$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb4ff4a0-e342-4b8b-b227-08fa4caeb188.cer File: eb4ff4a0-e342-4b8b-b227-08fa4caeb188.cer (raw, json) Hash identifier: dEnDm2FLt1VAqtJuxlguP1447eE93bstgq3MQSqsOtU= Subject key identifier: F8:6A:1F:76:AB:A6:8A:D3:75:D4:48:1E:1B:0C:59:85:5F:5A:06:FA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AE18ED23EAA47301ECD3D76F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb4ff4a0-e342-4b8b-b227-08fa4caeb188/eb4ff4a0-e342-4b8b-b227-08fa4caeb188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb4ff4a0-e342-4b8b-b227-08fa4caeb188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 199.223.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:3e:aa:47:30:1e:cd:3d:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=eb4ff4a0-e342-4b8b-b227-08fa4caeb188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:33:ef:ce:35:22:59:f2:2f:7b:00:c5:ac: c9:a8:a2:86:f2:d2:21:c7:8e:0a:cd:a5:43:c9:49: 43:43:37:cc:b9:5e:ff:df:7e:0a:b7:e7:3b:b0:ff: 10:de:76:82:0e:14:95:99:8d:58:0b:f2:3c:3c:46: ef:75:5a:fa:14:65:7b:12:80:76:7d:1f:81:30:4b: ea:e0:32:a2:71:0f:74:a7:7b:f5:45:c5:f6:b0:e1: 0e:c8:a1:1a:d5:17:b2:44:97:08:37:5b:53:d7:01: 66:7f:ad:b7:a7:9e:01:78:4c:02:66:5f:97:b7:22: 35:87:c2:de:5a:fc:fd:a5:67:7c:cc:92:49:3f:1d: 2b:3f:ec:24:c4:04:65:9a:fa:42:19:9b:c9:4d:83: 5a:cf:7c:e2:1f:02:73:d3:3e:45:0e:28:8e:27:15: 64:ac:66:45:c1:de:5f:27:73:96:e6:4d:ff:d4:28: 91:4c:b3:ee:d1:6c:bc:84:92:b2:c5:90:5e:67:e1: 97:16:bb:c5:ad:68:aa:c9:8c:59:7b:63:3d:78:4c: 8c:85:e7:0f:c1:f4:52:a5:5e:15:40:1a:97:a1:ed: 13:3c:e0:ef:07:bb:00:fb:c0:2c:2f:05:bc:35:b1: 2a:16:5d:49:89:60:db:e0:54:6e:a8:d7:64:a7:40: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6A:1F:76:AB:A6:8A:D3:75:D4:48:1E:1B:0C:59:85:5F:5A:06:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb4ff4a0-e342-4b8b-b227-08fa4caeb188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb4ff4a0-e342-4b8b-b227-08fa4caeb188/eb4ff4a0-e342-4b8b-b227-08fa4caeb188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.223.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b6:30:ab:d4:d4:a9:9e:70:e2:e9:7a:83:84:08:2f:1e:66: a0:98:37:46:fb:3a:71:ff:0a:04:97:ee:71:c2:8f:2f:e0:51: ff:e3:1c:94:be:4e:b7:61:83:61:75:9f:8a:c4:af:2d:c4:ea: 32:b3:ec:2a:a9:be:a6:01:52:7e:7a:8a:64:ef:4c:b7:5f:1b: 6a:86:87:7a:2a:46:67:bb:b9:f8:d6:6d:8c:5e:ca:dd:69:a7: d3:4e:12:4e:32:c1:ba:2a:e9:9d:f0:28:a2:9b:e5:09:52:0d: 8c:97:99:ed:06:4f:a2:13:ae:16:cc:05:fc:a2:d8:34:9e:cf: 09:c5:d2:2c:8f:19:00:94:22:27:09:49:59:25:cd:98:41:95: 00:fc:e9:7c:20:cc:8d:2c:10:22:5f:3c:e2:94:44:83:86:39: 6f:77:3b:d4:14:6d:c2:48:06:d6:8c:74:af:9d:0c:0d:70:64: 5f:40:b2:76:8a:61:86:4b:0c:c0:b8:43:35:07:38:48:44:bc: a0:24:50:3c:d6:dd:16:37:c6:27:fa:41:4e:b9:40:fa:0e:9f: 17:82:70:e1:31:ba:84:ce:32:42:dd:f0:1f:9b:52:c7:8c:a4: 5d:8b:26:d2:23:1d:ad:88:dc:6e:2d:30:41:e8:8d:22:81:47: 42:d0:75:f3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErhjtI+qkcwHs09dvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk ZWI0ZmY0YTAtZTM0Mi00YjhiLWIyMjctMDhmYTRjYWViMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXUz7841IlnyL3sAxazJqKKG8tIhx44KzaVD yUlDQzfMuV7/334Kt+c7sP8Q3naCDhSVmY1YC/I8PEbvdVr6FGV7EoB2fR+BMEvq 4DKicQ90p3v1RcX2sOEOyKEa1ReyRJcIN1tT1wFmf623p54BeEwCZl+XtyI1h8Le Wvz9pWd8zJJJPx0rP+wkxARlmvpCGZvJTYNaz3ziHwJz0z5FDiiOJxVkrGZFwd5f J3OW5k3/1CiRTLPu0Wy8hJKyxZBeZ+GXFrvFrWiqyYxZe2M9eEyMhecPwfRSpV4V QBqXoe0TPODvB7sA+8AsLwW8NbEqFl1JiWDb4FRuqNdkp0DJyQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPhqH3arporTddRIHhsMWYVfWgb6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YjRmZjRhMC1lMzQyLTRiOGItYjIyNy0wOGZhNGNhZWIxODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ViNGZmNGEwLWUzNDItNGI4Yi1i MjI3LTA4ZmE0Y2FlYjE4OC9lYjRmZjRhMC1lMzQyLTRiOGItYjIyNy0wOGZhNGNh ZWIxODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXH3yAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO7Ywq9TUqZ5w4ul6g4QI Lx5moJg3Rvs6cf8KBJfuccKPL+BR/+MclL5Ot2GDYXWfisSvLcTqMrPsKqm+pgFS fnqKZO9Mt18baoaHeipGZ7u5+NZtjF7K3Wmn004STjLBuirpnfAoopvlCVINjJeZ 7QZPohOuFswF/KLYNJ7PCcXSLI8ZAJQiJwlJWSXNmEGVAPzpfCDMjSwQIl884pRE g4Y5b3c71BRtwkgG1ox0r50MDXBkX0CydophhksMwLhDNQc4SES8oCRQPNbdFjfG J/pBTrlA+g6fF4Jw4TG6hM4yQt3wH5tSx4ykXYsm0iMdrYjcbi0wQeiNIoFHQtB1 8w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:57 2025 by rpki-client