$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer File: 4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer (raw, json) Hash identifier: 95ZQ0eGXAqRXArNYMA2tXhQPcS8YHkJ34SVnG7q1LSw= Subject key identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD0CEB8E8212219F63567A210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 00:45:25 +0000 Certificate not after: Sun 14 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 36281 IP: 192.30.203.0/24 IP: 2620:128:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:ce:b8:e8:21:22:19:f6:35:67:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 11 00:45:25 2025 GMT Not After : Nov 14 01:45:25 2027 GMT Subject: CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:ae:0c:a5:2f:df:50:43:de:b3:f9:11:b5: fc:98:84:36:41:49:d5:c4:43:8e:5e:a7:9e:67:b0: ea:05:92:9b:91:0e:01:5f:3a:22:89:4c:c7:06:16: 0e:18:73:e8:fd:71:d7:8f:6e:4d:f9:eb:db:67:58: 83:00:7c:87:91:44:73:78:be:f6:36:40:9d:02:93: f7:c5:85:0f:06:a2:61:cc:0b:0c:27:5d:ea:c9:7f: 7c:c2:bb:be:d6:69:73:d7:f7:03:53:8b:6c:17:1f: 4e:f8:1a:89:fa:d5:06:2d:81:2f:ba:5c:b5:32:e3: 28:94:9f:bd:42:c7:84:4b:42:7e:41:40:2e:5e:01: d5:7b:43:db:89:11:33:cf:0b:e9:32:d5:45:17:02: f3:e2:81:c0:34:fa:f8:ee:2e:a5:1a:28:40:e4:26: c8:46:69:6d:a6:e5:23:60:c6:a8:02:ed:c3:eb:b3: 39:45:2b:b6:13:e3:d7:3f:3b:06:a5:cb:f3:22:56: 14:94:4e:6c:7f:d1:d5:13:75:76:11:46:af:0c:ce: fc:26:da:b2:4b:b7:8f:00:46:3d:88:33:a0:da:f8: 3c:62:b7:d7:80:fb:a4:e4:9c:4e:91:ed:33:ce:4c: 10:b1:24:42:c6:41:8a:98:40:6d:47:25:06:e5:d2: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.30.203.0/24 IPv6: 2620:128:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36281 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:f1:15:c9:83:45:de:0d:58:c8:f3:08:72:41:df:77:ee: ef:8c:6d:89:e2:7a:93:7d:72:15:4a:41:f1:cb:e4:95:bb:93: f0:36:08:b4:e6:4a:a3:75:80:47:41:29:6e:cc:46:a1:4c:66: 25:e6:8c:6b:83:6a:cb:55:b8:62:7f:a3:17:4e:fd:33:22:ba: 1c:b3:3f:d7:7e:9e:10:7e:a1:96:58:58:84:72:95:8b:87:54: 3a:41:8b:57:ec:39:6f:d9:b6:ed:8f:87:ce:d8:aa:fc:db:1d: 63:66:ab:53:4f:62:16:96:03:64:ab:61:35:95:9b:04:1d:6c: dd:0e:84:f3:17:9e:77:c1:61:ed:02:5c:97:1a:70:12:19:bf: 44:83:80:3f:1a:83:ac:8c:97:a6:a0:a4:2f:00:3d:83:f0:df: f0:2c:d9:d7:88:4c:19:af:59:39:32:6d:73:69:c1:c8:58:77: d7:45:1a:07:e1:1b:6f:3c:76:a5:cb:a4:0d:a3:ec:a9:23:56: 98:7e:ed:24:23:60:35:57:2a:d1:93:f9:bf:53:76:cf:36:e2: f2:f7:b9:08:02:f9:36:c9:b3:06:db:39:00:ec:5e:d9:6e:c4: 1c:35:0d:62:1e:45:2d:a2:c3:44:6d:0e:d4:bf:29:78:96:95: ee:30:28:2e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErQzrjoISIZ9jVnohAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMTAwNDUyNVoXDTI3MTExNDAxNDUyNVowLzEtMCsGA1UEAxMk NGNmNjcyZDYtOWM4NS00ZWM2LWI2ZTUtNTc0N2NlZmQxMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu2uDKUv31BD3rP5EbX8mIQ2QUnVxEOOXqee Z7DqBZKbkQ4BXzoiiUzHBhYOGHPo/XHXj25N+evbZ1iDAHyHkURzeL72NkCdApP3 xYUPBqJhzAsMJ13qyX98wru+1mlz1/cDU4tsFx9O+BqJ+tUGLYEvuly1MuMolJ+9 QseES0J+QUAuXgHVe0PbiREzzwvpMtVFFwLz4oHANPr47i6lGihA5CbIRmltpuUj YMaoAu3D67M5RSu2E+PXPzsGpcvzIlYUlE5sf9HVE3V2EUavDM78JtqyS7ePAEY9 iDOg2vg8YrfXgPuk5JxOke0zzkwQsSRCxkGKmEBtRyUG5dLzJQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPj18GRjuCBSuZIlgyv9iULemW+cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 Y2Y2NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3Y2VmZDEwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRjZjY3MmQ2LTljODUtNGVjNi1i NmU1LTU3NDdjZWZkMTBjNS80Y2Y2NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3Y2Vm ZDEwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAHsswDgQCAAIwCAMGACYgAShQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCNuTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFxvEVyYNF3g1YyPMIckHfd+7v jG2J4nqTfXIVSkHxy+SVu5PwNgi05kqjdYBHQSluzEahTGYl5oxrg2rLVbhif6MX Tv0zIrocsz/Xfp4QfqGWWFiEcpWLh1Q6QYtX7Dlv2bbtj4fO2Kr82x1jZqtTT2IW lgNkq2E1lZsEHWzdDoTzF553wWHtAlyXGnASGb9Eg4A/GoOsjJemoKQvAD2D8N/w LNnXiEwZr1k5Mm1zacHIWHfXRRoH4RtvPHaly6QNo+ypI1aYfu0kI2A1VyrRk/m/ U3bPNuLy97kIAvk2ybMG2zkA7F7ZbsQcNQ1iHkUtosNEbQ7Uvyl4lpXuMCgu -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:28 2025 by rpki-client