$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer File: aa6b84f9-271a-420e-904b-b25ba5f52b05.cer (raw, json) Hash identifier: wdwVOruODEA5likqgmwtXv8j/1Ueb+ZtXatJJYF17kM= Subject key identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A1247DCD722DDAC4FF2A23940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 18:50:06 +0000 Certificate not after: Mon 06 Sep 2027 18:50:06 +0000 Subordinate resources: IP: 198.179.169.0 -- 198.179.173.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:47:dc:d7:22:dd:ac:4f:f2:a2:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 3 18:50:06 2025 GMT Not After : Sep 6 18:50:06 2027 GMT Subject: CN=aa6b84f9-271a-420e-904b-b25ba5f52b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:b6:30:c7:91:1c:c2:fd:42:0b:f2:e9:9e: c9:fa:1a:ae:e1:0a:94:dc:f8:13:12:a1:4c:7c:ba: e3:96:1d:cf:c4:44:df:ff:0f:b3:cc:26:7e:b8:28: af:a5:82:b7:4b:43:db:01:58:05:cc:c5:1c:9a:bc: b4:74:05:49:8a:b2:af:5e:2a:16:e3:5e:a7:61:50: 82:13:29:2b:99:5a:05:99:cc:de:f1:af:b3:ae:57: 45:18:f5:97:18:6b:32:37:2c:4e:f2:f4:92:59:83: 9a:c6:a7:7e:55:8d:80:87:7f:3b:4c:82:06:fa:bb: 99:9a:05:75:86:e4:c9:9b:8d:ce:2e:8f:79:dd:20: b1:d0:13:e6:6b:7e:92:64:2f:79:07:fe:6a:76:63: 14:25:54:6c:fe:db:31:65:08:bc:80:f3:d6:c4:28: 1d:e5:85:ce:28:71:1c:bd:8c:9e:50:59:26:2a:30: 52:ed:97:82:97:12:38:a9:6d:af:5c:df:aa:38:e9: e4:5d:e4:ce:91:23:a0:8e:b7:24:c0:fa:15:96:97: b3:94:25:35:04:d1:f7:91:35:23:82:cf:11:d7:9e: bd:a5:38:74:6a:85:9d:2a:db:a8:89:2e:85:6f:ee: 20:e6:aa:47:05:80:94:a7:09:00:74:50:9e:d5:47: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.179.169.0-198.179.173.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a0:db:9b:41:33:87:01:6f:a2:b7:ce:25:3c:cf:9f:21:8f: c8:75:21:8f:e1:07:4f:0b:29:30:3e:d1:a8:d0:8a:41:48:e7: 54:0a:e7:e7:32:c0:4a:1a:50:8c:f0:31:96:19:f7:98:05:a9: dd:eb:94:28:e7:c0:1c:2c:0b:38:fd:c7:9a:ad:7e:e5:b0:20: 67:0b:e2:1e:ae:9b:e1:92:28:1c:04:77:2f:cd:6c:7b:85:fe: 6d:c4:a8:09:b6:54:56:68:ac:28:db:b6:29:10:3c:dc:58:fc: 59:ce:44:04:71:56:f5:a4:f6:c6:30:9f:d1:c9:5b:67:62:6a: 98:22:57:bf:45:8d:b4:98:d5:05:55:a3:7e:39:f7:e5:d1:cf: e4:1a:aa:29:0d:5c:6c:b0:39:0a:95:e1:7f:73:d2:47:ea:bd: 60:8a:fb:03:65:fd:22:7b:50:75:f1:7b:10:2f:14:4f:36:29: 2c:0c:b2:d3:e7:d3:5a:2f:4c:71:2f:a7:59:3e:ea:ca:ad:d2: 99:7b:6c:24:aa:c7:c0:c8:d5:e1:82:2e:1e:a5:73:55:d3:01: 31:3b:ae:66:22:c5:ec:66:a0:70:8d:f7:7f:0d:4a:db:95:4a: 24:e7:c6:a0:b6:5c:33:14:93:19:18:f6:d3:c4:fd:e0:0e:dd: 2b:8b:06:12 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEoSR9zXIt2sT/KiOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwMzE4NTAwNloXDTI3MDkwNjE4NTAwNlowLzEtMCsGA1UEAxMk YWE2Yjg0ZjktMjcxYS00MjBlLTkwNGItYjI1YmE1ZjUyYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTa2MMeRHML9Qgvy6Z7J+hqu4QqU3PgTEqFM fLrjlh3PxETf/w+zzCZ+uCivpYK3S0PbAVgFzMUcmry0dAVJirKvXioW416nYVCC EykrmVoFmcze8a+zrldFGPWXGGsyNyxO8vSSWYOaxqd+VY2Ah387TIIG+ruZmgV1 huTJm43OLo953SCx0BPma36SZC95B/5qdmMUJVRs/tsxZQi8gPPWxCgd5YXOKHEc vYyeUFkmKjBS7ZeClxI4qW2vXN+qOOnkXeTOkSOgjrckwPoVlpezlCU1BNH3kTUj gs8R1569pTh0aoWdKtuoiS6Fb+4g5qpHBYCUpwkAdFCe1Ue22wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFH1OMz4Q+2mBk3XB1sA8F3v5S10DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h YTZiODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjViYTVmNTJiMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FhNmI4NGY5LTI3MWEtNDIwZS05 MDRiLWIyNWJhNWY1MmIwNS9hYTZiODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjViYTVm NTJiMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMazqQMEAcazrDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJoNubQTOH AW+it84lPM+fIY/IdSGP4QdPCykwPtGo0IpBSOdUCufnMsBKGlCM8DGWGfeYBand 65Qo58AcLAs4/cearX7lsCBnC+IerpvhkigcBHcvzWx7hf5txKgJtlRWaKwo27Yp EDzcWPxZzkQEcVb1pPbGMJ/RyVtnYmqYIle/RY20mNUFVaN+Offl0c/kGqopDVxs sDkKleF/c9JH6r1givsDZf0ie1B18XsQLxRPNiksDLLT59NaL0xxL6dZPurKrdKZ e2wkqsfAyNXhgi4epXNV0wExO65mIsXsZqBwjfd/DUrblUok58agtlwzFJMZGPbT xP3gDt0riwYS -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:50 2025 by rpki-client