$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer File: 6be678b8-74cc-4a67-8700-5a07f5c20f62.cer (raw, json) Hash identifier: +u8/rOIb2jrmt6h3R9s+n9V/wyygSJuvPCqU8idrcGo= Subject key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A3478803840B59CD364E5FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: IP: 204.81.0.0 -- 204.82.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:80:38:40:b5:9c:d3:64:e5:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:c7:0d:4a:3d:84:af:c2:bf:d9:f1:d8:9c: 3c:26:8c:a6:f6:ce:47:30:d8:db:e6:ab:a2:80:4b: de:86:04:e9:46:00:09:cd:11:cf:3d:93:36:46:15: a1:d4:e5:b2:a4:6e:f3:12:d2:81:b4:65:cf:2b:1d: d6:42:63:3f:89:ab:b6:6f:b0:69:f1:15:36:68:9d: 86:c7:2f:57:c2:73:ad:22:68:8a:c1:b3:9d:a9:a0: cd:55:6d:bf:01:1f:f9:f3:eb:81:e9:ae:09:30:a3: 23:0d:34:20:32:c3:39:7f:5b:c0:cf:98:a7:68:93: 68:b0:70:7d:11:32:84:58:73:cc:5f:01:fa:18:c3: ec:a7:dd:04:59:3a:0b:fa:c6:bf:5e:6f:9f:ac:84: 9b:75:5f:80:74:5c:d1:5d:18:46:0f:75:d0:b7:7b: 6d:10:c1:8e:85:1f:9b:58:7f:42:67:84:1c:e6:b8: 74:ef:62:2a:c5:d2:95:b8:7b:b4:76:c5:88:ea:34: fd:a7:7e:24:3c:42:d1:d3:25:d2:1c:11:1c:96:d8: 4f:09:b9:83:99:92:9d:40:06:17:6c:46:31:9f:dd: f9:8a:62:ba:40:5f:04:a3:3c:47:00:04:49:eb:1c: 59:13:d8:68:03:be:74:68:78:dd:94:c5:99:bf:91: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.81.0.0-204.82.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ca:8d:19:dc:a5:1e:fc:26:4a:42:3d:6b:6d:fa:ed:4f:09: fb:7c:da:cb:0f:06:82:a2:b3:db:3c:52:d6:af:59:fd:14:11: 06:fc:e7:25:65:96:e1:ac:aa:21:89:0e:20:86:a8:6c:aa:ec: 54:d5:da:e4:af:49:4b:9c:b8:c1:8c:07:c3:ca:d3:5f:a1:2a: 94:1d:c6:c4:3a:80:c5:36:39:f9:17:71:97:07:de:a4:61:e0: df:80:17:30:46:20:bc:bf:7a:15:ce:e0:54:14:24:01:1f:f8: e8:ea:3a:31:85:35:5c:5a:44:d4:80:94:63:08:1b:a9:7b:8e: 18:af:37:66:1e:f8:5f:d5:92:72:74:c4:0f:f5:9c:25:71:eb: 72:46:2d:68:12:23:68:f1:bf:1f:df:90:e0:c8:d7:3c:25:8c: 8c:8e:94:44:77:c1:c2:50:6f:13:14:93:fd:8e:49:24:12:d4: c9:b7:a9:4b:3f:3c:bc:18:1f:cf:00:c9:55:54:e1:b8:ec:23: 2e:2b:76:b5:b2:ad:20:9d:d8:45:f1:15:5b:c3:dc:d0:ad:3d: 12:a9:95:b9:f4:d5:2b:86:9f:40:e9:5b:ed:ad:8f:21:50:d6: e9:0d:78:24:31:47:c5:f5:dc:05:cf:b6:0a:d3:66:ce:d4:3b: 59:3d:96:5e -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEo0eIA4QLWc02Tl/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk NmJlNjc4YjgtNzRjYy00YTY3LTg3MDAtNWEwN2Y1YzIwZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXHDUo9hK/Cv9nx2Jw8Joym9s5HMNjb5qui gEvehgTpRgAJzRHPPZM2RhWh1OWypG7zEtKBtGXPKx3WQmM/iau2b7Bp8RU2aJ2G xy9XwnOtImiKwbOdqaDNVW2/AR/58+uB6a4JMKMjDTQgMsM5f1vAz5inaJNosHB9 ETKEWHPMXwH6GMPsp90EWToL+sa/Xm+frISbdV+AdFzRXRhGD3XQt3ttEMGOhR+b WH9CZ4Qc5rh072IqxdKVuHu0dsWI6jT9p34kPELR0yXSHBEclthPCbmDmZKdQAYX bEYxn935imK6QF8EozxHAARJ6xxZE9hoA750aHjdlMWZv5HiPQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAcVodgpC+FiU3b0DDvjRIXujNGKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVjMjBmNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZiZTY3OGI4LTc0Y2MtNGE2Ny04 NzAwLTVhMDdmNWMyMGY2Mi82YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVj MjBmNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwwCgMDAMxRAwMAzFIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANMqNGdylHvwm SkI9a2367U8J+3zayw8GgqKz2zxS1q9Z/RQRBvznJWWW4ayqIYkOIIaobKrsVNXa 5K9JS5y4wYwHw8rTX6EqlB3GxDqAxTY5+RdxlwfepGHg34AXMEYgvL96Fc7gVBQk AR/46Oo6MYU1XFpE1ICUYwgbqXuOGK83Zh74X9WScnTED/WcJXHrckYtaBIjaPG/ H9+Q4MjXPCWMjI6URHfBwlBvExST/Y5JJBLUybepSz88vBgfzwDJVVThuOwjLit2 tbKtIJ3YRfEVW8Pc0K09EqmVufTVK4afQOlb7a2PIVDW6Q14JDFHxfXcBc+2CtNm ztQ7WT2WXg== -----END CERTIFICATE-----Generated at Sun Jun 29 13:22:20 2025 by rpki-client