$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer File: a2b44413-47b6-4396-9c34-fb085c0a498f.cer (raw, json) Hash identifier: dRxdYt8Y2MNVzr7gquSn4CWFUsrFXiWY0qfqjWcBI/A= Subject key identifier: 7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE5BED90C88DA01E80A3BC4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 12:45:24 +0000 Certificate not after: Sun 21 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 23.178.24.0/24 IP: 2602:f8f1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:be:d9:0c:88:da:01:e8:0a:3b:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 18 12:45:24 2025 GMT Not After : Nov 21 13:45:24 2027 GMT Subject: CN=a2b44413-47b6-4396-9c34-fb085c0a498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:10:e2:5a:a5:23:45:b3:a7:84:80:07:ef: e6:bb:71:05:1d:28:18:9f:cb:85:f5:3f:90:d0:b7: e9:be:72:fe:75:77:b8:93:07:72:8e:69:4d:68:ff: b6:fa:68:bc:ba:20:56:7e:1f:b7:49:37:56:7b:3b: 33:5e:29:d9:db:61:0b:56:2f:ec:f4:28:42:17:a4: 85:0c:03:dc:36:67:1e:ff:45:af:fb:ea:69:22:d2: ec:e7:26:3d:01:d8:40:4e:eb:a7:53:50:16:c4:51: 56:1d:fb:19:cb:be:e5:49:03:32:d2:eb:60:e8:bc: bb:71:3c:24:8a:be:40:d4:21:00:5d:05:19:7b:fe: 36:51:8c:a0:d2:29:ec:67:46:de:d8:d4:fe:d6:72: 9c:77:44:43:6e:e6:59:02:3c:1e:e1:e4:af:d8:e3: 6e:60:a2:80:c0:59:6b:f0:e1:5e:e3:f2:eb:68:42: 8b:0b:a2:2f:25:26:63:81:07:69:1f:17:e6:c8:1b: cd:00:6a:74:dc:5a:dd:9e:64:a5:37:ce:8d:bb:33: 62:e6:6e:90:90:ef:52:ea:4c:ce:16:85:ac:30:33: c5:12:fe:e7:cb:ec:4b:5c:4e:a8:45:10:fb:6c:94: 54:47:7f:75:0a:b1:67:af:5a:47:55:9b:41:f8:a7: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.178.24.0/24 IPv6: 2602:f8f1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:50:5a:6a:8b:f9:f0:a0:bf:22:73:69:a2:20:53:bf:7d: 41:37:02:bc:db:70:eb:5f:3e:0f:c1:c3:ce:74:53:a4:cb:fc: 36:13:e5:2e:a0:a6:2f:3d:b3:13:81:6a:79:23:88:47:70:25: 54:10:ad:8c:f3:22:0b:d2:ef:1c:a0:44:70:6b:ac:3a:6d:73: bf:90:0c:0a:69:28:3d:6e:e5:69:29:a9:ed:c8:8b:97:44:d2: e8:20:ba:73:8c:30:25:12:99:f8:b1:66:27:50:5d:fe:8f:29: 76:56:86:9c:01:48:a5:62:36:7a:a2:d8:9b:4f:e2:fe:f7:3d: 87:d4:c9:df:15:54:07:a9:52:5b:96:6b:e6:d7:57:9b:76:92: 44:76:e5:a0:da:93:35:c3:b2:f6:c2:c3:fe:d4:05:82:50:b7: e9:0f:77:e7:b9:ae:fa:d1:27:00:3e:e5:6a:5b:9e:2e:d8:1a: bf:e9:d6:35:7b:1d:5a:ee:18:36:e4:e3:ea:af:c7:b1:ca:36: de:4f:19:a6:11:f9:e9:95:67:62:f6:3d:68:b3:1c:2e:7c:ce: 4e:48:a3:d2:4b:93:6c:44:5c:64:5e:f3:f3:16:26:5e:b8:0d: 17:69:95:53:c4:21:ab:9e:30:a3:11:b7:c3:4a:68:ab:ce:7c: 65:5c:d9:8d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErlvtkMiNoB6Ao7xMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxODEyNDUyNFoXDTI3MTEyMTEzNDUyNFowLzEtMCsGA1UEAxMk YTJiNDQ0MTMtNDdiNi00Mzk2LTljMzQtZmIwODVjMGE0OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrEQ4lqlI0Wzp4SAB+/mu3EFHSgYn8uF9T+Q 0LfpvnL+dXe4kwdyjmlNaP+2+mi8uiBWfh+3STdWezszXinZ22ELVi/s9ChCF6SF DAPcNmce/0Wv++ppItLs5yY9AdhATuunU1AWxFFWHfsZy77lSQMy0utg6Ly7cTwk ir5A1CEAXQUZe/42UYyg0insZ0be2NT+1nKcd0RDbuZZAjwe4eSv2ONuYKKAwFlr 8OFe4/LraEKLC6IvJSZjgQdpHxfmyBvNAGp03FrdnmSlN86NuzNi5m6QkO9S6kzO FoWsMDPFEv7ny+xLXE6oRRD7bJRUR391CrFnr1pHVZtB+KcehwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFH0lNgRrhYxMy9QnRF0/plpI8G3gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h MmI0NDQxMy00N2I2LTQzOTYtOWMzNC1mYjA4NWMwYTQ5OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2EyYjQ0NDEzLTQ3YjYtNDM5Ni05 YzM0LWZiMDg1YzBhNDk4Zi9hMmI0NDQxMy00N2I2LTQzOTYtOWMzNC1mYjA4NWMw YTQ5OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXshgwDgQCAAIwCAMGACYC+PEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD5/UFpqi/nwoL8ic2miIFO/fUE3ArzbcOtfPg/Bw850U6TL/DYT5S6gpi89sxOB ankjiEdwJVQQrYzzIgvS7xygRHBrrDptc7+QDAppKD1u5Wkpqe3Ii5dE0uggunOM MCUSmfixZidQXf6PKXZWhpwBSKViNnqi2JtP4v73PYfUyd8VVAepUluWa+bXV5t2 kkR25aDakzXDsvbCw/7UBYJQt+kPd+e5rvrRJwA+5Wpbni7YGr/p1jV7HVruGDbk 4+qvx7HKNt5PGaYR+emVZ2L2PWizHC58zk5Io9JLk2xEXGRe8/MWJl64DRdplVPE IaueMKMRt8NKaKvOfGVc2Y0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:28 2025 by rpki-client