$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer File: 2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer (raw, json) Hash identifier: dlqk8xXZKuhsprE5XOiKKiHibtYsgJrAKh6HVp2zSl0= Subject key identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD664161442FC5C9D80C2D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 00:45:24 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 23.177.152.0/24 IP: 2602:f8fe::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:64:16:14:42:fc:5c:9d:80:c2:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 13 00:45:24 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:4c:94:0c:1c:fb:e0:77:4b:ec:56:20:2d: 93:12:68:48:ba:c2:72:db:db:84:32:7f:36:22:82: b7:91:f0:14:9d:af:92:5d:bf:05:21:2a:32:6d:e6: 22:1d:39:bc:e1:06:4d:16:03:82:a6:b1:2e:37:24: 49:2f:be:b3:ea:37:4b:0d:f7:8b:e7:aa:b8:89:39: 2e:cc:46:50:bc:da:fe:b1:82:c2:35:2d:27:db:47: 02:14:f1:5c:15:d5:8f:0d:9b:7b:48:dd:9a:88:bb: 96:b1:32:66:d3:39:1d:8f:28:66:7b:63:19:ff:a0: d5:02:db:d7:6f:5c:32:4e:60:f2:f9:79:84:28:b8: 55:0f:6e:0c:13:35:23:fa:49:2a:f3:f5:3d:83:93: 80:8b:67:db:5f:6b:25:bb:cb:cd:ba:3d:f0:99:39: 75:29:f4:92:b1:96:4e:04:42:f5:4e:d4:77:d7:4c: 28:6c:fd:ea:5f:50:41:2d:1d:c3:b9:81:b0:81:1c: e1:98:58:07:b2:f3:d4:8f:67:0d:2e:81:84:d0:ef: 4d:04:e4:42:ca:b3:8e:d9:4e:0f:f8:a8:87:d3:07: c8:96:1b:87:68:98:bf:fa:3c:96:ff:87:75:85:6e: 44:19:5d:5d:46:cb:57:ff:7c:bb:6b:49:e9:e4:2f: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.152.0/24 IPv6: 2602:f8fe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5e:b3:f7:39:82:df:4d:eb:b5:0b:8f:4a:86:9b:c7:8a:35: ef:cd:a5:1b:d7:a9:99:17:8d:11:6e:f2:41:2e:68:7f:82:2d: 7d:87:d2:6b:64:ee:2a:e6:74:f7:36:4a:fd:d3:35:d9:02:09: 89:a5:2b:53:12:40:0f:6e:80:30:2a:c6:59:92:85:91:4a:ba: 93:49:9c:2b:6b:b8:e3:af:21:03:1b:10:5a:19:87:52:05:0f: bf:c8:b8:67:00:dc:d6:f5:42:e4:8b:13:9e:30:8b:83:14:66: 68:a5:b7:6f:12:f6:95:24:0e:a6:04:8f:fa:d6:ff:7e:ab:d0: cc:39:ea:7d:fc:17:9f:a3:6b:35:2d:05:74:f6:e8:80:b2:3f: 10:90:6f:7a:77:f1:a3:29:13:ad:25:22:91:33:09:5e:ee:d7: 1e:c8:2d:68:8f:d2:2b:53:98:76:a1:df:69:01:bf:02:65:e1: f0:d7:84:e4:ad:75:c0:b7:b1:ed:cf:d0:ed:f0:ea:b2:27:74: 57:33:a7:c1:99:5a:57:d6:97:34:5c:10:c0:2b:47:01:80:4a: 8d:d8:d6:53:b5:19:6d:41:4f:b0:fc:02:e1:b6:68:ae:66:dc: 49:13:8f:db:69:d8:ec:26:70:c6:a7:72:32:34:3e:f5:fc:18: e7:2c:8b:c1 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErWZBYUQvxcnYDC0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMzAwNDUyNFoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk MmUxYjg2YTUtYjY3NS00ODQ5LTk1ODYtYThmYjRjYjI5ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCpMlAwc++B3S+xWIC2TEmhIusJy29uEMn82 IoK3kfAUna+SXb8FISoybeYiHTm84QZNFgOCprEuNyRJL76z6jdLDfeL56q4iTku zEZQvNr+sYLCNS0n20cCFPFcFdWPDZt7SN2aiLuWsTJm0zkdjyhme2MZ/6DVAtvX b1wyTmDy+XmEKLhVD24MEzUj+kkq8/U9g5OAi2fbX2slu8vNuj3wmTl1KfSSsZZO BEL1TtR310wobP3qX1BBLR3DuYGwgRzhmFgHsvPUj2cNLoGE0O9NBORCyrOO2U4P +KiH0wfIlhuHaJi/+jyW/4d1hW5EGV1dRstX/3y7a0np5C/cRQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPxg6HqYPtE7Z+GiqtGugAA7uDxxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y ZTFiODZhNS1iNjc1LTQ4NDktOTU4Ni1hOGZiNGNiMjk4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzJlMWI4NmE1LWI2NzUtNDg0OS05 NTg2LWE4ZmI0Y2IyOTgzZS8yZTFiODZhNS1iNjc1LTQ4NDktOTU4Ni1hOGZiNGNi Mjk4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsZgwDgQCAAIwCAMGACYC+P4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHZes/c5gt9N67ULj0qGm8eKNe/NpRvXqZkXjRFu8kEuaH+CLX2H0mtk7irmdPc2 Sv3TNdkCCYmlK1MSQA9ugDAqxlmShZFKupNJnCtruOOvIQMbEFoZh1IFD7/IuGcA 3Nb1QuSLE54wi4MUZmilt28S9pUkDqYEj/rW/36r0Mw56n38F5+jazUtBXT26ICy PxCQb3p38aMpE60lIpEzCV7u1x7ILWiP0itTmHah32kBvwJl4fDXhOStdcC3se3P 0O3w6rIndFczp8GZWlfWlzRcEMArRwGASo3Y1lO1GW1BT7D8AuG2aK5m3EkTj9tp 2OwmcMancjI0PvX8GOcsi8E= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:12 2025 by rpki-client