$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer File: 19039935-462a-4b14-8e96-78798283eeff.cer (raw, json) Hash identifier: n52r8mHnxjHrw0SQ5WQd9m0G+HqOsftm7uMIM7d6KiY= Subject key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD3996783E2C20DA0863438C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 00:45:25 +0000 Certificate not after: Mon 15 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 167.253.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:99:67:83:e2:c2:0d:a0:86:34:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 12 00:45:25 2025 GMT Not After : Nov 15 01:45:25 2027 GMT Subject: CN=19039935-462a-4b14-8e96-78798283eeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:86:12:02:46:88:bf:de:a6:16:f8:83:fa: 30:07:4b:6b:37:73:54:8b:2f:9c:96:b5:e4:dc:54: af:9d:90:75:27:2f:ac:23:0b:77:35:59:db:09:cd: 0a:7e:4d:bd:c8:33:c1:e3:1e:36:79:fd:d3:0d:49: 04:cf:29:1c:f3:a0:d8:11:46:d5:5f:31:09:18:1e: 83:da:4b:5c:83:91:5a:15:38:fa:b6:55:8b:8e:9a: ab:d2:40:9b:2a:de:cf:8d:1e:67:e9:98:af:75:17: 93:64:4b:ee:e3:3d:a6:b8:b1:82:24:12:3c:ff:1b: e9:ac:a3:ce:c4:a0:70:9a:4b:f6:6a:23:0c:7f:b2: d8:9f:eb:a4:2b:f8:c4:25:e7:41:52:e1:48:55:dd: 6a:29:4d:49:fc:76:b1:2e:91:b2:16:c2:c6:08:90: ce:70:0b:d8:49:ae:1a:a8:ac:2c:62:c4:f8:84:d9: 09:dc:58:18:3c:b9:4c:f6:af:44:91:52:8d:99:ad: 00:b0:8e:84:54:48:cc:40:20:4c:1a:52:90:ce:80: c3:0a:bc:c7:36:82:93:72:b5:0a:ad:d9:81:9b:96: b7:4d:0b:57:13:60:89:55:7e:6a:63:8d:79:a1:e6: ef:c4:52:17:9f:1d:ca:97:cb:00:4e:81:45:b6:88: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:84:1c:53:c5:d5:6c:c0:ef:69:6b:da:10:9b:57:47:44:b0: 8c:63:37:0a:23:0f:23:01:98:41:60:96:09:1c:32:6a:2b:e8: 05:f6:cb:0a:e3:36:fa:12:2d:6f:38:5e:09:9a:e6:7e:3f:53: 88:19:e1:7b:9c:e7:6b:de:9d:14:87:a8:36:72:38:d5:df:01: b5:07:04:c0:30:fd:ff:8c:43:1e:ea:5e:46:64:93:cb:f2:7f: 26:29:38:db:62:66:e0:1b:17:61:80:74:2f:c7:04:42:9b:35: 91:c0:bf:ae:29:17:76:4a:54:92:15:7e:a7:af:f3:3a:a1:17: 64:f9:91:a3:63:cc:44:57:a9:13:e0:f2:fa:fc:bb:3a:0a:5e: 4e:78:1a:78:5e:52:92:6b:22:99:78:c7:24:bd:18:1f:3d:bf: 2d:51:fe:e0:c1:00:73:f2:db:4b:71:85:07:65:0e:9a:91:b3: 75:2a:9d:0d:6e:df:ea:53:f8:32:eb:21:da:3f:f3:4b:4e:66: 1c:b1:86:74:70:e1:8b:23:f8:18:8a:23:3e:d2:7a:a0:5d:b4: 82:0d:1f:70:bc:08:00:82:f1:ca:79:fd:e6:2e:1e:a8:20:cc: 66:89:89:9d:78:9d:c3:f7:42:b8:b9:05:45:b5:57:84:68:3d: 28:29:0a:48 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErTmWeD4sINoIY0OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMjAwNDUyNVoXDTI3MTExNTAxNDUyNVowLzEtMCsGA1UEAxMk MTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNlZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKGEgJGiL/ephb4g/owB0trN3NUiy+clrXk 3FSvnZB1Jy+sIwt3NVnbCc0Kfk29yDPB4x42ef3TDUkEzykc86DYEUbVXzEJGB6D 2ktcg5FaFTj6tlWLjpqr0kCbKt7PjR5n6ZivdReTZEvu4z2muLGCJBI8/xvprKPO xKBwmkv2aiMMf7LYn+ukK/jEJedBUuFIVd1qKU1J/HaxLpGyFsLGCJDOcAvYSa4a qKwsYsT4hNkJ3FgYPLlM9q9EkVKNma0AsI6EVEjMQCBMGlKQzoDDCrzHNoKTcrUK rdmBm5a3TQtXE2CJVX5qY415oebvxFIXnx3Kl8sAToFFtojMgwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDAin3Sja8LaqWZACNHMPFOQ396ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x OTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzE5MDM5OTM1LTQ2MmEtNGIxNC04 ZTk2LTc4Nzk4MjgzZWVmZi8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4 M2VlZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/SQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADYQcU8XVbMDvaWvaEJtX R0SwjGM3CiMPIwGYQWCWCRwyaivoBfbLCuM2+hItbzheCZrmfj9TiBnhe5zna96d FIeoNnI41d8BtQcEwDD9/4xDHupeRmSTy/J/Jik422Jm4BsXYYB0L8cEQps1kcC/ rikXdkpUkhV+p6/zOqEXZPmRo2PMRFepE+Dy+vy7OgpeTngaeF5SkmsimXjHJL0Y Hz2/LVH+4MEAc/LbS3GFB2UOmpGzdSqdDW7f6lP4Mush2j/zS05mHLGGdHDhiyP4 GIojPtJ6oF20gg0fcLwIAILxynn95i4eqCDMZomJnXidw/dCuLkFRbVXhGg9KCkK SA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:42 2025 by rpki-client