$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer File: 5c9821b2-602d-4808-a33a-b2390c4ea020.cer (raw, json) Hash identifier: oA3wKnoucUsRGz1mW+wQHnUHC4tR1y19O/Bi8fFU0RA= Subject key identifier: AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC2D94A60CF4B44EF6914E260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 00:45:23 +0000 Certificate not after: Tue 09 Nov 2027 01:45:23 +0000 Subordinate resources: IP: 208.75.132.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:d9:4a:60:cf:4b:44:ef:69:14:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 6 00:45:23 2025 GMT Not After : Nov 9 01:45:23 2027 GMT Subject: CN=5c9821b2-602d-4808-a33a-b2390c4ea020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:ec:f4:92:f7:01:84:9b:6d:36:56:5d:aa: b0:c6:45:29:77:d7:07:f9:c6:ad:b0:7d:24:01:c4: 75:41:07:48:49:28:b9:5a:23:a4:51:49:4f:59:b0: 25:48:31:61:bc:ff:3d:91:f6:36:85:db:bd:07:eb: 9d:a5:7b:36:65:1b:e4:2d:22:5c:14:aa:2d:47:9f: 5a:1e:bc:ad:8f:d5:a8:b0:ad:6f:18:38:14:fb:4b: 81:3d:0b:4c:d7:f4:28:2a:16:7e:b9:ba:e2:a7:5a: 7b:7c:c1:8e:7f:27:7d:87:a2:33:4d:38:76:3d:4b: 5f:cc:1d:56:2f:2a:33:80:f8:e0:66:dc:8f:c4:76: 48:94:3f:5a:17:a4:3b:6c:40:8b:c2:6f:98:fa:82: 69:d5:5b:f1:c1:0d:76:26:09:5b:2b:fa:df:0d:1e: 7d:bf:41:29:1e:9f:24:5b:73:ae:cd:ce:52:f1:bb: c8:1b:9c:94:89:da:1f:ef:cb:d8:12:e1:31:cb:1e: 83:dd:36:f5:91:3a:32:5a:20:2c:b4:9d:19:09:fa: 49:2e:1c:e5:9a:9c:43:7c:37:97:13:26:8e:53:b9: 8f:8f:35:2f:39:6e:7f:6c:5a:f0:61:82:ce:1f:cc: 2e:1f:c5:95:f4:34:7b:cb:ac:fb:29:c9:17:85:ae: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.75.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:58:80:16:8e:ce:a3:01:91:a0:fa:43:f6:43:df:fb:75:fa: 7a:9a:88:8c:e6:73:b4:15:fd:27:b0:aa:44:70:d6:fe:3e:8b: 23:60:86:53:5f:bb:10:42:25:51:00:c3:39:b0:d6:eb:33:fc: dc:f8:0b:38:85:50:31:43:22:94:8b:58:f6:bc:21:dd:b1:29: f1:cd:f2:b2:7f:51:0e:a0:e6:4a:e0:e6:ae:69:15:7c:54:29: fb:ee:da:35:97:ca:a0:6e:57:ed:85:ae:3a:60:43:f1:c1:89: 8a:62:fe:21:b6:5e:1b:fa:e1:f1:a2:bc:87:17:d5:78:43:19: 7f:51:d4:b2:84:28:25:7e:4a:d5:af:72:20:61:1b:3d:65:1f: a3:fb:5e:8d:99:1f:5f:40:da:21:d9:9d:b6:a3:60:00:41:31: 58:c5:61:7e:76:aa:15:70:ab:b2:14:e8:e5:cd:32:25:22:b1: c9:5e:4f:5a:1f:b7:65:d8:01:82:b2:d5:83:87:ca:a7:56:62: 68:b4:28:e4:df:3e:c9:a0:64:37:d2:74:01:7e:44:88:9c:af: 7d:23:1c:f3:74:bd:c2:e5:13:ce:9d:d5:24:55:6a:94:5b:e1: de:c6:04:a4:c1:43:4f:f8:28:39:6d:e2:4d:56:f7:8a:f6:ad: a3:dd:a2:4d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErC2Upgz0tE72kU4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNjAwNDUyM1oXDTI3MTEwOTAxNDUyM1owLzEtMCsGA1UEAxMk NWM5ODIxYjItNjAyZC00ODA4LWEzM2EtYjIzOTBjNGVhMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv63s9JL3AYSbbTZWXaqwxkUpd9cH+catsH0k AcR1QQdISSi5WiOkUUlPWbAlSDFhvP89kfY2hdu9B+udpXs2ZRvkLSJcFKotR59a Hrytj9WosK1vGDgU+0uBPQtM1/QoKhZ+ubrip1p7fMGOfyd9h6IzTTh2PUtfzB1W LyozgPjgZtyPxHZIlD9aF6Q7bECLwm+Y+oJp1VvxwQ12JglbK/rfDR59v0EpHp8k W3Ouzc5S8bvIG5yUidof78vYEuExyx6D3Tb1kToyWiAstJ0ZCfpJLhzlmpxDfDeX EyaOU7mPjzUvOW5/bFrwYYLOH8wuH8WV9DR7y6z7KckXha5owwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK9m02dBjBn0zDXMAXu2gY+L106FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 Yzk4MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5MGM0ZWEwMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVjOTgyMWIyLTYwMmQtNDgwOC1h MzNhLWIyMzkwYzRlYTAyMC81Yzk4MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5MGM0 ZWEwMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQS4QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPFiAFo7OowGRoPpD9kPf +3X6epqIjOZztBX9J7CqRHDW/j6LI2CGU1+7EEIlUQDDObDW6zP83PgLOIVQMUMi lItY9rwh3bEp8c3ysn9RDqDmSuDmrmkVfFQp++7aNZfKoG5X7YWuOmBD8cGJimL+ IbZeG/rh8aK8hxfVeEMZf1HUsoQoJX5K1a9yIGEbPWUfo/tejZkfX0DaIdmdtqNg AEExWMVhfnaqFXCrshTo5c0yJSKxyV5PWh+3ZdgBgrLVg4fKp1ZiaLQo5N8+yaBk N9J0AX5EiJyvfSMc83S9wuUTzp3VJFVqlFvh3sYEpMFDT/goOW3iTVb3ivato92i TQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:19 2025 by rpki-client