$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer File: a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer (raw, json) Hash identifier: 8HsF7qyY6aNn2dgryIUEq0EPtpSzmSjivDtpxVK0eCU= Subject key identifier: E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD399675DF3DC3A1D1AB8D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 00:45:25 +0000 Certificate not after: Mon 15 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 199.26.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:99:67:5d:f3:dc:3a:1d:1a:b8:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 12 00:45:25 2025 GMT Not After : Nov 15 01:45:25 2027 GMT Subject: CN=a2accc41-8d57-4ddb-9f27-d50fabfdaeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:5e:fa:da:51:87:3b:d4:6f:dc:93:b9:6e: b3:d1:39:4e:57:c0:13:ac:90:2d:7b:10:7a:66:c0: ab:a0:6f:c1:73:79:93:fc:7a:bd:9d:13:f4:6c:d3: 2c:01:bc:82:b9:7f:fa:46:17:62:5c:8c:e7:6d:19: 7a:fe:d2:d5:c2:0e:b0:92:9c:b4:51:f4:7e:35:24: 62:35:18:15:5a:62:31:5e:4f:41:b4:28:b4:2b:84: ac:1d:d7:8e:26:00:60:97:e8:9f:8f:7c:41:37:bc: 81:62:bd:c4:94:f8:b7:a3:7d:4f:c6:0c:9b:85:1a: e1:52:38:4a:c1:35:89:69:c7:5b:bd:44:32:28:01: de:79:0e:f0:0e:d0:1b:7f:be:b3:5a:2e:82:e6:f6: 09:e7:17:4d:cc:81:d3:b3:6f:0e:36:51:a0:7e:d0: 1b:9b:b4:24:02:12:5a:95:1c:2a:8f:e4:3d:d2:e1: 0c:fd:74:b6:90:e6:db:c5:81:24:6b:cc:5f:d2:2d: f5:a6:61:e4:69:e0:49:d1:3d:38:c2:62:7f:1f:5a: 6d:34:77:ea:e2:d2:72:21:0b:b8:8e:c3:33:a9:ab: cf:69:cd:81:03:19:51:1d:6f:d6:a8:b1:ff:f3:0f: d4:01:7a:43:29:65:b0:09:a1:2c:d3:03:f7:7f:09: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.26.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d5:2f:38:03:39:e1:2c:74:1c:e6:c9:9a:aa:59:d2:44:02: e5:9f:9d:20:16:f3:0c:22:9c:25:16:ab:43:80:b3:c2:f4:a4: 47:0e:b7:a2:66:87:81:cf:e6:70:57:a7:6c:9b:26:46:7f:f3: e3:c2:eb:ea:ff:ab:8b:6e:db:6d:23:e1:ef:58:42:50:da:61: 82:dd:99:30:ed:22:dc:c5:2e:39:42:c1:bf:2f:49:15:62:ce: c8:f5:73:5c:97:0c:5e:26:b1:ed:40:bb:e9:a6:af:21:ef:e3: 74:28:bb:d7:4d:0b:e0:13:b5:6f:c8:55:e8:8d:be:d6:26:ad: 95:4f:a6:f3:ec:77:17:8c:7b:72:ee:be:dc:75:58:19:bd:a4: cc:cb:8d:f7:c3:90:b2:b7:a3:7b:90:f4:59:c5:49:5f:7e:9a: 73:1c:af:e4:ea:7c:d6:c9:fe:23:19:ea:da:07:d8:d2:17:e6: e3:16:6c:de:69:24:b2:d7:dd:9e:d4:78:dd:45:f8:cb:7b:0d: 50:f6:6a:87:9e:f4:b2:65:3b:da:b6:c7:00:7e:39:cb:06:45: 3c:0a:a7:d2:30:5d:84:31:91:be:43:be:9c:51:23:42:33:f4: 13:87:35:56:0d:65:b9:34:4d:09:74:16:97:f5:6e:9b:33:f4: 5e:f8:d8:13 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErTmWdd89w6HRq41gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMjAwNDUyNVoXDTI3MTExNTAxNDUyNVowLzEtMCsGA1UEAxMk YTJhY2NjNDEtOGQ1Ny00ZGRiLTlmMjctZDUwZmFiZmRhZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhe+tpRhzvUb9yTuW6z0TlOV8ATrJAtexB6 ZsCroG/Bc3mT/Hq9nRP0bNMsAbyCuX/6RhdiXIznbRl6/tLVwg6wkpy0UfR+NSRi NRgVWmIxXk9BtCi0K4SsHdeOJgBgl+ifj3xBN7yBYr3ElPi3o31PxgybhRrhUjhK wTWJacdbvUQyKAHeeQ7wDtAbf76zWi6C5vYJ5xdNzIHTs28ONlGgftAbm7QkAhJa lRwqj+Q90uEM/XS2kObbxYEka8xf0i31pmHkaeBJ0T04wmJ/H1ptNHfq4tJyIQu4 jsMzqavPac2BAxlRHW/WqLH/8w/UAXpDKWWwCaEs0wP3fwm5RQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFORYcUXtoAfiC1iGPRVxsvSS+KuLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h MmFjY2M0MS04ZDU3LTRkZGItOWYyNy1kNTBmYWJmZGFlZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2EyYWNjYzQxLThkNTctNGRkYi05 ZjI3LWQ1MGZhYmZkYWVlYi9hMmFjY2M0MS04ZDU3LTRkZGItOWYyNy1kNTBmYWJm ZGFlZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHGmgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL9UvOAM54Sx0HObJmqpZ 0kQC5Z+dIBbzDCKcJRarQ4CzwvSkRw63omaHgc/mcFenbJsmRn/z48Lr6v+ri27b bSPh71hCUNphgt2ZMO0i3MUuOULBvy9JFWLOyPVzXJcMXiax7UC76aavIe/jdCi7 100L4BO1b8hV6I2+1iatlU+m8+x3F4x7cu6+3HVYGb2kzMuN98OQsreje5D0WcVJ X36acxyv5Op81sn+Ixnq2gfY0hfm4xZs3mkkstfdntR43UX4y3sNUPZqh570smU7 2rbHAH45ywZFPAqn0jBdhDGRvkO+nFEjQjP0E4c1Vg1luTRNCXQWl/VumzP0XvjY Ew== -----END CERTIFICATE-----Generated at Sun Aug 24 05:29:17 2025 by rpki-client