$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer File: 6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer (raw, json) Hash identifier: 5Q2q+X9bWzNO9oe4yRnmNCA5Z0lHRf0pvlCmjCbnk8Q= Subject key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE72431EA77B821BC71D2F9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 00:45:25 +0000 Certificate not after: Mon 22 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 400562 IP: 204.152.22.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:24:31:ea:77:b8:21:bc:71:d2:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 19 00:45:25 2025 GMT Not After : Nov 22 01:45:25 2027 GMT Subject: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:dd:71:a7:2e:37:1b:f4:3a:00:c8:66:72: c3:07:79:2f:9b:e9:f8:0b:9e:d3:fa:30:58:c7:57: 28:8b:bd:d6:b8:1d:28:a2:6c:aa:0c:9a:ab:d4:9e: 8e:b5:75:52:9d:27:b6:2b:07:56:b8:b7:cd:48:86: b7:5e:e8:a3:70:37:81:16:05:2d:0b:96:77:c8:c5: 70:fe:95:b5:cf:bd:34:62:80:97:ec:65:1e:72:7c: 67:05:e8:22:33:5c:7f:d7:d0:8a:f6:5b:d7:97:e6: 8e:04:6b:59:b2:da:e5:8a:c2:54:e8:4f:c6:a1:94: 02:2a:7f:23:b9:31:18:a2:f9:22:76:c1:8a:76:cd: 2c:01:23:cc:f3:4e:92:2a:79:c4:7b:21:37:ff:0b: 7e:1d:f5:5b:41:b3:f2:5a:c9:01:f5:0b:fa:d2:04: a7:38:e3:65:64:0c:c1:e0:ef:4d:6f:0f:0f:77:89: 18:38:9e:a4:62:09:42:dc:75:90:8b:35:20:b4:a7: 79:08:d6:1c:d0:48:5b:19:18:c7:53:b7:6b:cc:18: 65:42:e5:6f:45:02:8c:0c:96:9c:92:14:55:2e:7a: 17:12:07:69:83:8c:ea:b7:d7:17:9e:c7:df:3b:f2: c4:54:24:2c:ba:cc:bc:d3:78:1f:21:b4:1a:e0:83: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.152.22.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e2:9b:f6:35:b9:f8:3c:b4:e4:e1:aa:3d:dd:4f:a7:35:da: 6c:48:5e:d2:b1:dd:2c:45:2d:4d:2c:a4:75:18:52:4a:86:d0: 31:93:58:ff:40:07:66:34:ae:82:c8:bf:1c:36:77:fd:8d:7a: 01:72:00:c3:a5:97:d2:6e:7b:34:b5:a1:f5:df:3c:93:29:57: 8f:f0:9c:5e:9a:66:34:03:fb:f0:9c:d8:08:d7:41:37:ba:c7: 91:e8:94:fd:d4:66:55:bc:9d:e2:8b:18:18:86:b0:f6:d1:00: 8d:44:d1:a4:12:81:5b:f0:fd:42:61:2b:3b:b2:ac:2a:23:6d: 98:dc:04:79:12:07:2a:86:1c:e3:18:37:1d:48:28:73:e6:6c: bd:55:31:cb:ac:1a:bd:f5:87:d7:be:f5:1a:a2:97:2d:4f:ca: de:c9:4f:d4:c8:fb:03:4d:e5:f5:b6:4f:d9:34:84:94:d5:dc: c3:6f:3a:9c:d3:a8:de:d0:ad:b2:f7:23:5e:e4:06:a5:53:52: 50:27:6b:26:e5:73:03:f8:38:6d:34:1b:5c:7f:d5:a3:fd:e5: 32:75:f6:84:13:1d:77:a9:9d:30:99:80:de:66:fd:7b:d8:f4: 33:2a:ea:df:50:81:cb:ad:6b:4c:6d:dc:c3:f5:88:15:28:79: c0:cf:2f:68 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErnJDHqd7ghvHHS+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxOTAwNDUyNVoXDTI3MTEyMjAxNDUyNVowLzEtMCsGA1UEAxMk NmRjZTNiOWMtYmU5NC00NmVjLTg1YWEtZDkzZGRmZGQwOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOndcacuNxv0OgDIZnLDB3kvm+n4C57T+jBY x1coi73WuB0oomyqDJqr1J6OtXVSnSe2KwdWuLfNSIa3XuijcDeBFgUtC5Z3yMVw /pW1z700YoCX7GUecnxnBegiM1x/19CK9lvXl+aOBGtZstrlisJU6E/GoZQCKn8j uTEYovkidsGKds0sASPM806SKnnEeyE3/wt+HfVbQbPyWskB9Qv60gSnOONlZAzB 4O9Nbw8Pd4kYOJ6kYglC3HWQizUgtKd5CNYc0EhbGRjHU7drzBhlQuVvRQKMDJac khRVLnoXEgdpg4zqt9cXnsffO/LEVCQsusy803gfIbQa4IO+xQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGNedAwjdyaIy7DD+uIBPK18uucUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 ZGNlM2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNkZGZkZDA4ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzZkY2UzYjljLWJlOTQtNDZlYy04 NWFhLWQ5M2RkZmRkMDhlMi82ZGNlM2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNkZGZk ZDA4ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMmBYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhyyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABDim/Y1ufg8tOThqj3dT6c12mxIXtKx3SxFLU0spHUYUkqG 0DGTWP9AB2Y0roLIvxw2d/2NegFyAMOll9JuezS1ofXfPJMpV4/wnF6aZjQD+/Cc 2AjXQTe6x5HolP3UZlW8neKLGBiGsPbRAI1E0aQSgVvw/UJhKzuyrCojbZjcBHkS ByqGHOMYNx1IKHPmbL1VMcusGr31h9e+9Rqily1Pyt7JT9TI+wNN5fW2T9k0hJTV 3MNvOpzTqN7QrbL3I17kBqVTUlAnayblcwP4OG00G1x/1aP95TJ19oQTHXepnTCZ gN5m/XvY9DMq6t9Qgcuta0xt3MP1iBUoecDPL2g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:08 2025 by rpki-client