$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer File: 825ee845-e910-434b-9fb6-239bbc2774f6.cer (raw, json) Hash identifier: ol1UG8zyJ8xTf6KncZkKTeUTJYth4kyJwg5+0wEG0M8= Subject key identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A4538A161504D3B37F9AA0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 140.192.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:a1:61:50:4d:3b:37:f9:aa:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=825ee845-e910-434b-9fb6-239bbc2774f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:ad:45:a0:bd:9e:4d:f3:2a:89:10:fb:6f: 78:cf:36:cf:16:b8:26:1c:6a:9d:a0:72:9a:5a:46: 59:cf:ab:9d:b6:4a:a3:c2:3c:ce:3c:eb:f5:dc:0b: 7e:d4:8c:65:cc:86:f5:d7:37:13:b0:da:cb:e9:57: db:6c:ee:e2:df:8c:cf:cc:35:b3:51:b8:82:f4:a0: e3:6b:c0:46:d2:f7:e8:bc:42:7b:b7:31:a2:1f:8d: 3c:c2:b8:e2:92:3b:ed:61:48:a2:db:a3:d9:71:67: 1c:10:4d:29:37:a0:16:02:25:06:6a:f0:f1:7f:28: e0:4c:b2:db:97:c1:44:75:26:83:df:62:1a:36:2b: 11:de:da:c3:ce:a7:53:1c:3f:9a:3e:d8:87:d6:e3: ce:7c:48:6b:f3:bf:3d:56:5f:37:a0:2c:0c:71:e4: ab:ca:8d:07:56:21:be:fd:5f:d2:2b:32:81:b0:0f: 4b:40:a0:69:96:2a:61:97:a8:03:72:eb:74:62:82: 7d:f3:6a:72:70:ef:58:b4:ff:93:0a:30:c3:d3:18: 5d:32:36:71:cb:f9:eb:03:7b:b9:12:7d:d3:79:da: 95:fb:0b:db:c6:eb:69:41:f4:b2:a5:b8:7c:85:d3: 0a:7f:39:34:be:93:a2:e1:9e:8c:b0:23:f1:fe:31: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 140.192.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:61:e2:c7:0d:28:4a:b3:67:fe:79:4f:af:39:4b:5f:4f:e8: cb:87:ff:50:87:3b:d3:4b:80:46:dc:e3:09:6a:a0:b4:31:6c: cb:8d:de:f8:67:b3:7b:f0:25:f6:9e:fb:fa:08:67:6e:3c:49: d5:01:82:27:ee:b6:4e:ed:d9:5e:d2:68:5d:5a:77:56:fe:22: 01:0a:92:73:a1:dd:80:28:09:25:f8:30:89:16:c8:49:2b:1c: 5e:a0:39:b2:f3:49:66:32:59:bc:a0:25:16:3b:9c:9c:30:e9: c3:cf:17:31:a8:d8:65:c4:d3:67:d1:6b:18:bf:6f:c9:95:06: 75:30:2a:99:68:1a:1b:48:65:52:24:48:1d:e0:81:72:9f:af: 98:19:51:34:04:8d:38:d5:fa:a3:e1:f2:75:08:70:75:13:58: 50:c5:35:3c:04:12:17:47:52:85:af:87:00:20:39:80:3d:a1: 7e:30:c5:73:cd:84:73:1d:2e:fa:05:12:cc:a0:2b:30:a3:62: 70:06:61:18:ed:84:70:e8:62:da:e1:2e:a1:7d:da:9c:f8:96: f8:a9:19:f6:65:a9:b8:13:0a:a2:c1:76:e1:2a:a2:30:15:40: e8:00:53:27:f5:4d:ff:dc:b9:71:22:84:08:ff:4c:65:6e:7d: d5:6c:80:6a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEpFOKFhUE07N/mqAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk ODI1ZWU4NDUtZTkxMC00MzRiLTlmYjYtMjM5YmJjMjc3NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszmtRaC9nk3zKokQ+294zzbPFrgmHGqdoHKa WkZZz6udtkqjwjzOPOv13At+1IxlzIb11zcTsNrL6VfbbO7i34zPzDWzUbiC9KDj a8BG0vfovEJ7tzGiH408wrjikjvtYUii26PZcWccEE0pN6AWAiUGavDxfyjgTLLb l8FEdSaD32IaNisR3trDzqdTHD+aPtiH1uPOfEhr8789Vl83oCwMceSryo0HViG+ /V/SKzKBsA9LQKBpliphl6gDcut0YoJ982pycO9YtP+TCjDD0xhdMjZxy/nrA3u5 En3TedqV+wvbxutpQfSypbh8hdMKfzk0vpOi4Z6MsCPx/jEXpQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFBtO+W+jZ83aGdf+NCokrx9a/m5sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 MjVlZTg0NS1lOTEwLTQzNGItOWZiNi0yMzliYmMyNzc0ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzgyNWVlODQ1LWU5MTAtNDM0Yi05 ZmI2LTIzOWJiYzI3NzRmNi84MjVlZTg0NS1lOTEwLTQzNGItOWZiNi0yMzliYmMy Nzc0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCMwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTYeLHDShKs2f+eU+vOUtf T+jLh/9QhzvTS4BG3OMJaqC0MWzLjd74Z7N78CX2nvv6CGduPEnVAYIn7rZO7dle 0mhdWndW/iIBCpJzod2AKAkl+DCJFshJKxxeoDmy80lmMlm8oCUWO5ycMOnDzxcx qNhlxNNn0WsYv2/JlQZ1MCqZaBobSGVSJEgd4IFyn6+YGVE0BI041fqj4fJ1CHB1 E1hQxTU8BBIXR1KFr4cAIDmAPaF+MMVzzYRzHS76BRLMoCswo2JwBmEY7YRw6GLa 4S6hfdqc+Jb4qRn2Zam4EwqiwXbhKqIwFUDoAFMn9U3/3LlxIoQI/0xlbn3VbIBq -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:16 2025 by rpki-client