$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f3b3ebf1-5580-41bc-9e53-08269e715c41.cer File: f3b3ebf1-5580-41bc-9e53-08269e715c41.cer (raw, json) Hash identifier: 2zbWFwa6W1pDWG7H/YwbrMUOesn/jR+iRJc3iXFZvss= Subject key identifier: D0:7F:7C:02:D4:B5:7F:17:50:DE:E9:D9:1C:AE:04:C4:3B:5F:65:0A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3CD88DF35B77D434602A9300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f3b3ebf1-5580-41bc-9e53-08269e715c41/f3b3ebf1-5580-41bc-9e53-08269e715c41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f3b3ebf1-5580-41bc-9e53-08269e715c41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Jun 2025 00:45:35 +0000 Certificate not after: Wed 22 Sep 2027 00:45:35 +0000 Subordinate resources: IP: 170.102.0.0 -- 170.102.111.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d8:8d:f3:5b:77:d4:34:60:2a:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 19 00:45:35 2025 GMT Not After : Sep 22 00:45:35 2027 GMT Subject: CN=f3b3ebf1-5580-41bc-9e53-08269e715c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:6b:93:5e:75:44:e7:b2:16:3c:03:14:96: d7:18:2e:58:2f:34:0a:9c:f5:81:75:1d:f7:e0:9f: 5e:d7:2e:68:bb:33:f6:92:74:30:00:89:cf:16:85: 48:1a:5b:44:c2:97:91:c5:cf:a6:2b:3b:0a:6d:03: 05:1d:28:d8:ab:df:ef:65:04:00:f3:90:bc:61:41: 2f:e8:bf:ba:4d:59:01:34:01:15:5b:1f:a4:05:ee: 56:92:93:19:c3:95:8f:89:3b:e0:1e:06:e8:30:16: d9:cb:1e:49:e6:0b:0e:2e:3a:b6:b8:ba:d9:be:cb: 5d:51:bf:b5:bf:99:d6:d7:bc:66:1f:17:75:be:03: b0:c8:70:e7:cd:1c:69:cb:c2:07:72:8a:ba:71:30: 39:43:83:7c:9c:e0:29:e2:07:cb:a2:b1:23:0b:fc: f8:cc:66:48:8f:83:19:da:ad:0a:aa:e6:c8:50:c7: 0e:c9:70:ac:79:53:4c:80:87:66:10:f1:68:59:a1: f3:38:08:42:a3:67:94:50:fe:87:cd:f4:ca:74:13: 35:ae:61:fd:66:40:a8:b4:9d:18:68:37:21:d8:d2: 2b:a0:cc:81:4c:26:9b:3a:7f:c2:44:70:ca:b6:26: a0:8e:8b:46:57:a4:4c:03:37:c3:cd:ec:2b:8e:51: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7F:7C:02:D4:B5:7F:17:50:DE:E9:D9:1C:AE:04:C4:3B:5F:65:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f3b3ebf1-5580-41bc-9e53-08269e715c41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f3b3ebf1-5580-41bc-9e53-08269e715c41/f3b3ebf1-5580-41bc-9e53-08269e715c41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 170.102.0.0-170.102.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:75:5a:71:03:03:e1:d5:47:dc:fa:e5:89:7d:61:e3:a0:64: 72:6f:83:29:49:f2:90:e1:70:3e:c3:f3:1d:cd:e8:75:36:34: ff:58:bf:c6:2d:bf:b8:69:2c:1e:87:a2:f3:7c:92:a4:7b:c6: 0d:e5:0a:93:7d:25:a6:4f:ca:ab:86:b5:90:1d:a6:07:12:f9: f3:e7:b3:e0:0e:e1:8f:43:71:03:f3:5b:64:b5:16:c8:72:8d: 54:1a:20:cf:4a:ea:17:87:32:04:ff:15:0e:23:db:1a:d1:cc: e4:f7:95:53:86:e3:5a:33:23:98:43:82:2b:60:f2:64:b7:43: ab:ef:6e:df:8c:89:53:47:f4:4d:d8:8a:3a:bd:ec:33:78:a0: 3c:99:9b:13:2a:17:ff:62:8a:aa:cd:fc:54:30:21:d7:3e:37: ad:6e:fc:40:23:e0:72:79:af:79:90:cb:60:9c:4e:78:2e:9e: 87:e2:97:11:f0:37:0d:14:7e:3d:a0:16:5f:01:d2:a2:34:02: ed:6e:c6:ab:e2:44:04:77:99:34:81:b1:0e:04:ca:d9:e7:a0: 30:c4:15:06:32:81:2d:dc:03:52:46:c4:38:c9:71:76:cd:66: ef:d9:f2:22:84:80:72:25:b8:4a:39:34:bd:c7:28:1b:4e:b0: 6f:d0:3e:9f -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWEo82I3zW3fUNGAqkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxOTAwNDUzNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk ZjNiM2ViZjEtNTU4MC00MWJjLTllNTMtMDgyNjllNzE1YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Frk151ROeyFjwDFJbXGC5YLzQKnPWBdR33 4J9e1y5ouzP2knQwAInPFoVIGltEwpeRxc+mKzsKbQMFHSjYq9/vZQQA85C8YUEv 6L+6TVkBNAEVWx+kBe5WkpMZw5WPiTvgHgboMBbZyx5J5gsOLjq2uLrZvstdUb+1 v5nW17xmHxd1vgOwyHDnzRxpy8IHcoq6cTA5Q4N8nOAp4gfLorEjC/z4zGZIj4MZ 2q0KqubIUMcOyXCseVNMgIdmEPFoWaHzOAhCo2eUUP6HzfTKdBM1rmH9ZkCotJ0Y aDch2NIroMyBTCabOn/CRHDKtiagjotGV6RMAzfDzewrjlGWdQIDAQABo4IEBjCC BAIwHQYDVR0OBBYEFNB/fALUtX8XUN7p2RyuBMQ7X2UKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m M2IzZWJmMS01NTgwLTQxYmMtOWU1My0wODI2OWU3MTVjNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YzYjNlYmYxLTU1ODAtNDFiYy05 ZTUzLTA4MjY5ZTcxNWM0MS9mM2IzZWJmMS01NTgwLTQxYmMtOWU1My0wODI2OWU3 MTVjNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJgYIKwYBBQUH AQcBAf8EFzAVMBMEAgABMA0wCwMDAapmAwQEqmZgMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAZ1WnEDA+HV R9z65Yl9YeOgZHJvgylJ8pDhcD7D8x3N6HU2NP9Yv8Ytv7hpLB6HovN8kqR7xg3l CpN9JaZPyquGtZAdpgcS+fPns+AO4Y9DcQPzW2S1FshyjVQaIM9K6heHMgT/FQ4j 2xrRzOT3lVOG41ozI5hDgitg8mS3Q6vvbt+MiVNH9E3Yijq97DN4oDyZmxMqF/9i iqrN/FQwIdc+N61u/EAj4HJ5r3mQy2CcTngunofilxHwNw0Ufj2gFl8B0qI0Au1u xqviRAR3mTSBsQ4EytnnoDDEFQYygS3cA1JGxDjJcXbNZu/Z8iKEgHIluEo5NL3H KBtOsG/QPp8= -----END CERTIFICATE-----Generated at Tue Jul 1 22:15:57 2025 by rpki-client