$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer File: d3de683a-04b1-4e1c-94c5-cb45e983323d.cer (raw, json) Hash identifier: vjMawjWOVk1Q3VrnXRkuFqII3bjl0gJjaGc7e9iojO4= Subject key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABEA943856B6634830745F020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 12:45:24 +0000 Certificate not after: Sun 07 Nov 2027 13:45:24 +0000 Subordinate resources: AS: 398888 IP: 128.254.220.0/22 IP: 163.123.216.0/24 IP: 2602:fd02::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:a9:43:85:6b:66:34:83:07:45:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 4 12:45:24 2025 GMT Not After : Nov 7 13:45:24 2027 GMT Subject: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:08:e5:d2:16:32:de:b6:dc:01:60:76:f0: 96:0c:33:15:43:41:b6:fd:3d:06:70:5e:bc:3f:9a: 24:16:7a:53:c5:20:3e:98:43:c7:0b:db:dd:53:77: ac:8c:7c:a1:bc:c0:e1:75:f5:f9:57:1d:f1:d2:08: 41:78:40:8e:df:bf:91:5e:4d:18:3e:c9:3e:27:07: 0e:c5:f8:fb:e6:0f:a6:98:f7:4c:19:06:94:df:78: 3d:a6:41:4b:da:4b:7e:3b:07:53:63:35:46:1b:4b: 78:bb:22:19:88:82:cb:66:77:b8:6b:0b:54:f6:35: 20:cb:b2:1e:a6:ec:0a:5f:ca:51:82:8c:1e:8e:61: 83:67:94:ff:d2:fe:97:83:9f:b8:5d:68:fe:8b:c6: 4b:5b:e1:a7:68:b5:d8:16:58:02:01:58:ad:16:fb: 27:d9:5b:41:e8:d5:ea:51:b3:a7:c2:76:3b:d0:b6: 68:55:3d:53:e4:2b:89:de:e4:70:6f:dc:ab:0d:da: c8:cf:0f:60:59:a9:3a:8d:0c:74:ac:58:9e:7c:01: 68:b4:65:46:14:20:c5:19:06:23:54:10:d9:bf:70: 11:e1:27:f1:d2:8f:e0:3f:a0:b4:58:29:46:4e:fe: d8:61:88:69:99:9a:27:fe:53:57:27:cb:16:51:33: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/22 163.123.216.0/24 IPv6: 2602:fd02::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1c:11:88:58:c6:7f:32:fd:8d:eb:37:38:96:14:c6:50:e5: d7:f4:30:8c:13:73:12:a9:c0:b5:89:fa:da:12:13:26:14:ec: c1:97:5b:7e:4f:3e:f2:03:82:b1:56:bd:c5:a1:98:c9:e8:ae: 2e:ea:42:d2:a1:3e:ad:4e:64:1c:14:0f:df:98:9f:8b:11:33: 41:eb:cd:72:52:37:9b:3b:90:73:66:af:c5:e6:b2:ee:43:8f: 5b:95:16:7a:3a:1a:18:c3:39:69:b7:72:e8:f4:46:58:e1:90: 47:d4:b0:8e:52:f3:a9:1a:41:47:82:74:25:41:a9:13:74:29: a4:46:16:49:cc:00:62:dd:08:7d:96:be:27:d1:b9:ea:b8:5a: 59:f8:85:be:5a:f4:77:8a:0a:2c:07:40:9a:c3:63:8a:c8:d6: 55:91:c7:19:a1:d2:a3:34:dc:0b:aa:3a:f1:1c:d5:d2:cd:29: 52:1f:23:18:1b:46:1b:a3:7f:42:c9:ef:e6:34:8f:5d:81:2b: 8c:0b:c3:1e:83:7b:1d:8a:44:d6:d1:d7:a4:79:f6:23:93:70: 73:8c:0d:38:6e:6c:84:3c:ed:22:61:09:50:54:d3:2c:78:72: 10:f2:f6:84:3b:3b:f3:a0:73:c8:4c:21:78:94:1a:94:0f:f0: 94:33:b9:e7 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEq+qUOFa2Y0gwdF8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNDEyNDUyNFoXDTI3MTEwNzEzNDUyNFowLzEtMCsGA1UEAxMk ZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMzMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y0I5dIWMt623AFgdvCWDDMVQ0G2/T0GcF68 P5okFnpTxSA+mEPHC9vdU3esjHyhvMDhdfX5Vx3x0ghBeECO37+RXk0YPsk+JwcO xfj75g+mmPdMGQaU33g9pkFL2kt+OwdTYzVGG0t4uyIZiILLZne4awtU9jUgy7Ie puwKX8pRgowejmGDZ5T/0v6Xg5+4XWj+i8ZLW+GnaLXYFlgCAVitFvsn2VtB6NXq UbOnwnY70LZoVT1T5CuJ3uRwb9yrDdrIzw9gWak6jQx0rFiefAFotGVGFCDFGQYj VBDZv3AR4Sfx0o/gP6C0WClGTv7YYYhpmZon/lNXJ8sWUTPG0QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCH9KwgdoWB2o9WQlYuYXT7gm/GkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k M2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzZGU2ODNhLTA0YjEtNGUxYy05 NGM1LWNiNDVlOTgzMzIzZC9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4 MzMyM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKA/twDBACje9gwDgQCAAIwCAMGBCYC/QIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2HBGIWMZ/Mv2N6zc4 lhTGUOXX9DCME3MSqcC1ifraEhMmFOzBl1t+Tz7yA4KxVr3FoZjJ6K4u6kLSoT6t TmQcFA/fmJ+LETNB681yUjebO5BzZq/F5rLuQ49blRZ6OhoYwzlpt3Lo9EZY4ZBH 1LCOUvOpGkFHgnQlQakTdCmkRhZJzABi3Qh9lr4n0bnquFpZ+IW+WvR3igosB0Ca w2OKyNZVkccZodKjNNwLqjrxHNXSzSlSHyMYG0Ybo39Cye/mNI9dgSuMC8Meg3sd ikTW0dekefYjk3BzjA04bmyEPO0iYQlQVNMseHIQ8vaEOzvzoHPITCF4lBqUD/CU M7nn -----END CERTIFICATE-----Generated at Sat Aug 23 14:39:58 2025 by rpki-client