$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer File: 45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer (raw, json) Hash identifier: t1va+YLmK3mdnMjYBc+T6MsB5PZKP5BB/wVRhjo+4ek= Subject key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AECB990706FFAC38A07841980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 00:45:25 +0000 Certificate not after: Wed 24 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 40100 IP: 208.68.156.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b9:90:70:6f:fa:c3:8a:07:84:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 21 00:45:25 2025 GMT Not After : Nov 24 01:45:25 2027 GMT Subject: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:44:ce:ef:b8:77:67:f0:1a:dd:09:06:7a: c1:ab:ed:75:d4:46:b2:7a:66:1a:ae:3d:1e:98:a3: a8:c2:f8:a7:87:a3:62:25:d3:cd:40:5b:48:81:20: cd:0d:67:29:a6:59:ba:41:7a:69:69:a5:17:f6:9e: cc:44:64:8d:41:3d:36:09:fb:92:17:54:ab:55:3d: 35:5e:d1:b4:c4:2c:ef:0d:fe:7f:fe:dc:cd:15:67: d0:e5:ad:4f:3e:d1:d9:45:5d:06:0f:97:b6:04:44: 07:f2:a3:57:29:6d:58:68:02:58:98:7c:b6:6e:26: 53:02:06:05:ec:48:3b:3e:86:e0:47:ec:ac:27:75: f4:b6:d1:78:97:25:71:95:35:56:fb:b6:8f:cf:35: 67:67:dd:e5:6d:94:0c:0a:74:82:ac:73:6c:2d:58: 4e:6a:fd:86:85:48:b2:3e:3d:13:de:58:50:88:70: 2d:4c:7b:92:82:ca:09:4a:89:14:a5:77:d3:94:89: 06:89:70:c8:42:cc:b8:31:fd:a8:68:99:d0:c5:d8: db:29:44:04:c2:24:8a:a8:cc:75:2c:c4:c2:59:17: 36:8d:8d:fc:94:00:02:65:23:ef:1d:db:ab:fb:ae: 0e:bf:94:1c:f0:71:fa:ab:21:5c:8d:b6:c2:f8:e8: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.68.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40100 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cd:b0:ee:45:54:89:a8:ea:2c:7a:96:eb:d1:5f:f1:69:04: 94:a5:ef:ec:a1:fd:8f:bf:a9:93:ab:bd:34:12:ca:1f:a0:ee: b5:4e:16:55:52:66:af:3b:1f:a0:2c:1b:c8:c2:10:2b:3e:70: 84:f2:cd:45:e2:82:e9:31:61:4a:c7:e4:64:f7:d7:87:61:19: 11:4e:2f:2a:ee:33:41:57:b2:e8:0f:68:86:f8:f6:90:fc:70: 32:da:7f:d7:98:9b:01:4c:76:64:64:da:fa:de:3c:c8:72:0b: 93:fb:24:58:a9:79:a3:5d:cb:55:4e:bd:00:ce:c3:5c:34:eb: c1:34:e7:4a:f9:69:be:d7:2a:1d:72:fe:72:dd:3e:ee:a7:0e: b2:b3:3e:22:7d:7a:cd:52:79:f2:55:ba:98:4f:1e:f2:33:e4: 74:5f:7f:e6:7c:1e:af:20:7d:f5:53:6d:aa:25:39:60:e5:0b: a2:b5:3e:05:79:96:8e:64:d3:4f:a4:89:f5:e7:7c:32:a9:ae: d4:71:40:51:c0:1e:44:b0:5a:b9:5d:f3:b0:54:25:fb:a9:bf: eb:e6:67:ae:35:cd:c9:30:c3:61:a8:43:97:e6:c1:bf:38:21: f4:c1:01:a4:0d:75:73:8b:55:2a:c2:12:0c:ac:84:cc:05:1f: a8:21:c6:4a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErsuZBwb/rDigeEGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMTAwNDUyNVoXDTI3MTEyNDAxNDUyNVowLzEtMCsGA1UEAxMk NDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMzYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpEzu+4d2fwGt0JBnrBq+111EayemYarj0e mKOowvinh6NiJdPNQFtIgSDNDWcpplm6QXppaaUX9p7MRGSNQT02CfuSF1SrVT01 XtG0xCzvDf5//tzNFWfQ5a1PPtHZRV0GD5e2BEQH8qNXKW1YaAJYmHy2biZTAgYF 7Eg7PobgR+ysJ3X0ttF4lyVxlTVW+7aPzzVnZ93lbZQMCnSCrHNsLVhOav2GhUiy Pj0T3lhQiHAtTHuSgsoJSokUpXfTlIkGiXDIQsy4Mf2oaJnQxdjbKUQEwiSKqMx1 LMTCWRc2jY38lAACZSPvHdur+64Ov5Qc8HH6qyFcjbbC+OjebQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGRz9P7Aqdk6b+Z5sDz3hxiHeRF9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQ1YTRlZjY3LTNlZDAtNGRlOS1h ZmFiLWFiMWViNGRjM2IwZC80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRk YzNiMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQRJwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJykMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAADNsO5FVImo6ix6luvRX/FpBJSl7+yh/Y+/qZOrvTQSyh+g 7rVOFlVSZq87H6AsG8jCECs+cITyzUXigukxYUrH5GT314dhGRFOLyruM0FXsugP aIb49pD8cDLaf9eYmwFMdmRk2vrePMhyC5P7JFipeaNdy1VOvQDOw1w068E050r5 ab7XKh1y/nLdPu6nDrKzPiJ9es1SefJVuphPHvIz5HRff+Z8Hq8gffVTbaolOWDl C6K1PgV5lo5k00+kifXnfDKprtRxQFHAHkSwWrld87BUJfupv+vmZ641zckww2Go Q5fmwb84IfTBAaQNdXOLVSrCEgyshMwFH6ghxko= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:42 2025 by rpki-client