$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer File: d2de1f15-6014-4202-aea6-3c118c783bfd.cer (raw, json) Hash identifier: RkzcF2+eJV+MZvwo1eh0gXsbiuvoQbZ0HlO5+G1Pons= Subject key identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE45982B5DB60D22F2BC35040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 00:45:25 +0000 Certificate not after: Sun 21 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 2607:b4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:59:82:b5:db:60:d2:2f:2b:c3:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 18 00:45:25 2025 GMT Not After : Nov 21 01:45:25 2027 GMT Subject: CN=d2de1f15-6014-4202-aea6-3c118c783bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:85:7e:63:2a:55:2b:4f:b2:bb:97:ed:f4: 1b:15:7e:b6:fa:9e:6d:2e:0c:ae:15:8a:f8:b1:0c: 97:17:08:59:19:7e:b7:1a:3a:ca:37:12:6a:dc:0a: f6:f6:84:0f:66:21:03:d8:45:16:ad:ca:0b:1b:19: 65:7d:f6:b4:59:9b:ed:41:68:e4:36:41:92:cc:bb: d5:2b:18:5e:9e:7d:c6:ed:94:7d:ae:4b:37:0a:1f: 21:36:66:bf:fa:73:83:13:ef:0b:13:3a:ee:17:27: 76:79:04:81:3a:0b:2a:f9:a2:b5:4b:55:6b:01:32: 7f:b8:89:32:53:89:b7:6e:d7:ca:42:2d:7d:6b:b1: 95:87:f2:86:76:c2:79:0c:35:03:79:4e:20:4d:90: 01:f7:f2:68:f4:4c:7b:3d:dd:ad:07:85:04:ec:ee: 1f:f3:2d:bb:1d:02:aa:cc:68:4d:cb:5d:bf:ba:21: 31:ea:30:81:9a:c0:9a:b0:e9:cb:14:6c:ec:32:7c: 38:08:85:06:7d:bd:89:4d:95:f1:7b:e2:df:0c:ed: 7c:04:85:d6:f2:7a:2a:76:24:35:da:68:18:ae:70: 55:14:5a:53:5a:bd:18:f5:b5:0a:75:dd:7b:9d:60: 57:a3:34:05:42:36:86:7a:1b:c9:77:07:e3:94:c2: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2607:b4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:46:87:8e:6e:2e:3e:d7:d8:e8:0c:1b:96:6d:0c:1e:c6:45: ef:c0:99:6e:f7:1e:74:ff:2d:c3:e8:42:2d:a1:f2:2e:75:f0: a6:08:3b:13:a2:32:d5:3b:36:b5:de:b3:e6:89:01:02:03:ec: 36:87:81:40:89:45:dc:48:4a:25:bc:74:61:e9:53:ea:2e:61: 4f:8d:a7:21:c2:0c:35:77:a7:ef:f3:2a:f6:f2:a6:df:68:16: 7a:9f:b1:9e:4b:83:46:85:96:47:98:67:8e:aa:d0:36:f7:1b: 27:56:e1:25:c4:b2:5c:dc:d6:cd:72:e5:1a:54:20:50:c7:46: 7d:4a:e8:57:60:79:c1:74:71:b0:5f:00:47:cd:3f:bd:09:93: 84:ec:9a:a6:34:0c:9a:81:6f:10:1f:a9:07:f7:9c:b2:53:af: 13:24:0a:1c:90:d4:83:ae:65:d6:51:42:95:63:cd:fc:73:70: b9:df:ac:cc:c7:bf:e7:ec:34:51:ae:3e:85:3a:1c:af:61:3c: 7a:29:2e:f2:a1:7f:95:64:97:18:6d:39:f8:b4:9d:42:34:cc: 37:33:40:33:17:26:98:49:f3:76:c2:73:89:f2:83:dd:f4:ba: 65:b9:02:ca:c7:30:93:af:9a:23:30:8e:d7:a8:e7:cf:2a:04: 01:4b:b3:a3 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWErkWYK122DSLyvDUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxODAwNDUyNVoXDTI3MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk ZDJkZTFmMTUtNjAxNC00MjAyLWFlYTYtM2MxMThjNzgzYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKyFfmMqVStPsruX7fQbFX62+p5tLgyuFYr4 sQyXFwhZGX63GjrKNxJq3Ar29oQPZiED2EUWrcoLGxllffa0WZvtQWjkNkGSzLvV Kxhenn3G7ZR9rks3Ch8hNma/+nODE+8LEzruFyd2eQSBOgsq+aK1S1VrATJ/uIky U4m3btfKQi19a7GVh/KGdsJ5DDUDeU4gTZAB9/Jo9Ex7Pd2tB4UE7O4f8y27HQKq zGhNy12/uiEx6jCBmsCasOnLFGzsMnw4CIUGfb2JTZXxe+LfDO18BIXW8noqdiQ1 2mgYrnBVFFpTWr0Y9bUKdd17nWBXozQFQjaGehvJdwfjlMJ6/wIDAQABo4IEADCC A/wwHQYDVR0OBBYEFH7wPA+eGjWJJKi8/GQ8r+dkLtn1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MmRlMWYxNS02MDE0LTQyMDItYWVhNi0zYzExOGM3ODNiZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QyZGUxZjE1LTYwMTQtNDIwMi1h ZWE2LTNjMTE4Yzc4M2JmZC9kMmRlMWYxNS02MDE0LTQyMDItYWVhNi0zYzExOGM3 ODNiZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB7TAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADpGh45uLj7X2OgMG5Zt DB7GRe/AmW73HnT/LcPoQi2h8i518KYIOxOiMtU7NrXes+aJAQID7DaHgUCJRdxI SiW8dGHpU+ouYU+NpyHCDDV3p+/zKvbypt9oFnqfsZ5Lg0aFlkeYZ46q0Db3GydW 4SXEslzc1s1y5RpUIFDHRn1K6FdgecF0cbBfAEfNP70Jk4TsmqY0DJqBbxAfqQf3 nLJTrxMkChyQ1IOuZdZRQpVjzfxzcLnfrMzHv+fsNFGuPoU6HK9hPHopLvKhf5Vk lxhtOfi0nUI0zDczQDMXJphJ83bCc4nyg930umW5AsrHMJOvmiMwjteo588qBAFL s6M= -----END CERTIFICATE-----Generated at Sat Aug 23 11:33:24 2025 by rpki-client