$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer File: a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer (raw, json) Hash identifier: nLBvQa1uOTGdrkMpRPFOLa7VTJvM4iJOXeqXafSp5K4= Subject key identifier: 8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE72431A9F9380743DB950000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 00:45:25 +0000 Certificate not after: Mon 22 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 394019 IP: 23.139.248.0/24 IP: 64.239.20.0/23 IP: 172.96.162.0/24 IP: 199.79.156.0/24 IP: 2602:fb32::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:24:31:a9:f9:38:07:43:db:95:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 19 00:45:25 2025 GMT Not After : Nov 22 01:45:25 2027 GMT Subject: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:cb:63:c0:ac:07:06:2a:40:88:f4:d4:76: 51:4a:17:44:89:85:82:1f:eb:62:00:7f:4e:18:36: ba:62:c3:55:46:98:a1:8a:3c:c1:f0:e8:52:25:33: b7:3b:7d:b9:4a:87:28:c7:64:24:2c:26:c0:44:e0: 4d:1c:e9:77:40:c4:17:82:66:74:9c:60:4c:7d:4d: e5:32:60:c5:7f:6c:89:f1:e8:fc:94:69:40:e3:b4: f8:80:16:62:ea:a7:b0:b3:2c:d4:27:76:e5:ad:97: bc:e1:3f:cd:c5:a2:77:17:49:bc:91:ff:27:ac:e4: 94:d0:78:4d:4a:ae:5f:04:be:15:6e:e2:cd:2a:f9: 02:e0:0b:d9:7e:87:15:01:c2:e9:c0:6f:14:b9:85: bb:3a:6b:95:35:f2:55:99:8f:73:cb:6f:00:4e:9e: 94:81:f1:9b:b5:0b:86:c5:f7:d4:00:e1:74:e5:98: 5f:ce:ef:e4:46:51:f7:ab:40:31:85:24:8c:61:34: b7:09:c1:f5:b3:a1:39:1b:41:74:23:de:9f:ac:1c: 34:06:d8:fa:18:28:43:d2:87:f7:72:c2:14:81:f9: 3b:a6:45:99:3d:13:67:cd:ba:b2:c4:ed:5e:4e:d4: 87:44:d8:6e:06:a3:24:f0:a1:ed:b2:fc:c5:77:75: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.139.248.0/24 64.239.20.0/23 172.96.162.0/24 199.79.156.0/24 IPv6: 2602:fb32::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2a:8c:af:b4:7a:f7:c6:0d:1d:16:e0:7a:cc:4a:70:f9:cb: a6:b2:7c:ca:e0:75:6a:29:66:76:73:8c:c8:57:64:fa:0a:07: e2:e2:0b:2f:09:f2:5b:e5:c1:95:48:61:b4:bc:da:01:cc:59: 58:98:45:33:f1:5e:5a:bb:85:5c:16:a6:04:62:ac:a5:29:06: 75:c8:e1:15:41:c6:7a:c3:0c:a9:81:a3:02:a0:71:9c:70:eb: b6:6e:14:1d:95:11:43:97:44:e6:d5:8c:48:32:a2:ee:a6:1f: 20:7e:d6:56:ca:67:c1:c1:e4:d3:ff:9d:97:fc:d7:2b:8f:08: d8:a1:97:03:27:26:f2:45:b4:ff:af:5f:9d:af:b8:cf:b5:0f: 5c:81:e8:f5:8c:01:a2:c0:16:01:7e:ed:ab:b5:32:29:b0:34: 0e:0e:84:47:5c:7f:dc:fc:6e:cc:f9:25:3b:c1:46:7c:6c:bd: 1d:93:e8:50:e5:eb:fe:af:62:47:25:00:ab:d1:bf:1d:28:a0: 42:ef:d5:db:1d:ae:5f:55:18:ec:2e:2e:17:72:97:be:91:40: e9:ef:a2:07:c8:42:b4:8b:20:31:b1:f3:3f:25:31:8a:29:99: ea:e7:02:ff:8a:b2:c8:a1:8a:25:f4:c5:f5:52:62:1b:06:15: 88:cf:10:27 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWErnJDGp+TgHQ9uVAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxOTAwNDUyNVoXDTI3MTEyMjAxNDUyNVowLzEtMCsGA1UEAxMk YTlkYzg0MmEtZDVjZC00YzAwLTk1ZDgtMjU0MmM1OGQ0MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7zLY8CsBwYqQIj01HZRShdEiYWCH+tiAH9O GDa6YsNVRpihijzB8OhSJTO3O325Socox2QkLCbAROBNHOl3QMQXgmZ0nGBMfU3l MmDFf2yJ8ej8lGlA47T4gBZi6qewsyzUJ3blrZe84T/NxaJ3F0m8kf8nrOSU0HhN Sq5fBL4VbuLNKvkC4AvZfocVAcLpwG8UuYW7OmuVNfJVmY9zy28ATp6UgfGbtQuG xffUAOF05Zhfzu/kRlH3q0AxhSSMYTS3CcH1s6E5G0F0I96frBw0Btj6GChD0of3 csIUgfk7pkWZPRNnzbqyxO1eTtSHRNhuBqMk8KHtsvzFd3Xh/QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFI6m/4z5hyMmnV3NvD41ppnCH9mDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWRjODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQyYzU4ZDQyZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZGM4NDJhLWQ1Y2QtNGMwMC05 NWQ4LTI1NDJjNThkNDJlZS9hOWRjODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQyYzU4 ZDQyZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAAXi/gDBAFA7xQDBACsYKIDBADHT5wwDgQCAAIw CAMGBCYC+zIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYDIzBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC KoyvtHr3xg0dFuB6zEpw+cumsnzK4HVqKWZ2c4zIV2T6Cgfi4gsvCfJb5cGVSGG0 vNoBzFlYmEUz8V5au4VcFqYEYqylKQZ1yOEVQcZ6wwypgaMCoHGccOu2bhQdlRFD l0Tm1YxIMqLuph8gftZWymfBweTT/52X/NcrjwjYoZcDJybyRbT/r1+dr7jPtQ9c gej1jAGiwBYBfu2rtTIpsDQODoRHXH/c/G7M+SU7wUZ8bL0dk+hQ5ev+r2JHJQCr 0b8dKKBC79XbHa5fVRjsLi4Xcpe+kUDp76IHyEK0iyAxsfM/JTGKKZnq5wL/irLI oYol9MX1UmIbBhWIzxAn -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:15 2025 by rpki-client