$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer File: e751f735-1712-4284-af50-5bd135a0234b.cer (raw, json) Hash identifier: 5Uaj5Nl/iWvzyH+fS8IHOG9xOkaOB+ow4rN0BRf/JWw= Subject key identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A41CC20B3E44D2870A2009D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 19:19:36 +0000 Certificate not after: Thu 23 Sep 2027 19:19:36 +0000 Subordinate resources: IP: 104.204.254.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:cc:20:b3:e4:4d:28:70:a2:00:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 20 19:19:36 2025 GMT Not After : Sep 23 19:19:36 2027 GMT Subject: CN=e751f735-1712-4284-af50-5bd135a0234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:dc:a2:de:96:7c:32:1a:84:9f:e1:46:99: bb:40:7f:e1:fb:77:fc:69:ef:fc:b1:40:04:58:d9: b2:13:8a:4c:da:aa:36:ba:68:5f:80:a7:12:b9:30: f9:6a:13:19:34:c3:96:1e:56:a0:11:d7:35:5f:62: 81:57:3f:f7:4b:20:cc:9b:dc:f5:02:7c:52:7c:f7: 33:1d:71:7e:1e:d0:32:f1:a4:5d:75:3a:43:99:29: e6:5d:1a:38:47:d3:8b:66:87:58:c4:6c:c3:66:fb: 5c:89:07:06:f9:a5:13:41:ff:52:80:25:26:2d:cb: df:17:22:27:17:fb:7b:33:71:53:9f:42:6a:6b:b6: c1:13:18:b3:e6:b1:66:16:90:5f:b0:60:1b:0e:6a: b6:d0:12:c5:76:9f:f9:14:57:1f:d8:3b:1c:be:d8: d3:f0:95:66:76:4c:66:5c:9f:33:40:ab:a8:d8:d3: f0:93:e6:77:be:68:1f:62:d8:97:d7:83:0b:a1:22: 17:25:95:41:6c:5b:93:8b:13:66:66:dd:f6:c5:d1: 2b:0e:ee:24:e0:f7:fb:55:d0:c0:ed:cd:97:61:a3: 43:ad:ad:e8:ae:55:6a:28:fc:9d:00:38:5e:de:0d: 47:e8:a5:76:51:46:63:0f:49:6b:6e:5a:57:5f:e8: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.204.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6f:45:d4:1c:4d:6f:45:87:ec:c3:dc:27:35:0c:77:1e:7f: 36:55:b9:06:cd:7d:eb:ee:96:05:64:db:45:fc:c8:77:7a:03: 3e:be:f8:02:30:00:cb:ab:25:55:ae:07:63:48:2e:ee:6c:07: a4:38:52:9e:c5:a6:be:2d:4f:e8:ee:e4:96:f7:18:a5:a8:3f: 28:b2:86:e7:7c:83:46:03:a9:cc:f2:61:6e:c4:fa:ec:b3:71: 1d:ec:25:6e:c5:00:10:22:aa:cf:86:ce:c1:f0:63:70:37:e6: e5:59:2a:bc:9f:f9:f9:ed:67:ce:63:d2:3b:15:3e:4d:62:0b: 79:6d:79:04:9b:99:99:74:ec:75:f9:e9:18:0c:d5:66:98:57: 21:33:64:5c:99:c7:81:54:32:bc:9a:a8:6a:b8:3d:1a:c1:11: 0d:ff:dd:fe:be:bc:75:f5:a1:63:67:86:36:82:cd:58:34:1d: 98:ea:c5:a0:b1:76:5d:56:b1:c8:cd:7d:b2:e6:de:58:8c:d9: a1:43:de:91:69:c2:a2:45:ba:76:8a:17:e9:37:76:d1:4b:7d: cb:fa:d9:08:97:45:ba:f6:4a:9b:a1:d9:2c:97:2e:62:6d:61: 91:6e:59:f6:cf:5c:0f:d8:ba:29:8a:e8:ac:65:53:69:74:d4: 35:fa:7e:fe -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpBzCCz5E0ocKIAnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDYyMDE5MTkzNloXDTI3MDkyMzE5MTkzNlowLzEtMCsGA1UEAxMk ZTc1MWY3MzUtMTcxMi00Mjg0LWFmNTAtNWJkMTM1YTAyMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Pcot6WfDIahJ/hRpm7QH/h+3f8ae/8sUAE WNmyE4pM2qo2umhfgKcSuTD5ahMZNMOWHlagEdc1X2KBVz/3SyDMm9z1AnxSfPcz HXF+HtAy8aRddTpDmSnmXRo4R9OLZodYxGzDZvtciQcG+aUTQf9SgCUmLcvfFyIn F/t7M3FTn0Jqa7bBExiz5rFmFpBfsGAbDmq20BLFdp/5FFcf2DscvtjT8JVmdkxm XJ8zQKuo2NPwk+Z3vmgfYtiX14MLoSIXJZVBbFuTixNmZt32xdErDu4k4Pf7VdDA 7c2XYaNDra3orlVqKPydADhe3g1H6KV2UUZjD0lrblpXX+h8tQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMZciti4sk5MHMNUXC/RY89AaLkkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l NzUxZjczNS0xNzEyLTQyODQtYWY1MC01YmQxMzVhMDIzNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2U3NTFmNzM1LTE3MTItNDI4NC1h ZjUwLTViZDEzNWEwMjM0Yi9lNzUxZjczNS0xNzEyLTQyODQtYWY1MC01YmQxMzVh MDIzNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABozP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH29F1BxNb0WH7MPcJzUM dx5/NlW5Bs196+6WBWTbRfzId3oDPr74AjAAy6slVa4HY0gu7mwHpDhSnsWmvi1P 6O7klvcYpag/KLKG53yDRgOpzPJhbsT67LNxHewlbsUAECKqz4bOwfBjcDfm5Vkq vJ/5+e1nzmPSOxU+TWILeW15BJuZmXTsdfnpGAzVZphXITNkXJnHgVQyvJqoarg9 GsERDf/d/r68dfWhY2eGNoLNWDQdmOrFoLF2XVaxyM19subeWIzZoUPekWnCokW6 dooX6Td20Ut9y/rZCJdFuvZKm6HZLJcuYm1hkW5Z9s9cD9i6KYrorGVTaXTUNfp+ /g== -----END CERTIFICATE-----Generated at Sun Jun 29 14:33:14 2025 by rpki-client