$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer File: 7ac70716-c89d-41e2-931b-d16e22a87ce6.cer (raw, json) Hash identifier: EfF5MHg2CLnINR2yPUTI/SZT4uHDCjYTiIsHweBVVcA= Subject key identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE5BED8F0E83BFCED4E5FA080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 12:45:24 +0000 Certificate not after: Sun 21 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 23.177.232.0/24 IP: 2602:f8fa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:be:d8:f0:e8:3b:fc:ed:4e:5f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 18 12:45:24 2025 GMT Not After : Nov 21 13:45:24 2027 GMT Subject: CN=7ac70716-c89d-41e2-931b-d16e22a87ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:5d:5b:3c:97:3d:13:08:6f:a1:15:b6:ab: 75:56:1e:06:e8:79:95:13:5a:a8:35:b2:0e:17:17: e2:84:0d:a8:70:80:cb:1a:90:82:54:1b:ff:55:58: a8:ee:34:90:fe:f9:9b:3e:86:19:64:9d:9f:eb:a3: a0:39:2c:21:ef:21:d9:68:48:db:74:0d:8f:e8:4b: e0:87:ad:3a:f6:64:f4:7c:52:36:ae:37:86:e0:df: ff:1d:bc:52:6b:e2:0f:11:20:46:c5:db:04:3b:9e: b0:10:c4:1a:ba:a1:d9:52:e4:be:fb:a6:26:4e:27: 56:1e:8e:b6:d5:79:44:81:85:45:c1:df:17:e4:90: f0:89:f9:0a:b1:a8:12:ce:96:cb:e1:43:2d:bf:0a: f8:80:0f:ad:00:ac:af:d9:11:1e:a5:24:ee:2a:61: b4:fe:77:b7:cf:2b:46:87:2e:dc:c7:90:b7:73:e8: 7b:6b:83:be:ef:63:cc:b4:6d:96:55:bf:de:c2:e3: f1:ce:92:09:9c:44:53:4a:30:b1:fd:e2:70:07:a8: f1:71:fa:a2:ee:94:73:00:f2:f5:4a:40:d0:bb:3d: 25:93:7e:ca:76:3a:b9:73:ef:d4:37:ab:3a:a9:71: b2:67:a2:e4:c5:5a:60:52:56:76:fc:00:9c:e1:c8: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.232.0/24 IPv6: 2602:f8fa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8e:c6:59:79:d1:d1:ca:66:f8:23:ff:a3:1c:22:04:c4:f8: 5b:5e:22:b7:c7:c2:86:97:82:a1:3d:d1:eb:76:55:3a:ea:38: 83:4e:a2:cc:25:ab:a9:af:38:b2:a8:67:dc:d3:27:6a:74:32: b0:fb:c4:af:13:4b:6c:da:8e:63:22:f2:05:2a:ed:7e:bc:d0: 07:7b:14:36:2d:54:62:a3:60:d3:ce:2a:74:da:3e:c7:0d:51: e8:9e:70:e3:2e:9a:59:b3:88:55:9f:b2:ac:fb:7d:03:53:ed: 18:d9:82:da:28:5c:07:bc:62:5e:49:1b:cc:7e:34:a6:55:ef: f5:51:ed:42:8f:e8:38:a3:d2:0a:31:10:86:78:6c:4c:6f:30: b9:6c:e8:85:62:ff:d4:9d:60:3b:81:e4:bb:20:9d:3d:14:2e: fc:1a:dc:87:f9:d6:41:99:ff:ac:de:c9:fd:68:7a:ba:7a:91: f7:1c:a9:4e:51:8c:4e:bc:be:d4:13:b8:10:13:eb:8c:a0:26: 6e:77:73:3f:01:af:63:e5:3f:e2:fa:16:b6:23:f9:c5:ba:89: b5:9a:65:cd:1a:0d:48:41:ff:dc:cc:7c:90:e8:64:06:0a:6b: b1:91:2a:f1:a9:1f:3d:0e:df:cd:18:84:a4:00:6a:4d:1b:4f: 13:5f:9f:09 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErlvtjw6Dv87U5foIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxODEyNDUyNFoXDTI3MTEyMTEzNDUyNFowLzEtMCsGA1UEAxMk N2FjNzA3MTYtYzg5ZC00MWUyLTkzMWItZDE2ZTIyYTg3Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu5dWzyXPRMIb6EVtqt1Vh4G6HmVE1qoNbIO FxfihA2ocIDLGpCCVBv/VVio7jSQ/vmbPoYZZJ2f66OgOSwh7yHZaEjbdA2P6Evg h6069mT0fFI2rjeG4N//HbxSa+IPESBGxdsEO56wEMQauqHZUuS++6YmTidWHo62 1XlEgYVFwd8X5JDwifkKsagSzpbL4UMtvwr4gA+tAKyv2REepSTuKmG0/ne3zytG hy7cx5C3c+h7a4O+72PMtG2WVb/ewuPxzpIJnERTSjCx/eJwB6jxcfqi7pRzAPL1 SkDQuz0lk37Kdjq5c+/UN6s6qXGyZ6LkxVpgUlZ2/ACc4cjGwwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDX+EOlUyy2n64+W99nnDwCm0558MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 YWM3MDcxNi1jODlkLTQxZTItOTMxYi1kMTZlMjJhODdjZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdhYzcwNzE2LWM4OWQtNDFlMi05 MzFiLWQxNmUyMmE4N2NlNi83YWM3MDcxNi1jODlkLTQxZTItOTMxYi1kMTZlMjJh ODdjZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsegwDgQCAAIwCAMGACYC+PoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFKOxll50dHKZvgj/6McIgTE+FteIrfHwoaXgqE90et2VTrqOINOoswlq6mvOLKo Z9zTJ2p0MrD7xK8TS2zajmMi8gUq7X680Ad7FDYtVGKjYNPOKnTaPscNUeiecOMu mlmziFWfsqz7fQNT7RjZgtooXAe8Yl5JG8x+NKZV7/VR7UKP6Dij0goxEIZ4bExv MLls6IVi/9SdYDuB5LsgnT0ULvwa3If51kGZ/6zeyf1oerp6kfccqU5RjE68vtQT uBAT64ygJm53cz8Br2PlP+L6FrYj+cW6ibWaZc0aDUhB/9zMfJDoZAYKa7GRKvGp Hz0O380YhKQAak0bTxNfnwk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:50 2025 by rpki-client