$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer File: fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer (raw, json) Hash identifier: /ExbhAnR71HZUXFkfr7f58i1uIoGjxvDs6u27IlJQIk= Subject key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD2340E494633A6A097BBD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 12:45:24 +0000 Certificate not after: Sun 14 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 132.190.0.0/16 IP: 192.30.248.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:34:0e:49:46:33:a6:a0:97:bb:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 11 12:45:24 2025 GMT Not After : Nov 14 13:45:24 2027 GMT Subject: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:a8:ad:fc:55:39:47:c2:e4:65:ce:75:fa: e9:c3:69:b6:78:6f:d8:bf:48:9a:eb:9a:aa:3c:33: f3:06:ad:aa:12:6d:c0:dd:bb:07:84:31:8e:a2:bb: 73:76:ad:46:39:c6:af:02:ed:d7:29:6f:8f:87:de: 69:49:6c:61:04:00:33:da:f6:fe:78:5c:66:92:21: 19:89:44:87:d5:87:12:40:e3:9e:e7:d7:a8:e5:c4: b4:b1:53:04:d7:b6:25:9f:3e:dc:19:af:46:cf:2a: cf:8a:b6:a4:78:d0:11:77:1c:c7:3b:ad:3c:5e:4d: 52:c2:c7:d8:69:63:82:a0:58:60:a7:f1:ce:fd:07: 62:d2:9a:f6:bf:2b:6e:d2:fb:d5:3d:5d:b4:4e:04: a4:b2:f6:45:88:0e:16:25:b9:2f:98:2d:1b:d5:e2: 4a:5e:bf:4e:6c:f5:04:00:e7:78:23:bf:80:f8:e7: f7:18:8c:0a:5e:56:6f:4d:9c:fa:7e:c4:79:cd:73: 4c:a6:15:37:7a:2e:0f:ca:1e:6b:bb:7e:91:2d:ff: b6:41:31:28:a2:2c:4f:db:2c:cb:a6:2d:02:2a:b5: ab:08:28:cd:b0:59:87:07:71:9c:93:13:b6:34:e2: a7:be:fa:33:75:18:37:b2:57:5c:0a:61:6a:97:db: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 132.190.0.0/16 192.30.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f0:ff:08:3d:53:a4:ec:60:ae:2e:64:07:37:19:ba:fb:7e: d3:43:6b:28:54:7f:f7:d3:7b:23:ac:6c:44:7b:f7:32:e1:8a: 2b:8a:fb:ea:c5:cc:83:3a:5c:97:06:b7:32:f5:4b:3b:13:53: 77:bc:22:5a:a1:95:10:d6:79:2e:06:97:0a:65:05:76:d4:eb: 72:45:84:7d:b3:f3:64:a6:11:c9:0e:56:ed:f0:a6:f8:c1:63: 4f:68:2b:32:a9:c9:ea:f5:10:b5:52:40:b2:e1:f3:6d:3a:e5: a3:ee:7a:38:c3:1f:5f:5a:c5:2a:ce:0b:68:51:9a:9c:35:be: 8a:4f:ef:d5:5c:83:02:67:fd:6d:30:24:09:6b:2e:a0:e1:ad: 78:86:35:4b:1c:68:b7:d4:5b:be:0b:6b:8b:fb:dd:c5:e3:70: 52:85:df:a6:f4:c7:f8:42:cb:b4:5e:5d:10:8a:76:c2:1e:4f: 07:e7:c4:2f:30:57:7f:0f:da:47:1e:8b:5c:fd:48:f0:cd:8b: b2:07:fa:11:67:c6:0d:ba:10:82:55:0d:0e:aa:3e:a0:e3:47: 97:12:19:bb:54:e6:4f:71:41:00:7d:70:25:77:01:c3:a7:42: 5d:28:a2:63:b5:59:51:34:87:f6:e1:ca:6e:1a:c6:e3:08:c4: da:cd:c7:c2 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWErSNA5JRjOmoJe71AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMTEyNDUyNFoXDTI3MTExNDEzNDUyNFowLzEtMCsGA1UEAxMk ZmMzN2IwYzItMDNmNy00ZDRkLTkwNDgtYTcwNDFkZjhjMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOeorfxVOUfC5GXOdfrpw2m2eG/Yv0ia65qq PDPzBq2qEm3A3bsHhDGOortzdq1GOcavAu3XKW+Ph95pSWxhBAAz2vb+eFxmkiEZ iUSH1YcSQOOe59eo5cS0sVME17Ylnz7cGa9GzyrPirakeNARdxzHO608Xk1SwsfY aWOCoFhgp/HO/Qdi0pr2vytu0vvVPV20TgSksvZFiA4WJbkvmC0b1eJKXr9ObPUE AOd4I7+A+Of3GIwKXlZvTZz6fsR5zXNMphU3ei4Pyh5ru36RLf+2QTEooixP2yzL pi0CKrWrCCjNsFmHB3GckxO2NOKnvvozdRg3sldcCmFql9v0eQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFAMnQkeg8KloZelyDCdxzshjsneCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9m YzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRmOGMyODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2ZjMzdiMGMyLTAzZjctNGQ0ZC05 MDQ4LWE3MDQxZGY4YzI4OC9mYzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRm OGMyODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCEvgMEAMAe+DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC8P8IPVOk7GCu LmQHNxm6+37TQ2soVH/303sjrGxEe/cy4YorivvqxcyDOlyXBrcy9Us7E1N3vCJa oZUQ1nkuBpcKZQV21OtyRYR9s/NkphHJDlbt8Kb4wWNPaCsyqcnq9RC1UkCy4fNt OuWj7no4wx9fWsUqzgtoUZqcNb6KT+/VXIMCZ/1tMCQJay6g4a14hjVLHGi31Fu+ C2uL+93F43BShd+m9Mf4Qsu0Xl0QinbCHk8H58QvMFd/D9pHHotc/UjwzYuyB/oR Z8YNuhCCVQ0Oqj6g40eXEhm7VOZPcUEAfXAldwHDp0JdKKJjtVlRNIf24cpuGsbj CMTazcfC -----END CERTIFICATE-----Generated at Sat Aug 23 14:42:21 2025 by rpki-client