$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb.cer File: 40884838-fc3f-4f54-ba39-55d57ba477eb.cer (raw, json) Hash identifier: HOWF8kDkj14InAJLQiSQgZhSQFBgkZDc4RyjRvSPXrQ= Subject key identifier: CB:ED:5C:0B:03:8A:FA:D0:A1:44:EB:0F:A8:71:DD:95:38:AB:DB:14 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE8BABA97B27FABFE07586140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/40884838-fc3f-4f54-ba39-55d57ba477eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 14:24:32 +0000 Certificate not after: Mon 22 Nov 2027 15:24:32 +0000 Subordinate resources: IP: 199.4.152.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:ba:ba:97:b2:7f:ab:fe:07:58:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 19 14:24:32 2025 GMT Not After : Nov 22 15:24:32 2027 GMT Subject: CN=40884838-fc3f-4f54-ba39-55d57ba477eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:a4:b8:0d:00:d2:94:36:da:2e:64:98:1d: 90:74:d2:6a:b4:d0:40:64:af:27:84:3a:db:08:7c: 66:03:91:58:0a:f8:92:f9:61:83:e2:18:ea:64:0f: 2d:f9:64:ea:da:2e:58:86:03:3f:5d:52:7d:39:27: cf:19:1f:bc:c9:0e:d8:70:02:f8:cb:49:01:ff:4f: 9c:00:8c:cc:1e:be:cc:f9:f7:2a:c5:37:3a:e7:98: ef:5f:57:90:7d:92:50:9c:bf:2b:ed:b0:6d:df:d0: 65:cd:c4:67:72:10:78:12:aa:4c:83:3d:3c:2d:36: 91:e0:5f:39:04:e0:71:98:7e:8a:ad:8e:f2:3d:99: 6f:25:b5:fe:fc:e9:97:fe:d6:d7:2d:a2:43:bb:e9: 30:4f:ff:52:9d:50:51:16:0f:37:f2:73:a3:b7:45: 9d:26:d3:1f:54:39:a7:e7:28:5f:9c:68:04:4c:e8: 4d:99:d1:bc:c6:2f:a9:14:d3:8b:26:4b:7b:0d:7d: e0:01:a2:ee:f8:a5:e6:c1:c8:a9:3b:5f:a0:3b:9a: 1b:62:f9:0c:9e:b4:39:1f:da:37:5e:0b:18:b6:c2: cd:84:57:fd:e7:d4:a2:8c:22:a1:10:b2:44:a6:c4: 7b:61:07:19:a9:aa:cd:dc:d7:4e:18:7c:78:d1:02: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:5C:0B:03:8A:FA:D0:A1:44:EB:0F:A8:71:DD:95:38:AB:DB:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/40884838-fc3f-4f54-ba39-55d57ba477eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.4.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:86:0b:56:47:8e:ec:2a:15:25:6f:a4:bf:d8:d7:c5:22:8c: 84:69:cd:69:37:29:7b:58:c0:42:5e:a4:97:ee:00:4c:7a:20: c4:99:68:78:c6:46:c0:6d:a6:8a:c0:f7:20:77:32:55:3e:0c: 83:ef:ea:1c:ac:be:81:90:72:ea:36:32:38:a5:84:64:ef:91: 03:49:63:17:8f:bc:72:f0:30:70:16:d7:61:10:85:b1:74:1e: 1a:03:75:5e:e2:4c:8a:24:e9:63:99:6b:c2:72:9b:bd:af:1f: a5:f8:25:1a:5f:5c:62:55:38:91:4c:5d:8a:08:25:7f:7b:79: a0:af:99:51:36:c0:a2:08:0e:4b:7a:d0:f6:f4:29:62:74:5e: ec:17:79:31:6f:89:75:21:17:1f:49:5b:5f:32:6a:c3:b4:96: 8c:93:00:88:44:09:b7:d0:55:d0:a4:e9:98:a6:d6:6c:51:0a: ef:0b:4b:ad:c1:0f:02:68:10:3c:7f:54:28:f9:4a:62:a6:2f: 96:7d:dc:0a:3a:10:77:a0:1e:66:ca:ad:f5:7f:ba:17:1f:77: 40:d3:82:56:d7:a6:fa:08:05:58:7b:7b:0a:25:2d:4b:f8:c8: a4:fc:5c:27:0e:79:bb:06:28:74:70:72:c1:51:46:1c:c1:5c: c6:57:f8:82 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErourqXsn+r/gdYYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxOTE0MjQzMloXDTI3MTEyMjE1MjQzMlowLzEtMCsGA1UEAxMk NDA4ODQ4MzgtZmMzZi00ZjU0LWJhMzktNTVkNTdiYTQ3N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+kuA0A0pQ22i5kmB2QdNJqtNBAZK8nhDrb CHxmA5FYCviS+WGD4hjqZA8t+WTq2i5YhgM/XVJ9OSfPGR+8yQ7YcAL4y0kB/0+c AIzMHr7M+fcqxTc655jvX1eQfZJQnL8r7bBt39BlzcRnchB4EqpMgz08LTaR4F85 BOBxmH6KrY7yPZlvJbX+/OmX/tbXLaJDu+kwT/9SnVBRFg838nOjt0WdJtMfVDmn 5yhfnGgETOhNmdG8xi+pFNOLJkt7DX3gAaLu+KXmwcipO1+gO5obYvkMnrQ5H9o3 XgsYtsLNhFf959SijCKhELJEpsR7YQcZqarN3NdOGHx40QLt3QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMvtXAsDivrQoUTrD6hx3ZU4q9sUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 MDg4NDgzOC1mYzNmLTRmNTQtYmEzOS01NWQ1N2JhNDc3ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQwODg0ODM4LWZjM2YtNGY1NC1i YTM5LTU1ZDU3YmE0NzdlYi80MDg4NDgzOC1mYzNmLTRmNTQtYmEzOS01NWQ1N2Jh NDc3ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHBJgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHoYLVkeO7CoVJW+kv9jX xSKMhGnNaTcpe1jAQl6kl+4ATHogxJloeMZGwG2misD3IHcyVT4Mg+/qHKy+gZBy 6jYyOKWEZO+RA0ljF4+8cvAwcBbXYRCFsXQeGgN1XuJMiiTpY5lrwnKbva8fpfgl Gl9cYlU4kUxdigglf3t5oK+ZUTbAoggOS3rQ9vQpYnRe7Bd5MW+JdSEXH0lbXzJq w7SWjJMAiEQJt9BV0KTpmKbWbFEK7wtLrcEPAmgQPH9UKPlKYqYvln3cCjoQd6Ae Zsqt9X+6Fx93QNOCVtem+ggFWHt7CiUtS/jIpPxcJw55uwYodHBywVFGHMFcxlf4 gg== -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:08 2025 by rpki-client