$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b.cer File: 9b0fc877-c837-44ab-9292-c0d36898de7b.cer (raw, json) Hash identifier: SBcTvWorjlRDgU8xhHpUkdKtm9MRMlk+7WcqmnNdxOM= Subject key identifier: 61:2C:F2:F5:AE:09:B4:17:2C:60:6F:58:16:8E:E9:40:04:CB:51:24 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AC30E22ED8F71EDE431C150E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/9b0fc877-c837-44ab-9292-c0d36898de7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 02:31:52 +0000 Certificate not after: Tue 09 Nov 2027 03:31:52 +0000 Subordinate resources: IP: 23.143.52.0/24 IP: 2602:f5ae::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:0e:22:ed:8f:71:ed:e4:31:c1:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 6 02:31:52 2025 GMT Not After : Nov 9 03:31:52 2027 GMT Subject: CN=9b0fc877-c837-44ab-9292-c0d36898de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:19:b0:04:59:8c:1c:e4:a1:e3:4b:e6:fd: 6c:e6:d1:5d:03:65:d1:16:a2:60:64:d7:d6:05:81: a5:f7:1b:40:c3:c0:c9:5b:43:41:ac:8b:8f:5d:3a: 98:05:70:dc:8f:5c:c7:c2:d0:07:cb:5e:f2:64:1f: 4b:12:d8:87:b1:7e:06:d2:78:db:d7:6c:24:78:28: ac:36:fc:75:fa:8f:86:37:7f:67:13:9c:f5:41:c5: 27:00:c3:06:10:4b:78:41:fe:90:e2:e1:b2:0d:d6: 6b:5a:de:74:d1:67:a9:8f:6c:73:1a:34:b8:15:13: 16:9c:ae:f7:49:78:fd:69:77:ee:ee:8a:2a:f6:77: 46:fd:04:44:e8:46:ea:c8:a6:35:e7:99:08:e9:8a: 4a:99:8b:41:8b:0e:57:71:04:75:09:b5:48:a0:78: 66:cc:dc:40:e9:c5:4a:85:b0:52:a1:f8:fd:40:67: 56:f0:f5:49:e5:21:da:4c:b2:07:33:be:58:89:8e: 0d:92:41:07:a7:3a:d5:11:bb:f3:3e:8b:0a:4b:b0: 94:fd:60:26:87:73:de:c8:71:98:8e:0d:7b:71:b7: b5:10:e4:9a:4e:d4:30:72:c4:4b:3d:e1:8d:ba:af: cc:77:37:b8:0c:c0:79:5b:9c:2d:76:04:b5:61:08: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:F2:F5:AE:09:B4:17:2C:60:6F:58:16:8E:E9:40:04:CB:51:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/9b0fc877-c837-44ab-9292-c0d36898de7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.143.52.0/24 IPv6: 2602:f5ae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:67:bf:33:ad:de:98:73:c6:af:68:b6:70:25:11:8b:59:fc: 84:17:82:9b:9f:b9:a7:1c:80:94:47:5e:28:05:ed:8b:13:52: fc:4d:7e:a7:3f:97:58:6a:e6:87:58:d5:1e:4e:23:a8:fc:4a: 08:ff:3b:75:6a:1b:7e:73:d1:73:e3:57:00:22:a9:6c:f6:9d: f7:65:e0:b1:83:7e:e0:5f:47:ea:08:59:35:b9:0e:4c:59:b7: e4:41:1b:88:06:83:3d:57:6b:89:c5:a2:3d:ec:c6:16:ab:0a: 0c:eb:46:76:e7:45:d5:c1:23:42:a5:69:dc:85:f2:8e:35:e4: 91:86:f2:cf:40:5b:c8:60:6f:62:a5:d5:6e:82:7f:28:85:b4: 32:51:3b:6c:fa:4e:b6:30:6b:50:d2:39:b2:18:c0:30:42:6e: ee:3c:16:bf:30:16:18:62:eb:54:5b:f4:40:a0:84:27:d2:85: 12:09:ce:61:b2:3c:a3:24:b8:db:1b:5b:04:e9:77:a7:d8:1b: c3:80:27:2b:06:3d:e0:7c:4e:c2:f0:98:b0:a4:20:d1:a9:85: ed:7d:d0:db:40:04:7a:7d:89:0e:ec:5a:4b:d8:e6:ec:0c:b4: 1e:80:2e:b7:40:8a:f1:3c:f0:7a:9b:71:86:82:31:67:50:7a: c7:a4:5f:68 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErDDiLtj3Ht5DHBUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDgwNjAyMzE1MloXDTI3MTEwOTAzMzE1MlowLzEtMCsGA1UEAxMk OWIwZmM4NzctYzgzNy00NGFiLTkyOTItYzBkMzY4OThkZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpwZsARZjBzkoeNL5v1s5tFdA2XRFqJgZNfW BYGl9xtAw8DJW0NBrIuPXTqYBXDcj1zHwtAHy17yZB9LEtiHsX4G0njb12wkeCis Nvx1+o+GN39nE5z1QcUnAMMGEEt4Qf6Q4uGyDdZrWt500Wepj2xzGjS4FRMWnK73 SXj9aXfu7ooq9ndG/QRE6EbqyKY155kI6YpKmYtBiw5XcQR1CbVIoHhmzNxA6cVK hbBSofj9QGdW8PVJ5SHaTLIHM75YiY4NkkEHpzrVEbvzPosKS7CU/WAmh3PeyHGY jg17cbe1EOSaTtQwcsRLPeGNuq/Mdze4DMB5W5wtdgS1YQjM+QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGEs8vWuCbQXLGBvWBaO6UAEy1EkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 YjBmYzg3Ny1jODM3LTQ0YWItOTI5Mi1jMGQzNjg5OGRlN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzliMGZjODc3LWM4MzctNDRhYi05 MjkyLWMwZDM2ODk4ZGU3Yi85YjBmYzg3Ny1jODM3LTQ0YWItOTI5Mi1jMGQzNjg5 OGRlN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjzQwDgQCAAIwCAMGACYC9a4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJFnvzOt3phzxq9otnAlEYtZ/IQXgpufuaccgJRHXigF7YsTUvxNfqc/l1hq5odY 1R5OI6j8Sgj/O3VqG35z0XPjVwAiqWz2nfdl4LGDfuBfR+oIWTW5DkxZt+RBG4gG gz1Xa4nFoj3sxharCgzrRnbnRdXBI0KladyF8o415JGG8s9AW8hgb2Kl1W6CfyiF tDJRO2z6TrYwa1DSObIYwDBCbu48Fr8wFhhi61Rb9ECghCfShRIJzmGyPKMkuNsb WwTpd6fYG8OAJysGPeB8TsLwmLCkINGphe190NtABHp9iQ7sWkvY5uwMtB6ALrdA ivE88HqbcYaCMWdQesekX2g= -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:45 2025 by rpki-client