$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer File: d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer (raw, json) Hash identifier: pMajulDuCVueFoaLH3t9guxKjcGcDrIodtsAdtI92Hk= Subject key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AF3B44793DD721F9EB517A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 Aug 2025 12:45:26 +0000 Certificate not after: Fri 26 Nov 2027 13:45:26 +0000 Subordinate resources: IP: 167.253.136.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:b4:47:93:dd:72:1f:9e:b5:17:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 23 12:45:26 2025 GMT Not After : Nov 26 13:45:26 2027 GMT Subject: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:8e:47:2d:94:89:10:fa:e5:29:85:b5:6e: 90:50:b2:b1:a6:5e:b7:08:11:3a:3e:a1:06:89:1f: 0e:9c:3d:6a:f3:69:fa:7e:a8:c4:2e:fe:40:df:09: b5:9d:2a:9f:ed:5d:34:74:3d:72:a1:82:7a:a7:35: 0b:2c:88:e9:bd:b7:57:4a:02:52:18:f3:fd:37:31: 98:2d:d6:eb:7a:85:c8:b3:45:08:ff:75:6c:f6:82: a8:2c:82:b4:37:3e:04:e6:c5:81:b9:08:c8:ce:71: 58:15:c2:ee:5e:d7:ce:e1:8a:d7:16:0f:3b:7f:24: 81:1f:29:4a:04:40:3e:ee:ca:2b:be:d7:02:43:d3: bb:96:0e:68:e3:c3:77:0d:6e:49:15:03:b8:c3:79: 8f:10:0c:80:41:81:0a:a5:a3:a9:e3:cb:dd:24:30: cf:9d:83:76:66:96:40:86:d8:c5:8d:85:f7:4f:48: d0:39:50:36:40:8e:8b:4a:4e:70:d0:18:70:e3:03: f6:a8:9b:78:a2:bf:04:81:ae:fa:50:d3:fe:4a:8b: fe:f3:2f:5d:56:53:24:5d:bb:cc:a0:72:22:cd:9b: fa:b2:bb:52:de:f8:4b:17:9b:86:98:eb:a7:09:69: d2:c7:d7:99:3c:5b:43:cb:70:78:10:ed:81:25:fb: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6c:e1:7e:6e:1b:f4:8d:8b:78:54:38:99:81:52:64:b4:c8: 4c:7a:45:91:78:ea:b4:53:df:4a:fa:2e:12:7a:14:50:b9:4b: c9:fa:14:f3:4e:05:30:cc:2d:f2:ae:fa:b7:87:db:d5:41:b2: 98:56:c8:fe:2a:a3:6f:eb:3b:6c:c2:ef:76:22:c1:60:58:a3: e5:cf:d7:1c:77:b2:ad:14:d7:32:c9:11:92:89:a8:3d:d7:f1: 9f:f0:5d:eb:9f:ca:ef:4d:10:97:dd:54:ea:d4:17:9d:f4:39: 48:6a:74:ea:5e:55:02:64:f3:3e:a9:8b:e8:80:ea:33:e1:32: 7d:b7:e4:0e:d9:08:59:1f:50:90:ec:51:04:59:02:2a:4e:4e: d3:9c:05:48:cd:0f:94:5b:4e:0f:85:d3:73:bc:79:91:ad:04: 70:9d:ea:1d:7c:f1:ae:c0:37:30:a1:45:9d:f9:69:59:74:9f: e5:9e:30:c0:56:d5:e9:70:76:fe:d4:9b:83:f9:dc:d0:e0:8d: 64:03:ef:58:54:c3:59:15:19:1c:fb:8b:73:b4:f9:8f:6f:6a: 20:14:9d:c9:fc:b4:b4:ed:12:88:66:5c:5a:35:40:62:50:2c: f9:dd:5c:8a:74:64:e6:a3:09:72:4a:db:4c:06:fc:df:fd:23: 03:ee:c5:0c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErztEeT3XIfnrUXoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMzEyNDUyNloXDTI3MTEyNjEzNDUyNlowLzEtMCsGA1UEAxMk ZDQwOTA1MjUtN2FlZS00ZTBkLWI1NzctYWQzNGFhZjFkYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tWORy2UiRD65SmFtW6QULKxpl63CBE6PqEG iR8OnD1q82n6fqjELv5A3wm1nSqf7V00dD1yoYJ6pzULLIjpvbdXSgJSGPP9NzGY LdbreoXIs0UI/3Vs9oKoLIK0Nz4E5sWBuQjIznFYFcLuXtfO4YrXFg87fySBHylK BEA+7sorvtcCQ9O7lg5o48N3DW5JFQO4w3mPEAyAQYEKpaOp48vdJDDPnYN2ZpZA htjFjYX3T0jQOVA2QI6LSk5w0Bhw4wP2qJt4or8Ega76UNP+Sov+8y9dVlMkXbvM oHIizZv6srtS3vhLF5uGmOunCWnSx9eZPFtDy3B4EO2BJfv1sQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEtEWJYme5ZpgX/JpuCp0EQ+dqSRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k NDA5MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0YWFmMWRhN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q0MDkwNTI1LTdhZWUtNGUwZC1i NTc3LWFkMzRhYWYxZGE3Yi9kNDA5MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0YWFm MWRhN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/YgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGmzhfm4b9I2LeFQ4mYFS ZLTITHpFkXjqtFPfSvouEnoUULlLyfoU804FMMwt8q76t4fb1UGymFbI/iqjb+s7 bMLvdiLBYFij5c/XHHeyrRTXMskRkomoPdfxn/Bd65/K700Ql91U6tQXnfQ5SGp0 6l5VAmTzPqmL6IDqM+EyfbfkDtkIWR9QkOxRBFkCKk5O05wFSM0PlFtOD4XTc7x5 ka0EcJ3qHXzxrsA3MKFFnflpWXSf5Z4wwFbV6XB2/tSbg/nc0OCNZAPvWFTDWRUZ HPuLc7T5j29qIBSdyfy0tO0SiGZcWjVAYlAs+d1cinRk5qMJckrbTAb83/0jA+7F DA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:41 2025 by rpki-client