9jW6xQCMqYiJOYJOpkkcyb3rahr F0/fcJZithGLWjOw0vQ6zNpv79Kn0u7sAX9syQWC0zvoqjWf5U+l8xYQRGNwgxqc Lc1kagFep0cv3lqvWKkPsliu5QqxXJzkdyCtV36Q5J7xkFOxxKddc/2wYHgMy4j2 fy49CrwekxEPhSkTW+jRtErcXmXf26Chk4THDm/j52wsqHyS0QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFICdapbJ8K5eUGvauticIbgdgcv1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z MDc2ODNmMC1iN2Y1LTRmZTEtYjE2My1hOGEwZWFkNzc2MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzMwNzY4M2YwLWI3ZjUtNGZlMS1i MTYzLWE4YTBlYWQ3NzYzNC8zMDc2ODNmMC1iN2Y1LTRmZTEtYjE2My1hOGEwZWFk Nzc2MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKt1tgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdP9YEpfepes8fCZRFAKg qVXhnngbKc8HzSB2YkjiJYdPwVzeQ6IHaaVXfmQQaAzw0ILbof/oQ2L8kKWGS6z8 SlboHLnbMNFjcBfCypaFyejQbevckpRhRJRup5ZKxqEFRIl3Kxjhtts9Scsm4Gjl qWTwrayQMB8b9DXwuHZODst0scLuZTIvYqYu/uhUiiGlw1A+7y2+6RAaBT6x6Uux mZxZHYrZ5ZmwFhT6SaO7S6qQ/fy/v9pnO6CbySavl8HM9cH2rBogOz1HL6ebQ7Kq o0M1ZlCBagctVoMWOyP8Tf7sKpcdsau+7WRiFLmF2hUymglD06YFyw2IZhCX416L 2w== -----END CERTIFICATE-----Generated at Sat Jul 5 12:01:55 2025 by rpki-client