$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9.cer File: 7d8919a2-53bd-40db-a4f8-099f622423b9.cer (raw, json) Hash identifier: bhF+fkQ56KKa6cif362hpi5fik5ZNYRrzWmfU4GNqQU= Subject key identifier: 59:3A:5A:86:CA:D3:89:08:5C:7A:97:45:99:1C:42:B0:80:10:DB:A1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A552EB2C03977670BE9C9F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/7d8919a2-53bd-40db-a4f8-099f622423b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Jun 2025 17:58:34 +0000 Certificate not after: Thu 30 Sep 2027 17:58:34 +0000 Subordinate resources: IP: 66.84.82.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:55:2e:b2:c0:39:77:67:0b:e9:c9:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 27 17:58:34 2025 GMT Not After : Sep 30 17:58:34 2027 GMT Subject: CN=7d8919a2-53bd-40db-a4f8-099f622423b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:02:a6:2d:f1:75:4b:94:18:f4:aa:ba:c8: 28:3c:f2:a8:bd:60:8d:ae:51:fd:a8:b6:c1:cb:d4: ce:7b:81:25:31:ac:0a:f0:60:2c:06:71:16:40:61: a2:93:96:8e:8b:0f:5d:62:1e:d3:73:ab:9e:6a:4f: bd:55:43:f7:90:3b:c5:89:f9:9e:7c:7a:c8:4f:77: 3c:2b:70:04:d8:d8:2d:5e:52:ee:7e:0b:27:2b:e1: 28:2c:ce:a0:2c:32:3a:1c:ef:ed:b0:ee:4f:23:ab: 48:c4:1e:3e:16:a5:fb:a3:32:07:24:ba:9b:92:02: 20:04:75:88:22:a8:e2:d2:b8:d1:ef:43:4e:2c:ac: 9c:87:a6:30:17:01:73:1c:5a:98:96:0a:1c:98:d3: da:f4:a6:5e:78:dc:8d:7f:8e:0f:c2:04:17:13:1a: 0e:22:16:ee:fa:2c:95:f9:72:18:43:42:9d:d1:fe: 43:c1:8f:4f:56:2a:2c:a3:e0:38:b3:88:c1:59:b7: ac:3b:4b:a2:55:f8:7c:80:6b:38:db:e1:e3:21:f4: 1e:5d:63:e2:39:81:cd:9a:b7:a3:a0:81:35:2b:c4: 7a:c5:c7:93:e1:eb:23:e2:0b:7c:a0:89:c9:4c:25: cd:8c:5e:aa:50:40:ce:34:8f:76:87:e5:cc:95:7b: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:5A:86:CA:D3:89:08:5C:7A:97:45:99:1C:42:B0:80:10:DB:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/7d8919a2-53bd-40db-a4f8-099f622423b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8b:63:bc:f7:cc:dd:9a:a6:70:79:3b:f8:43:51:62:00:fd: 33:d6:52:ef:fb:19:d7:0f:64:aa:eb:d5:f9:b4:cb:d6:f6:1e: f0:c2:ce:fe:03:eb:81:90:d9:dc:b6:51:f9:47:bc:60:c6:24: d0:5e:d5:97:f4:3b:3d:96:93:dd:91:14:3d:b7:da:61:a5:3f: 09:e4:db:77:0d:1a:c5:73:7c:46:d0:78:14:2e:2d:2b:8b:b8: 9b:59:85:95:02:7c:21:42:16:a1:05:3a:c7:4d:7d:54:e6:67: 12:37:5c:2a:65:98:73:70:b2:71:0e:9a:2f:38:b5:85:6b:e7: af:4d:88:15:a3:2b:3c:0a:7c:0c:2a:ba:13:86:6f:7e:a5:c3: 09:54:4a:19:e7:f4:0a:54:36:2e:60:96:3d:14:10:22:19:20: c9:80:70:c3:ad:e4:2f:1c:29:2f:94:3f:a7:78:f8:c2:99:d6: 88:21:58:f2:19:28:68:57:d2:bf:e5:88:10:47:01:76:94:bc: 33:0c:87:f8:00:9c:3a:59:c2:80:20:b3:8f:56:7f:11:fe:49: 39:6d:3f:c9:74:a0:bf:8e:c9:6c:c6:35:d3:c2:eb:22:44:38: 66:ed:9b:63:d8:07:b1:c3:88:01:b7:e8:56:e5:78:0b:7f:72: 1d:25:e9:b3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpVLrLAOXdnC+nJ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNzE3NTgzNFoXDTI3MDkzMDE3NTgzNFowLzEtMCsGA1UEAxMk N2Q4OTE5YTItNTNiZC00MGRiLWE0ZjgtMDk5ZjYyMjQyM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQcCpi3xdUuUGPSqusgoPPKovWCNrlH9qLbB y9TOe4ElMawK8GAsBnEWQGGik5aOiw9dYh7Tc6ueak+9VUP3kDvFifmefHrIT3c8 K3AE2NgtXlLufgsnK+EoLM6gLDI6HO/tsO5PI6tIxB4+FqX7ozIHJLqbkgIgBHWI Iqji0rjR70NOLKych6YwFwFzHFqYlgocmNPa9KZeeNyNf44PwgQXExoOIhbu+iyV +XIYQ0Kd0f5DwY9PVioso+A4s4jBWbesO0uiVfh8gGs42+HjIfQeXWPiOYHNmrej oIE1K8R6xceT4esj4gt8oInJTCXNjF6qUEDONI92h+XMlXtjLQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFk6WobK04kIXHqXRZkcQrCAENuhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 ZDg5MTlhMi01M2JkLTQwZGItYTRmOC0wOTlmNjIyNDIzYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzdkODkxOWEyLTUzYmQtNDBkYi1h NGY4LTA5OWY2MjI0MjNiOS83ZDg5MTlhMi01M2JkLTQwZGItYTRmOC0wOTlmNjIy NDIzYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABCVFIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA4tjvPfM3ZqmcHk7+ENR YgD9M9ZS7/sZ1w9kquvV+bTL1vYe8MLO/gPrgZDZ3LZR+Ue8YMYk0F7Vl/Q7PZaT 3ZEUPbfaYaU/CeTbdw0axXN8RtB4FC4tK4u4m1mFlQJ8IUIWoQU6x019VOZnEjdc KmWYc3CycQ6aLzi1hWvnr02IFaMrPAp8DCq6E4ZvfqXDCVRKGef0ClQ2LmCWPRQQ IhkgyYBww63kLxwpL5Q/p3j4wpnWiCFY8hkoaFfSv+WIEEcBdpS8MwyH+ACcOlnC gCCzj1Z/Ef5JOW0/yXSgv47JbMY108LrIkQ4Zu2bY9gHscOIAbfoVuV4C39yHSXp sw== -----END CERTIFICATE-----Generated at Mon Jun 30 09:51:53 2025 by rpki-client