$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.cer File: 82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.cer (raw, json) Hash identifier: H9K/1ylq3jEotXWQFZ0IxFTuqcP+QjJxkPfgYISzjUY= Subject key identifier: 8C:CA:BD:97:8E:DF:42:C9:96:D3:16:67:FA:C1:9E:2D:2C:26:51:85 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A58C367FFB03B280A2688EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 23.150.248.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:67:ff:b0:3b:28:0a:26:88:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:be:fc:d7:54:1f:81:a7:38:6c:95:20:a5: 81:66:f8:8a:af:22:8f:c4:f4:c8:2c:f9:a3:ac:52: bd:67:66:a9:d0:e8:ba:37:3e:c7:6f:72:78:70:b5: a3:56:ac:c7:53:82:53:59:30:5a:c6:67:d2:08:31: be:55:58:f0:5f:90:a0:a2:e6:46:f1:32:cc:ba:3f: e7:4a:4c:d2:a3:3b:46:53:b9:96:f1:a7:d4:ad:ee: f9:84:9b:d7:33:0b:0b:d6:e0:3e:6d:53:91:dc:fd: 8d:01:80:dd:32:19:7f:27:23:d8:cf:9b:24:b5:ca: f9:6c:9b:97:b2:6e:48:84:63:6b:64:89:20:ec:65: 68:13:a2:52:06:d2:cc:f1:15:b1:80:44:f3:f3:28: 5d:82:cf:2e:e9:e0:04:6f:c9:cc:b1:cb:0a:c8:6d: 29:d6:77:bd:79:4c:1b:0c:f9:89:d1:b8:1f:25:72: b9:a4:cf:26:bc:9e:4a:63:cc:86:65:00:59:df:31: 71:8f:6a:76:6e:6a:bb:f7:06:4b:2c:cb:7c:4f:a2: 0f:76:55:3c:9c:c2:1a:ee:13:18:cc:1a:d8:cd:53: 26:39:0b:23:42:30:6d:6c:73:7c:00:0e:e2:70:b3: e4:94:7e:0d:ec:0e:a4:49:2e:d9:98:76:8a:9c:11: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:BD:97:8E:DF:42:C9:96:D3:16:67:FA:C1:9E:2D:2C:26:51:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:10:f8:27:e6:b8:4a:a5:cb:f9:63:df:59:d1:3c:e8:d5:13: db:ea:f1:c1:46:d8:27:4b:81:b1:71:9e:86:43:25:f6:b4:8f: 18:69:83:9d:04:6d:ae:28:ce:71:11:25:b2:b6:a9:fa:3f:31: 64:18:89:78:de:67:26:4f:ef:ef:96:db:72:97:a0:31:0d:ba: 77:06:ca:ee:8c:63:5e:66:a0:02:3e:3d:59:a2:9d:9d:90:95: ef:4b:95:18:94:59:35:55:4a:e6:f0:7d:30:ca:e3:d1:19:92: b4:57:47:dd:8a:9e:1f:a7:e3:c8:ac:cc:34:d2:19:a8:f7:6c: b3:08:9c:ae:66:0d:fc:d2:dd:f0:94:0e:7f:7a:96:98:ca:68: 09:a3:74:06:fc:0e:e5:be:bf:8f:b4:9d:ae:79:0b:b1:d2:4b: 90:dc:76:f6:48:c4:40:9f:d0:a5:36:7b:9b:12:19:96:0c:06: 5b:a5:a7:06:a5:a1:16:5e:e3:57:f0:98:40:8d:6b:1b:8e:19: 48:2a:25:b7:22:ca:3e:93:ba:31:7a:2e:84:c7:83:35:38:39: d0:05:65:98:aa:4b:e0:f4:7d:b3:f2:b6:bb:66:71:05:34:df: ee:27:c0:3b:6d:da:62:0b:46:84:0a:e8:ed:7a:d6:5c:b9:23: 04:74:c1:9a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpYw2f/sDsoCiaI6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk ODJiMGMyYzUtZDVmOC00ZmJiLTk1ODgtYTVlOTk2ZDQ5YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTy+/NdUH4GnOGyVIKWBZviKryKPxPTILPmj rFK9Z2ap0Oi6Nz7Hb3J4cLWjVqzHU4JTWTBaxmfSCDG+VVjwX5CgouZG8TLMuj/n SkzSoztGU7mW8afUre75hJvXMwsL1uA+bVOR3P2NAYDdMhl/JyPYz5sktcr5bJuX sm5IhGNrZIkg7GVoE6JSBtLM8RWxgETz8yhdgs8u6eAEb8nMscsKyG0p1ne9eUwb DPmJ0bgfJXK5pM8mvJ5KY8yGZQBZ3zFxj2p2bmq79wZLLMt8T6IPdlU8nMIa7hMY zBrYzVMmOQsjQjBtbHN8AA7icLPklH4N7A6kSS7ZmHaKnBFkPwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIzKvZeO30LJltMWZ/rBni0sJlGFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MmIwYzJjNS1kNWY4LTRmYmItOTU4OC1hNWU5OTZkNDlhOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyYjBjMmM1LWQ1ZjgtNGZiYi05 NTg4LWE1ZTk5NmQ0OWE5YS84MmIwYzJjNS1kNWY4LTRmYmItOTU4OC1hNWU5OTZk NDlhOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXlvgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoBD4J+a4SqXL+WPfWdE8 6NUT2+rxwUbYJ0uBsXGehkMl9rSPGGmDnQRtrijOcRElsrap+j8xZBiJeN5nJk/v 75bbcpegMQ26dwbK7oxjXmagAj49WaKdnZCV70uVGJRZNVVK5vB9MMrj0RmStFdH 3YqeH6fjyKzMNNIZqPdsswicrmYN/NLd8JQOf3qWmMpoCaN0BvwO5b6/j7SdrnkL sdJLkNx29kjEQJ/QpTZ7mxIZlgwGW6WnBqWhFl7jV/CYQI1rG44ZSColtyLKPpO6 MXouhMeDNTg50AVlmKpL4PR9s/K2u2ZxBTTf7ifAO23aYgtGhAro7XrWXLkjBHTB mg== -----END CERTIFICATE-----Generated at Mon Jun 30 22:36:28 2025 by rpki-client