$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer File: 0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer (raw, json) Hash identifier: HMSGYwNZCDGrsIgIQ6QUVFJbSHxuxU/3UgR4QVYlmKs= Subject key identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4D13D20D591F3ACF7E1BF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Jun 2025 20:17:56 +0000 Certificate not after: Mon 27 Sep 2027 20:17:56 +0000 Subordinate resources: IP: 198.202.27.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:13:d2:0d:59:1f:3a:cf:7e:1b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 24 20:17:56 2025 GMT Not After : Sep 27 20:17:56 2027 GMT Subject: CN=0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:14:91:56:15:e7:7d:8f:12:0b:af:00:b8: 8b:c9:0e:0a:ae:4d:ad:ba:2a:d7:6b:d2:e8:31:87: 5e:ac:16:1d:22:9b:3d:8f:d6:68:dc:a3:67:90:98: 46:7c:7d:9c:dc:1e:61:6f:ed:a8:d0:23:d3:26:fc: 9e:20:a0:8f:fa:83:36:a9:be:2d:1f:96:1d:98:d6: 54:eb:bd:aa:5d:f0:e4:e0:44:10:a4:7c:9a:fd:0b: cf:be:d7:81:63:b2:ed:95:53:ad:19:45:89:2b:c6: 9c:bf:f0:6b:3a:e2:5b:09:fa:d3:98:41:b5:04:e0: 0a:43:4d:a9:dc:fc:07:03:8d:54:8f:ba:25:ba:8a: 4e:a4:bc:6b:b0:bb:dd:cd:4a:04:e5:e1:89:15:c3: 0d:87:fb:ff:f9:f8:f6:b9:cc:6e:d6:f2:e3:da:cb: 56:62:fd:0f:d8:4d:23:eb:1b:bf:01:bd:c8:a2:fe: 00:9b:1b:d3:a5:de:5b:22:df:89:f5:e8:c7:b9:53: 8a:10:0d:ab:ed:7e:45:b2:2d:8c:ef:ff:4d:00:21: 15:05:12:bb:3f:04:54:93:ea:75:4d:26:01:6f:f9: 9b:00:0c:e7:38:de:75:9f:4e:85:c7:e4:7c:93:f7: fa:e9:47:92:e8:ff:c9:ac:dc:f6:9a:31:e2:79:af: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3b:4f:02:89:a6:8b:27:d3:56:85:f2:50:e3:88:60:63:b5: 5b:de:b2:65:21:4b:ce:2d:d2:4a:cf:d3:4c:e8:fd:b7:53:b9: 02:86:da:55:33:42:5a:96:57:8a:f0:f9:ba:52:be:33:b2:13: 78:3e:c0:40:2f:5d:87:8b:bf:cf:c0:0c:0f:72:1f:cb:0b:c0: b3:34:48:bc:15:49:c3:15:63:9c:cf:7d:4b:4b:25:12:d0:b7: 9c:7f:12:dd:c3:e1:a4:43:20:ba:af:f6:8d:61:1f:7e:39:0e: f1:40:68:fe:01:87:a1:27:e2:6d:35:fc:17:58:fc:12:28:db: 04:08:c2:e1:fc:e3:6a:f0:6e:7a:eb:a5:c5:06:df:37:68:5d: 9d:35:31:1e:01:50:5e:72:66:93:4f:a2:c1:43:1a:fc:a3:51: 21:e2:4f:51:12:eb:9b:ce:24:43:8b:00:cd:f5:29:d2:d3:8e: 3d:b3:6a:e9:dd:59:95:fe:32:01:60:b9:ec:d7:6b:5e:ac:32: 4e:28:74:4d:81:35:cd:a4:94:d1:98:db:71:f3:ca:25:31:a5: 11:27:69:a6:4c:09:74:79:74:aa:1a:d0:09:01:43:dc:cc:f3: 31:a0:a8:4d:cd:7b:3a:5e:76:4c:c5:1b:06:b7:0c:f7:f5:08: 9e:a1:b7:f8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpNE9INWR86z34b9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNDIwMTc1NloXDTI3MDkyNzIwMTc1NlowLzEtMCsGA1UEAxMk MGRiZTlkMmItODBiNi00MmUxLWFiYzctZWQ2YjZkZjZiY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uAUkVYV532PEguvALiLyQ4Krk2tuirXa9Lo MYderBYdIps9j9Zo3KNnkJhGfH2c3B5hb+2o0CPTJvyeIKCP+oM2qb4tH5YdmNZU 672qXfDk4EQQpHya/QvPvteBY7LtlVOtGUWJK8acv/BrOuJbCfrTmEG1BOAKQ02p 3PwHA41Uj7oluopOpLxrsLvdzUoE5eGJFcMNh/v/+fj2ucxu1vLj2stWYv0P2E0j 6xu/Ab3Iov4AmxvTpd5bIt+J9ejHuVOKEA2r7X5Fsi2M7/9NACEVBRK7PwRUk+p1 TSYBb/mbAAznON51n06Fx+R8k/f66UeS6P/JrNz2mjHiea9yxQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFM0SOUZKFc2oizfoFq8UcgnVICsyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w ZGJlOWQyYi04MGI2LTQyZTEtYWJjNy1lZDZiNmRmNmJjZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBkYmU5ZDJiLTgwYjYtNDJlMS1h YmM3LWVkNmI2ZGY2YmNlZi8wZGJlOWQyYi04MGI2LTQyZTEtYWJjNy1lZDZiNmRm NmJjZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGyhswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADztPAommiyfTVoXyUOOI YGO1W96yZSFLzi3SSs/TTOj9t1O5AobaVTNCWpZXivD5ulK+M7ITeD7AQC9dh4u/ z8AMD3IfywvAszRIvBVJwxVjnM99S0slEtC3nH8S3cPhpEMguq/2jWEffjkO8UBo /gGHoSfibTX8F1j8EijbBAjC4fzjavBueuulxQbfN2hdnTUxHgFQXnJmk0+iwUMa /KNRIeJPURLrm84kQ4sAzfUp0tOOPbNq6d1Zlf4yAWC57NdrXqwyTih0TYE1zaSU 0ZjbcfPKJTGlESdppkwJdHl0qhrQCQFD3MzzMaCoTc17Ol52TMUbBrcM9/UInqG3 +A== -----END CERTIFICATE-----Generated at Mon Jun 30 17:16:14 2025 by rpki-client