$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer File: dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer (raw, json) Hash identifier: ilArtfwohKL+sxu0AncI36QXZvkMtft4NnI+22chkio= Subject key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC00E9BC406A8A4DD74D15380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 00:45:24 +0000 Certificate not after: Mon 08 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 400701 IP: 206.168.140.0/23 IP: 2602:fb74::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:0e:9b:c4:06:a8:a4:dd:74:d1:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 5 00:45:24 2025 GMT Not After : Nov 8 01:45:24 2027 GMT Subject: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:86:c7:fb:dc:2e:61:ef:df:e8:e3:5c:07: 9b:94:f7:98:e8:d4:f1:43:4e:6e:1e:27:d3:4c:63: 99:33:35:4d:a1:b0:43:fa:56:84:c3:90:82:c3:8c: 02:6d:81:e8:20:27:20:83:c6:b5:1d:f2:59:f6:fc: 40:3b:62:ff:72:03:6a:9a:a1:93:00:dc:43:1c:ee: 67:05:b4:73:11:5a:d4:64:b2:28:ca:eb:2b:05:e5: 6c:92:16:d0:cd:ad:ae:9d:32:51:36:25:8c:67:cc: 41:a0:28:a1:c6:84:81:7c:d8:11:2b:bf:7a:ac:8e: 92:9b:92:44:a8:1f:7b:56:e3:0b:5b:c6:ae:6c:51: aa:6c:8c:86:8d:97:38:54:23:73:62:46:c0:7e:d1: 1f:e4:8f:6c:37:8a:8e:d9:55:30:7b:ff:20:65:9f: 2d:a1:4f:59:69:39:80:91:e8:63:61:b4:99:c3:70: a5:22:ab:90:89:42:5e:12:31:97:4e:c2:be:48:75: 6f:7c:e9:85:02:24:73:98:e9:f1:11:1d:07:4a:16: 85:2d:5f:91:16:c4:e9:70:41:3a:72:e3:97:45:97: ce:01:b4:d2:8f:bf:d2:f5:95:12:34:a4:4f:e7:92: 2b:d3:fd:f0:fd:73:87:db:f7:06:3b:ac:56:7c:15: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 206.168.140.0/23 IPv6: 2602:fb74::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:37:6e:9e:9d:bc:df:55:f5:a5:25:3a:41:33:3b:90:c4:56: 9a:1d:1d:36:06:79:46:10:47:55:44:85:3a:b8:c9:2a:ac:47: 54:88:7c:2b:ac:5a:9a:8e:30:ef:11:74:69:df:c2:9a:1d:52: 3c:ca:59:82:71:e3:c3:dc:17:f3:5b:3d:2d:d1:c1:d0:cb:ff: c6:2b:f0:15:ba:7a:28:ac:96:ca:0e:4f:0b:62:6d:5f:6d:a0: 47:0b:60:b5:5d:9f:c4:1f:96:e0:fb:95:67:e7:6e:8e:cf:91: 5b:0f:41:54:0b:0b:15:c3:d2:c8:db:f9:78:1e:51:99:68:0f: 85:b5:97:26:db:47:e7:3a:26:c8:4b:34:e9:73:50:3b:fc:2c: 3e:aa:83:6f:3b:9f:70:0b:a2:90:6e:49:16:bc:ff:f5:c0:67: f1:b7:25:f4:06:07:cb:e9:22:a0:4c:54:ba:8e:0c:d8:c1:33: d4:bf:18:bf:5a:83:33:86:14:c6:88:39:06:0b:7b:35:2f:e3: d2:1f:27:41:c6:e5:5e:e9:5a:9c:7b:be:67:9f:5e:d3:5f:32: ff:2d:13:c5:c4:fb:d8:05:2b:c9:ac:da:27:19:3f:83:71:0f: f7:b7:fc:00:55:e4:b4:4e:cf:01:ab:ec:c3:a3:91:05:f4:80: e4:e7:61:f3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErADpvEBqik3XTRU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNTAwNDUyNFoXDTI3MTEwODAxNDUyNFowLzEtMCsGA1UEAxMk ZGNmN2Y2ZmItMGJhZS00YzIxLWJjZjItMmY5OTg1NDFkYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhomGx/vcLmHv3+jjXAeblPeY6NTxQ05uHifT TGOZMzVNobBD+laEw5CCw4wCbYHoICcgg8a1HfJZ9vxAO2L/cgNqmqGTANxDHO5n BbRzEVrUZLIoyusrBeVskhbQza2unTJRNiWMZ8xBoCihxoSBfNgRK796rI6Sm5JE qB97VuMLW8aubFGqbIyGjZc4VCNzYkbAftEf5I9sN4qO2VUwe/8gZZ8toU9ZaTmA kehjYbSZw3ClIquQiUJeEjGXTsK+SHVvfOmFAiRzmOnxER0HShaFLV+RFsTpcEE6 cuOXRZfOAbTSj7/S9ZUSNKRP55Ir0/3w/XOH2/cGO6xWfBVrWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMwvnW3MthzOHuNQOWOR6mPRj7gCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k Y2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0MWRiM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2RjZjdmNmZiLTBiYWUtNGMyMS1i Y2YyLTJmOTk4NTQxZGIzZi9kY2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0 MWRiM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHOqIwwDgQCAAIwCAMGBCYC+3QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYdPTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVN26enbzfVfWlJTpBMzuQxFaa HR02BnlGEEdVRIU6uMkqrEdUiHwrrFqajjDvEXRp38KaHVI8ylmCcePD3BfzWz0t 0cHQy//GK/AVunoorJbKDk8LYm1fbaBHC2C1XZ/EH5bg+5Vn526Oz5FbD0FUCwsV w9LI2/l4HlGZaA+FtZcm20fnOibISzTpc1A7/Cw+qoNvO59wC6KQbkkWvP/1wGfx tyX0BgfL6SKgTFS6jgzYwTPUvxi/WoMzhhTGiDkGC3s1L+PSHydBxuVe6Vqce75n n17TXzL/LRPFxPvYBSvJrNonGT+DcQ/3t/wAVeS0Ts8Bq+zDo5EF9IDk52Hz -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:03 2025 by rpki-client