$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer File: 6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer (raw, json) Hash identifier: CPuGsZ7Va52f0N2EB6Cn9iG9YXZks5CDa9BKKFdborM= Subject key identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849F2DC0834FC184676276ECA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 May 2025 12:42:47 +0000 Certificate not after: Thu 26 Aug 2027 12:42:47 +0000 Subordinate resources: IP: 144.126.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:dc:08:34:fc:18:46:76:27:6e:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 23 12:42:47 2025 GMT Not After : Aug 26 12:42:47 2027 GMT Subject: CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:fe:6f:ff:4e:46:0e:ea:6a:6b:01:07:16: fd:76:e1:23:48:f9:1b:7d:09:4c:ce:4e:24:ce:6a: 8c:d6:96:8b:e8:27:85:3e:c5:85:ad:53:d0:82:62: 25:8f:8c:b5:d7:41:ae:8e:5d:c5:b0:cb:29:1e:a5: 38:e8:52:0a:72:03:90:35:23:0d:2f:ed:24:00:0a: 19:93:7c:31:6c:a3:c0:cb:12:dc:42:62:4d:1b:34: 11:02:5e:67:a1:7f:91:52:b2:41:e5:65:43:47:2f: 0d:a4:da:89:bd:ee:1f:e6:e1:20:98:cc:12:11:0d: c6:d1:ef:dd:fb:93:cd:05:75:a3:06:be:db:c9:76: 7f:8b:56:e0:cd:fb:e1:6f:63:b2:24:f5:ee:4b:7e: 1c:55:d8:90:a4:b5:e2:29:41:1b:c5:09:ad:5d:3a: 6d:4f:4a:bd:1f:19:2a:54:87:62:39:5c:ed:60:17: 4e:ef:db:d7:3f:7c:e7:30:45:9b:0a:c7:d8:77:d0: 34:ee:ec:06:85:2e:3b:03:07:e1:8e:7b:5a:1c:68: 54:10:6d:24:56:54:ec:a5:e6:b6:23:80:7c:0d:3a: a6:66:17:e5:26:65:2b:a2:e1:5d:e6:42:42:db:fb: 0c:0d:5b:b3:63:32:f2:ce:2a:c9:e5:33:c8:58:ea: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 144.126.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:41:82:76:0c:4b:d8:15:2d:a2:ed:fc:9f:8f:9a:d5:4e:c2: f0:5f:3d:48:f2:3d:1c:4f:02:c3:ed:d3:cb:d3:d8:de:72:09: a4:6c:2e:ab:29:b3:48:66:15:3f:7b:db:df:39:fd:63:92:5f: 56:ea:c6:f4:68:06:f8:38:63:19:5b:ac:93:88:3a:40:de:b9: a2:49:77:ad:1c:de:ca:11:79:97:9b:a4:20:d1:55:59:fe:04: 0f:f0:e7:98:81:05:8f:c8:5d:91:b6:32:a9:33:1d:6d:b1:f7: ce:0f:ec:78:58:49:80:e3:65:c6:86:f8:b8:71:b4:d0:36:53: f0:11:c1:57:4c:4a:0b:56:fb:70:f8:65:d2:14:05:83:28:d9: 39:04:d2:66:43:bb:f9:54:b4:d8:68:3b:d5:17:e7:6c:a9:b1: fe:cb:b1:c4:48:19:31:e8:6d:9f:40:56:53:00:84:ae:3a:21: 4d:26:9a:f0:48:41:a3:15:e5:cc:11:20:4a:6a:f3:7a:5f:9b: 7a:d2:91:9e:2b:39:f0:31:63:7d:65:5b:59:d5:b7:9c:98:63: 82:95:e2:c0:ef:48:ee:ea:c3:6e:03:5b:3c:16:15:d7:87:c5: b4:9b:15:0f:b8:91:51:01:ca:c5:04:6c:d6:8a:15:4d:cc:db: 79:02:cc:d5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEny3Ag0/BhGdiduykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMzEyNDI0N1oXDTI3MDgyNjEyNDI0N1owLzEtMCsGA1UEAxMk NmY4MjRiMTUtOTdmZC00YmE1LWIxMjQtNWEzZWY3OGFjMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7j+b/9ORg7qamsBBxb9duEjSPkbfQlMzk4k zmqM1paL6CeFPsWFrVPQgmIlj4y110Gujl3FsMspHqU46FIKcgOQNSMNL+0kAAoZ k3wxbKPAyxLcQmJNGzQRAl5noX+RUrJB5WVDRy8NpNqJve4f5uEgmMwSEQ3G0e/d +5PNBXWjBr7byXZ/i1bgzfvhb2OyJPXuS34cVdiQpLXiKUEbxQmtXTptT0q9Hxkq VIdiOVztYBdO79vXP3znMEWbCsfYd9A07uwGhS47AwfhjntaHGhUEG0kVlTspea2 I4B8DTqmZhflJmUrouFd5kJC2/sMDVuzYzLyzirJ5TPIWOpVHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNQG5L6ho9PcvPrA+wXXZ9axji5lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ZjgyNGIxNS05N2ZkLTRiYTUtYjEyNC01YTNlZjc4YWMyY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZmODI0YjE1LTk3ZmQtNGJhNS1i MTI0LTVhM2VmNzhhYzJjZS82ZjgyNGIxNS05N2ZkLTRiYTUtYjEyNC01YTNlZjc4 YWMyY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAaQfgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACkGCdgxL2BUtou38n4+a 1U7C8F89SPI9HE8Cw+3Ty9PY3nIJpGwuqymzSGYVP3vb3zn9Y5JfVurG9GgG+Dhj GVusk4g6QN65okl3rRzeyhF5l5ukINFVWf4ED/DnmIEFj8hdkbYyqTMdbbH3zg/s eFhJgONlxob4uHG00DZT8BHBV0xKC1b7cPhl0hQFgyjZOQTSZkO7+VS02Gg71Rfn bKmx/suxxEgZMehtn0BWUwCErjohTSaa8EhBoxXlzBEgSmrzel+betKRnis58DFj fWVbWdW3nJhjgpXiwO9I7urDbgNbPBYV14fFtJsVD7iRUQHKxQRs1ooVTczbeQLM 1Q== -----END CERTIFICATE-----Generated at Sun Oct 26 00:42:57 2025 by rpki-client