$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer File: 7beaa622-f870-437b-961c-9027fea120aa.cer (raw, json) Hash identifier: DEhG4ktlUMELY+Puy0ggDSl9FWDVoogPjx5hCOQqusY= Subject key identifier: 18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849FEB1093EC229F3A67888B880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 18:25:51 +0000 Certificate not after: Mon 30 Aug 2027 18:25:51 +0000 Subordinate resources: AS: 55261 IP: 209.151.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:b1:09:3e:c2:29:f3:a6:78:88:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 27 18:25:51 2025 GMT Not After : Aug 30 18:25:51 2027 GMT Subject: CN=7beaa622-f870-437b-961c-9027fea120aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:52:90:6b:20:9e:55:8a:c1:c2:b9:d5:39:2d: 4b:77:b3:7d:cb:c3:8c:ff:dc:de:9d:1f:05:00:58: 59:fd:97:f7:43:9f:5e:75:ee:91:57:a5:47:13:0f: 6b:a9:b9:6e:80:56:89:3a:a8:eb:42:08:20:87:5a: f9:df:b7:b8:59:54:92:8f:36:c6:11:2d:8f:34:12: 20:ca:08:08:bb:31:e8:bc:7f:c8:fa:ad:2d:ba:a7: 98:8a:d1:01:bc:c6:a0:8e:90:11:c7:ce:56:af:c9: 9f:4d:c2:cb:d8:1b:1b:12:0d:25:c2:30:00:65:70: 62:c2:59:20:7c:0d:88:b2:8d:d7:b5:c5:63:71:9c: 21:79:b4:c4:3d:0a:b0:25:d1:22:99:54:d7:11:5c: d2:41:da:57:a7:4c:29:87:74:5d:14:d7:54:d0:73: a3:03:4e:4f:83:59:fd:70:ad:9e:87:b8:6e:51:21: 5b:18:24:6a:2b:0c:6a:e1:09:0c:f5:70:37:1e:58: f2:60:f5:c3:c4:0e:74:50:92:0f:ad:7f:b6:75:93: c1:b2:11:bb:2f:64:26:a3:15:1c:75:d1:94:b0:a6: e2:61:02:43:f5:f7:85:cc:6d:5a:ad:37:65:67:80: c6:52:5a:5f:13:6b:61:2b:83:36:59:2e:48:88:60: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55261 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:33:1f:a4:e4:ad:88:44:2d:97:fd:32:23:39:e3:02:5d:98: 61:5c:af:bf:9a:33:cc:56:61:c5:f2:1b:2c:db:fe:d4:4b:96: c2:0e:53:1e:02:9a:c1:28:1f:30:02:2c:26:33:dc:7c:dc:1e: df:ea:e3:13:74:09:2c:34:d3:fa:46:39:7f:57:ca:cf:ce:07: c5:3c:96:b6:19:ff:35:7b:ac:ba:fd:a3:c1:e2:04:c5:7f:3d: 69:d6:84:63:97:77:39:f8:bd:0f:78:e9:a9:86:79:1a:ec:0c: 3a:47:96:a4:26:8b:b1:41:c8:e2:c5:70:b9:f3:9d:83:22:7f: 26:dd:48:29:9c:d8:1d:f7:5b:9a:8d:4f:cc:ba:69:f8:28:14: cf:47:e9:c4:71:2a:ad:2d:f3:58:29:f7:0e:4d:58:85:f7:30: f7:a6:b3:f3:ce:22:28:9f:56:29:2c:47:88:15:d6:79:f4:5f: 57:ad:91:72:7d:e3:62:26:46:d5:e0:a1:c3:23:6a:f6:ec:95: 35:9f:aa:31:40:e3:c6:a9:48:18:1b:0a:0a:c9:94:20:a7:73: 3d:28:fa:a5:84:fd:6e:fa:b0:49:b6:40:ef:52:25:c1:15:58: 7c:b1:66:0b:03:0a:18:5b:0e:1e:b8:91:55:c1:aa:dc:87:c9: 09:62:01:6f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEn+sQk+winzpniIuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyNzE4MjU1MVoXDTI3MDgzMDE4MjU1MVowLzEtMCsGA1UEAxMk N2JlYWE2MjItZjg3MC00MzdiLTk2MWMtOTAyN2ZlYTEyMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFKQayCeVYrBwrnVOS1Ld7N9y8OM/9zenR8F AFhZ/Zf3Q59ede6RV6VHEw9rqblugFaJOqjrQgggh1r537e4WVSSjzbGES2PNBIg yggIuzHovH/I+q0tuqeYitEBvMagjpARx85Wr8mfTcLL2BsbEg0lwjAAZXBiwlkg fA2Iso3XtcVjcZwhebTEPQqwJdEimVTXEVzSQdpXp0wph3RdFNdU0HOjA05Pg1n9 cK2eh7huUSFbGCRqKwxq4QkM9XA3HljyYPXDxA50UJIPrX+2dZPBshG7L2QmoxUc ddGUsKbiYQJD9feFzG1arTdlZ4DGUlpfE2thK4M2WS5IiGA13QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBjN9sLqUufcC4OenL6WtHB08D1EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 YmVhYTYyMi1mODcwLTQzN2ItOTYxYy05MDI3ZmVhMTIwYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzdiZWFhNjIyLWY4NzAtNDM3Yi05 NjFjLTkwMjdmZWExMjBhYS83YmVhYTYyMi1mODcwLTQzN2ItOTYxYy05MDI3ZmVh MTIwYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRl3kwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANfdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI8zH6TkrYhELZf9MiM54wJdmGFcr7+aM8xWYcXyGyzb/tRL lsIOUx4CmsEoHzACLCYz3HzcHt/q4xN0CSw00/pGOX9Xys/OB8U8lrYZ/zV7rLr9 o8HiBMV/PWnWhGOXdzn4vQ946amGeRrsDDpHlqQmi7FByOLFcLnznYMifybdSCmc 2B33W5qNT8y6afgoFM9H6cRxKq0t81gp9w5NWIX3MPems/POIiifViksR4gV1nn0 X1etkXJ942ImRtXgocMjavbslTWfqjFA48apSBgbCgrJlCCncz0o+qWE/W76sEm2 QO9SJcEVWHyxZgsDChhbDh64kVXBqtyHyQliAW8= -----END CERTIFICATE-----Generated at Fri Jun 6 11:43:18 2025 by rpki-client