$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer File: a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer (raw, json) Hash identifier: 3CpNBBygJgzaEwUa1Z4WB6NIEUnGRKOf+Gmpv/J6zkU= Subject key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ACE040A08A43781EC6AED1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 23.177.72.0/24 IP: 2602:f90c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:0a:08:a4:37:81:ec:6a:ed:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:ca:ae:2e:a2:a3:94:c9:3f:4a:22:3d:9d: c3:b3:f3:e0:8b:3d:b4:b1:60:c9:90:92:44:7f:67: fa:22:7c:fe:12:61:9b:65:ea:f0:7a:bb:f0:ba:38: a4:bc:35:6f:9d:56:0c:cb:ae:11:b4:20:a4:b5:a9: 69:54:ae:4e:1b:02:44:3f:15:4b:51:ff:8b:a8:bf: 0b:33:3a:c4:84:b2:4b:c7:66:92:24:c0:2a:dd:c5: 10:81:7b:f5:80:96:9a:cf:a5:2b:6e:b9:2b:30:78: 7b:f3:26:ae:1f:41:36:80:36:a5:3b:45:8e:f1:5d: cc:ce:cc:d2:47:58:25:ee:bd:6e:43:2e:62:77:54: 81:7d:43:f4:1e:33:a7:73:a6:b7:31:64:6a:0f:13: ce:99:8d:d5:a4:3e:8e:45:71:a9:bc:2d:d2:7d:c2: bb:cb:73:06:20:e6:c3:7e:e6:1b:21:38:30:28:51: 65:b6:86:3e:5d:f5:ab:18:5e:f1:83:cd:80:fa:ee: d6:c6:d6:42:88:dc:49:67:61:46:f6:c2:c6:05:7c: ce:c9:73:51:0c:8a:55:15:70:8a:87:34:c7:f2:5a: 4b:9b:fa:4c:90:80:28:b1:bc:05:2f:08:c3:b7:f1: dd:66:9f:1c:be:61:4d:fd:72:fd:ff:e8:bb:9a:88: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.72.0/24 IPv6: 2602:f90c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:39:c9:29:fe:a0:c2:36:ff:72:51:13:5b:3b:82:a6:8c:06: 22:5a:c5:ac:51:2b:c4:e4:04:a1:8d:90:74:0c:d5:8f:c9:0c: 13:bd:ec:77:2d:80:a6:4b:78:f2:ba:cd:fb:35:70:1e:d7:e8: f1:a4:85:4a:65:33:4f:fa:8d:39:ff:b1:28:2e:c5:79:c9:80: 1e:fd:33:89:68:ef:7c:4d:62:ae:04:60:e6:50:8e:e9:8c:92: 47:f0:fb:a7:22:a1:6d:8c:f6:d9:de:1f:6a:c0:f4:42:4a:c5: ad:42:96:4b:59:bf:79:20:00:db:5d:1c:f7:49:09:7d:f3:ec: 23:89:ee:f6:c8:89:b7:80:ea:a6:e2:16:a2:27:0d:7c:4f:be: be:48:82:12:ec:25:1a:6d:f2:2a:b8:79:d2:d3:01:44:6c:97: ee:5b:c4:6f:5c:41:a9:63:11:11:d4:12:56:16:56:ff:1f:71: 2c:43:26:12:e5:c8:30:3f:ca:be:8f:08:9d:f3:18:e0:c6:14: 66:54:b3:37:05:d0:de:9c:cf:b9:72:7a:b7:3d:9c:66:c1:2e: d1:eb:2d:64:15:73:da:56:97:a8:70:9a:ae:3c:f0:56:dd:c6: b4:98:e3:5a:ff:69:6c:62:43:81:88:09:bb:4c:19:a0:ff:76: 2e:c7:d6:72 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErOBAoIpDeB7GrtEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk YTllNWUyZmUtZGIzMy00MDBhLWIxY2EtODA1ZGU1MmVhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiijKri6io5TJP0oiPZ3Ds/Pgiz20sWDJkJJE f2f6Inz+EmGbZerwervwujikvDVvnVYMy64RtCCktalpVK5OGwJEPxVLUf+LqL8L MzrEhLJLx2aSJMAq3cUQgXv1gJaaz6UrbrkrMHh78yauH0E2gDalO0WO8V3MzszS R1gl7r1uQy5id1SBfUP0HjOnc6a3MWRqDxPOmY3VpD6ORXGpvC3SfcK7y3MGIObD fuYbITgwKFFltoY+XfWrGF7xg82A+u7WxtZCiNxJZ2FG9sLGBXzOyXNRDIpVFXCK hzTH8lpLm/pMkIAosbwFLwjDt/HdZp8cvmFN/XL9/+i7moiCrQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFADSiKWRIlBeP/m012VrB26KBsl/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUyZWFiNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZTVlMmZlLWRiMzMtNDAwYS1i MWNhLTgwNWRlNTJlYWI2YS9hOWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUy ZWFiNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsUgwDgQCAAIwCAMGACYC+QwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACQ5ySn+oMI2/3JRE1s7gqaMBiJaxaxRK8TkBKGNkHQM1Y/JDBO97HctgKZLePK6 zfs1cB7X6PGkhUplM0/6jTn/sSguxXnJgB79M4lo73xNYq4EYOZQjumMkkfw+6ci oW2M9tneH2rA9EJKxa1ClktZv3kgANtdHPdJCX3z7COJ7vbIibeA6qbiFqInDXxP vr5IghLsJRpt8iq4edLTAURsl+5bxG9cQaljERHUElYWVv8fcSxDJhLlyDA/yr6P CJ3zGODGFGZUszcF0N6cz7lyerc9nGbBLtHrLWQVc9pWl6hwmq488FbdxrSY41r/ aWxiQ4GICbtMGaD/di7H1nI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:24 2025 by rpki-client