$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer File: 3bfea78e-552c-46d0-a7b4-60f999223238.cer (raw, json) Hash identifier: FIZsnvwRAUP23wTvN56Vy/4pEyBLkkVR/jQ9LZhN34E= Subject key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE18ED2124060A2D39066A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 165.140.148.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:12:40:60:a2:d3:90:66:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e8:95:f1:7d:0a:33:7d:10:82:d3:c2:cd:0c: 01:f1:97:3f:68:e3:9a:19:ef:f2:a0:fd:50:0e:61: b0:2f:83:c5:49:fe:14:01:93:dc:cd:19:ad:5c:b2: 3a:52:6a:13:28:a0:77:cf:6b:9f:30:c1:c3:f6:b2: b5:99:22:d8:37:33:34:30:50:b9:51:ba:2d:35:bc: bf:a4:63:bc:f1:60:99:1c:c8:27:e8:9f:77:4c:f3: a3:ea:3a:d3:32:9d:0a:ee:36:56:55:f5:07:2e:a3: 41:e7:49:82:52:04:57:b8:e3:61:c4:34:6d:84:ae: 6e:4d:d9:60:2f:b4:2c:cc:65:42:3f:80:4f:cb:c9: fd:8e:06:99:98:20:3a:dd:ba:d9:32:58:5c:0c:58: 1f:48:8f:b9:df:37:99:46:61:79:67:37:35:df:b5: c7:e3:93:80:57:e5:e9:10:2e:82:d1:6c:bc:a2:3a: 7f:6d:ce:4f:9d:35:e8:37:fc:2b:d4:27:29:e8:63: d0:ae:6f:69:8b:fc:a8:1f:d8:d5:e6:5d:4a:3c:6d: 1b:16:56:8b:fa:04:9d:40:ca:af:e0:b9:8b:2b:31: 4c:24:dc:40:d6:3c:85:06:f1:c8:14:81:38:a6:be: 51:fb:5d:7c:74:95:a9:df:90:07:24:70:c7:44:72: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 165.140.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e6:d6:9f:9d:92:9a:a8:05:9c:53:ce:34:11:2d:1f:6f:81: e4:c3:d8:92:93:4f:46:0e:15:f9:60:1e:c2:8b:58:7c:ba:64: 1c:cc:80:91:1f:21:ac:63:2a:f1:dc:c6:d5:da:ba:3f:97:20: 89:b2:e7:48:9d:c4:b2:f9:ee:3b:e6:9d:e6:ea:51:d6:1f:08: 9d:45:e3:1d:58:0c:7c:38:3b:07:02:c9:f8:9c:41:5a:37:08: fa:a5:11:ec:70:c5:78:37:cb:4e:34:1d:c0:53:4e:96:41:5c: 4c:79:78:c2:2d:ee:4e:02:d0:17:b5:ba:2c:5b:f1:b4:a6:89: e8:bb:64:6c:59:c4:e2:9a:7f:bc:98:bb:29:87:e4:fd:25:38: 76:d0:7c:49:be:4f:c6:69:57:36:13:be:60:21:ae:b3:1a:e8: 9f:89:a1:6b:6b:59:90:8a:01:67:fd:f9:ee:ae:e7:73:ea:56: c1:c9:4a:b7:1d:a1:47:c7:a3:60:69:ed:66:17:09:46:04:19: 79:ac:81:3c:75:d9:37:a1:5d:49:33:10:e4:f3:db:3e:55:e2: fe:a1:05:6a:6b:ac:1d:75:8a:03:ed:0f:53:34:12:fb:36:a2: 30:01:4d:2f:d8:d3:60:77:b4:18:06:fa:93:87:b5:dc:58:49: d7:09:c5:c3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErhjtISQGCi05BmqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk M2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIzMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uiV8X0KM30QgtPCzQwB8Zc/aOOaGe/yoP1Q DmGwL4PFSf4UAZPczRmtXLI6UmoTKKB3z2ufMMHD9rK1mSLYNzM0MFC5UbotNby/ pGO88WCZHMgn6J93TPOj6jrTMp0K7jZWVfUHLqNB50mCUgRXuONhxDRthK5uTdlg L7QszGVCP4BPy8n9jgaZmCA63brZMlhcDFgfSI+53zeZRmF5Zzc137XH45OAV+Xp EC6C0Wy8ojp/bc5PnTXoN/wr1Ccp6GPQrm9pi/yoH9jV5l1KPG0bFlaL+gSdQMqv 4LmLKzFMJNxA1jyFBvHIFIE4pr5R+118dJWp35AHJHDHRHJGhQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNep6V+4hSa7PFeIzQcqv7drLoqWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z YmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNiZmVhNzhlLTU1MmMtNDZkMC1h N2I0LTYwZjk5OTIyMzIzOC8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTky MjMyMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKljJQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZubWn52SmqgFnFPONBEt H2+B5MPYkpNPRg4V+WAewotYfLpkHMyAkR8hrGMq8dzG1dq6P5cgibLnSJ3Esvnu O+ad5upR1h8InUXjHVgMfDg7BwLJ+JxBWjcI+qUR7HDFeDfLTjQdwFNOlkFcTHl4 wi3uTgLQF7W6LFvxtKaJ6LtkbFnE4pp/vJi7KYfk/SU4dtB8Sb5PxmlXNhO+YCGu sxron4mha2tZkIoBZ/357q7nc+pWwclKtx2hR8ejYGntZhcJRgQZeayBPHXZN6Fd STMQ5PPbPlXi/qEFamusHXWKA+0PUzQS+zaiMAFNL9jTYHe0GAb6k4e13FhJ1wnF ww== -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:52 2025 by rpki-client