$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer File: a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer (raw, json) Hash identifier: C79yAHOfZD4ddtz9D3LblEhaBUkRjQKnyIDMLKX8Mog= Subject key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A4D98AA88F87758A272FDA300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 138.129.16.0 -- 138.129.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:aa:88:f8:77:58:a2:72:fd:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:62:80:a1:c5:97:d5:81:6a:24:f2:6d:8e: 52:af:90:23:b6:74:35:6e:fb:4e:4c:23:74:82:6d: eb:23:d3:e1:58:af:96:b4:c5:fe:61:ff:ca:bd:6c: d9:a6:c7:43:ce:72:12:a7:85:8d:3f:f2:2f:38:c3: 88:10:ca:c5:9c:fc:8c:68:bc:35:ec:fe:3a:af:9e: 6e:b2:38:30:c0:59:37:ef:2b:8f:e7:c5:63:0f:41: 98:4b:56:62:33:ec:93:ef:e3:bd:f7:9f:91:09:87: 04:62:24:39:80:a1:c5:10:b1:a4:7c:46:ce:0c:3e: d7:ef:24:98:99:9d:da:c8:c2:8e:49:cb:15:cf:7f: 29:53:4e:ad:62:39:2f:13:ef:4d:c9:5e:6a:5a:d9: 8c:68:f0:44:4b:15:ef:7c:86:54:36:95:5b:5e:9d: 3e:f4:27:ce:0e:76:41:13:55:9f:08:c0:6a:15:b5: 3e:24:7f:90:6c:97:44:9a:17:9f:f7:28:43:cd:7e: f3:e2:5c:0c:c5:d4:c1:85:e5:c7:e3:70:29:53:c7: 40:9f:3e:99:29:e3:a8:d3:2c:ad:17:22:cf:6a:09: ef:25:30:7e:a0:1b:db:1f:d0:02:d1:37:27:c4:ee: 1a:67:99:24:05:b5:e1:32:51:12:75:91:d3:26:dc: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 138.129.16.0-138.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b4:b6:0a:f8:0e:dc:c6:2b:fa:27:ae:a5:55:c2:ca:72:9b: 4c:60:58:6d:13:5e:84:5d:db:4e:45:ac:41:d0:17:d3:e0:30: 05:59:bc:ab:66:50:d9:9e:39:5d:de:fc:2e:23:31:d8:f5:27: 24:c4:c4:38:8e:25:97:38:d2:db:dc:80:e6:a0:1f:08:d7:1d: 61:49:2f:8d:ba:a8:91:31:09:fd:f3:9e:28:3c:00:55:c1:81: ad:53:46:33:c5:85:96:ef:43:d9:a4:f3:22:01:44:50:87:4c: 93:c9:48:a5:7a:c7:dc:95:2e:ed:28:0b:03:a4:21:db:ea:16: e0:cf:e6:23:68:85:ce:4b:11:b9:90:f9:0b:fa:a8:ce:12:b4: 16:3f:48:7c:46:8d:ae:0f:c7:12:d3:1d:32:a4:45:ac:ff:90: 66:e4:79:2a:b7:6c:19:6b:30:b5:36:25:bd:20:97:48:ad:9b: 63:db:81:74:26:83:80:e7:d6:73:1a:6a:d3:fe:71:35:8a:4a: 53:3f:ca:82:2b:73:c6:99:9c:b1:38:00:da:ff:42:d5:af:03: 63:7b:fe:93:0d:d5:f8:86:7c:51:57:eb:06:f9:87:c8:3e:8d: 37:10:2d:50:cd:30:dc:d6:53:e2:e5:d4:db:e3:48:70:bb:01: 0a:59:d4:16 -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWEpNmKqI+HdYonL9owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk YTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgxMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+BigKHFl9WBaiTybY5Sr5AjtnQ1bvtOTCN0 gm3rI9PhWK+WtMX+Yf/KvWzZpsdDznISp4WNP/IvOMOIEMrFnPyMaLw17P46r55u sjgwwFk37yuP58VjD0GYS1ZiM+yT7+O995+RCYcEYiQ5gKHFELGkfEbODD7X7ySY mZ3ayMKOScsVz38pU06tYjkvE+9NyV5qWtmMaPBESxXvfIZUNpVbXp0+9CfODnZB E1WfCMBqFbU+JH+QbJdEmhef9yhDzX7z4lwMxdTBheXH43ApU8dAnz6ZKeOo0yyt FyLPagnvJTB+oBvbH9AC0TcnxO4aZ5kkBbXhMlESdZHTJtw5NQIDAQABo4IEBjCC BAIwHQYDVR0OBBYEFCXOW9bSKmxT+Zcl9pdh1vnGsuiHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h NjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E2MmFlZWY4LWIzNWItNGNhNi1i N2EzLTkzYmUxYTE4MTMzOC9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWEx ODEzMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJgYIKwYBBQUH AQcBAf8EFzAVMBMEAgABMA0wCwMEBIqBEAMDAYqAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAG0tgr4DtzG K/onrqVVwspym0xgWG0TXoRd205FrEHQF9PgMAVZvKtmUNmeOV3e/C4jMdj1JyTE xDiOJZc40tvcgOagHwjXHWFJL426qJExCf3znig8AFXBga1TRjPFhZbvQ9mk8yIB RFCHTJPJSKV6x9yVLu0oCwOkIdvqFuDP5iNohc5LEbmQ+Qv6qM4StBY/SHxGja4P xxLTHTKkRaz/kGbkeSq3bBlrMLU2Jb0gl0itm2PbgXQmg4Dn1nMaatP+cTWKSlM/ yoIrc8aZnLE4ANr/QtWvA2N7/pMN1fiGfFFX6wb5h8g+jTcQLVDNMNzWU+Ll1Nvj SHC7AQpZ1BY= -----END CERTIFICATE-----Generated at Sun Jun 29 14:31:04 2025 by rpki-client