$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer File: ee9986fc-001f-49c5-949c-333fec29fe66.cer (raw, json) Hash identifier: J4pIa4q/JQcEATMF5or2Q9RS/RcRCcYXLwMOQq84QFA= Subject key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4A036A83F2F39EC273E027F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Jun 2025 17:57:28 +0000 Certificate not after: Sun 26 Sep 2027 17:57:28 +0000 Subordinate resources: IP: 170.170.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:03:6a:83:f2:f3:9e:c2:73:e0:27:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 23 17:57:28 2025 GMT Not After : Sep 26 17:57:28 2027 GMT Subject: CN=ee9986fc-001f-49c5-949c-333fec29fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:49:d5:e3:ef:7d:8a:aa:e0:f4:b5:a2:ba: 29:8a:e5:6d:0e:c2:ac:4a:cc:fa:31:0a:06:8f:21: 40:c9:24:8f:c2:b1:f4:5a:d8:08:88:71:46:65:3b: f2:97:96:de:05:a4:99:e6:61:aa:46:1a:02:d2:7d: dd:79:7e:f9:09:f1:65:3c:19:58:17:ec:11:ef:ad: 11:d4:0b:a3:b1:c1:80:51:b1:be:3e:da:6b:6b:16: 45:20:93:67:e1:10:43:d4:b0:12:96:e0:15:59:1e: 6f:dc:53:89:b6:25:2a:bd:ba:01:db:43:76:5e:88: 54:36:69:43:e0:d8:24:45:ef:a7:8b:99:e3:c2:2b: 12:55:e0:dc:ba:63:e2:59:63:88:11:66:b5:c1:86: 03:66:21:0d:ff:90:36:b3:5a:dc:97:5c:a3:3c:bf: 15:e2:c4:9c:6a:eb:69:46:98:c3:7b:ae:66:52:db: 96:dc:0e:c3:c6:a2:d8:29:8b:12:bb:0e:d8:43:ff: 3c:2b:28:a7:2d:bd:33:85:3e:9b:d7:e7:e9:82:bf: 26:ed:e5:6d:b8:df:33:bd:cc:12:78:75:f8:c4:ca: a0:5d:87:f8:eb:13:ac:1a:8c:dd:fd:4d:e6:b6:05: a3:3a:e5:7b:87:d9:7f:5f:95:a3:d8:dd:19:17:b9: da:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 170.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6f:fc:5e:ac:a0:31:93:a1:45:73:f4:36:42:43:67:1f:da: dd:cf:80:e6:0a:b5:93:f4:79:e6:44:8d:82:4d:eb:13:87:49: f3:27:5f:32:09:ec:c4:98:81:d7:93:0f:89:3a:f3:00:fa:ba: a9:40:c6:dd:09:46:46:06:c1:5f:64:b5:65:66:f7:51:26:da: 4b:e5:7a:f3:56:3e:3e:09:46:fe:e5:c6:df:1a:ff:0b:5b:2f: 86:30:4d:2f:82:b2:cd:f3:cb:b1:65:3e:cc:21:b7:fa:f1:33: a3:da:ff:cc:de:95:a6:d2:cb:e7:b7:2e:6a:ee:d7:af:08:a4: 79:1e:32:ee:35:f8:6b:d0:4a:06:70:ca:2e:9e:43:ae:0f:8f: 3d:51:f3:b3:0a:d4:b8:70:97:a3:46:07:25:0e:e8:34:ce:7d: 9d:6b:70:69:46:f5:64:77:ce:46:0b:52:47:bf:82:3d:52:1d: 89:32:08:a4:3f:96:2d:eb:fd:1f:14:1e:eb:8d:e1:be:82:92: 1b:0d:23:ab:16:cd:6b:4b:5a:93:51:af:f3:4c:59:9c:0a:b6: 15:3d:ea:2b:07:fa:8e:e3:a0:ff:1b:35:a7:3b:1e:9d:c8:bb: b8:c0:7d:a4:cd:f0:c1:47:4d:28:c5:dc:32:25:60:0f:c2:a3: f2:07:4d:5b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEpKA2qD8vOewnPgJ/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyMzE3NTcyOFoXDTI3MDkyNjE3NTcyOFowLzEtMCsGA1UEAxMk ZWU5OTg2ZmMtMDAxZi00OWM1LTk0OWMtMzMzZmVjMjlmZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmZJ1ePvfYqq4PS1oropiuVtDsKsSsz6MQoG jyFAySSPwrH0WtgIiHFGZTvyl5beBaSZ5mGqRhoC0n3deX75CfFlPBlYF+wR760R 1AujscGAUbG+PtpraxZFIJNn4RBD1LASluAVWR5v3FOJtiUqvboB20N2XohUNmlD 4NgkRe+ni5njwisSVeDcumPiWWOIEWa1wYYDZiEN/5A2s1rcl1yjPL8V4sScautp RpjDe65mUtuW3A7DxqLYKYsSuw7YQ/88KyinLb0zhT6b1+fpgr8m7eVtuN8zvcwS eHX4xMqgXYf46xOsGozd/U3mtgWjOuV7h9l/X5Wj2N0ZF7naWwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCxqk05YGDfrCSQ9/Jok0Do2qVl4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l ZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMyOWZlNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VlOTk4NmZjLTAwMWYtNDljNS05 NDljLTMzM2ZlYzI5ZmU2Ni9lZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMy OWZlNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLb/xerKAxk6FFc/Q2QkNn H9rdz4DmCrWT9HnmRI2CTesTh0nzJ18yCezEmIHXkw+JOvMA+rqpQMbdCUZGBsFf ZLVlZvdRJtpL5XrzVj4+CUb+5cbfGv8LWy+GME0vgrLN88uxZT7MIbf68TOj2v/M 3pWm0svnty5q7tevCKR5HjLuNfhr0EoGcMounkOuD489UfOzCtS4cJejRgclDug0 zn2da3BpRvVkd85GC1JHv4I9Uh2JMgikP5Yt6/0fFB7rjeG+gpIbDSOrFs1rS1qT Ua/zTFmcCrYVPeorB/qO46D/GzWnOx6dyLu4wH2kzfDBR00oxdwyJWAPwqPyB01b -----END CERTIFICATE-----Generated at Wed Jul 2 01:25:24 2025 by rpki-client