$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer File: 2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer (raw, json) Hash identifier: WsJ/2SeyTLMrb3nHaNTggmEg0fTjpnk680dTYLbdLRA= Subject key identifier: 0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AD51FADF2B984AA553C591BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 13:51:46 +0000 Certificate not after: Mon 15 Nov 2027 14:51:46 +0000 Subordinate resources: AS: 21752 IP: 23.141.44.0/24 IP: 2602:f5f6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:1f:ad:f2:b9:84:aa:55:3c:59:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 12 13:51:46 2025 GMT Not After : Nov 15 14:51:46 2027 GMT Subject: CN=2e4c886d-0c38-40e5-98a3-021f2eb8f4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:15:d6:ea:65:18:15:91:51:5d:62:a6:95: 4d:fb:20:26:6a:54:5d:cb:63:31:01:07:2f:28:c2: f7:90:0d:2e:2a:8e:cf:9d:a5:5b:c1:44:9c:49:93: e9:86:c1:c6:51:20:78:76:6e:88:88:b8:b3:fc:c7: c6:74:f5:a8:99:23:d9:80:67:46:f7:50:f4:8e:b2: 3e:49:00:f8:d8:f5:60:77:c8:c7:a6:3e:06:0b:8f: d6:03:07:b3:a4:58:a2:d8:27:26:d9:36:0f:40:9c: da:92:8a:a3:a9:2d:d8:dd:39:a7:29:02:ea:fb:6e: 8d:e4:fe:d8:a2:5f:42:e0:d1:bd:c0:e7:21:9c:18: 2d:01:2c:3b:07:88:22:75:b7:90:2e:40:04:ed:2f: 6c:bd:1b:56:9b:03:31:aa:3b:3e:0c:df:00:4d:03: fc:c3:cc:75:f2:0d:ef:f2:66:52:42:6f:69:82:5b: 24:1f:52:b5:06:e7:0b:2a:be:b4:a1:27:ff:81:ae: 2d:82:79:3c:84:22:a0:ce:f7:b1:07:a5:7c:7c:c2: c9:af:e8:5a:6a:2b:c4:ed:f5:3c:e6:e5:92:5f:83: 65:c3:00:48:8c:ae:e1:a4:9a:1c:a3:d4:78:ff:83: 17:0c:ce:30:4d:39:2b:a1:5e:3d:c5:a9:20:55:b7: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.141.44.0/24 IPv6: 2602:f5f6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21752 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:16:b3:8a:08:13:e7:87:6f:21:37:91:ed:47:99:7f:00:f0: 3a:1e:5a:81:31:ae:41:4a:db:14:1c:a4:4f:2f:39:7a:b9:36: 89:8e:25:7c:22:77:86:62:41:84:61:e3:4a:6c:35:38:0d:48: 22:c4:5b:85:4e:b1:8f:11:e4:78:69:48:81:ba:69:fc:de:86: 14:82:36:82:a6:f4:63:eb:17:98:d2:95:3a:83:6c:4c:96:3d: a9:8b:0b:8e:99:05:c7:7a:c2:ef:15:df:8b:b1:23:0c:a9:65: 55:c8:63:c7:33:94:89:76:b8:4c:33:74:37:2e:71:91:71:1e: 67:65:ad:fd:51:bd:a5:22:e8:ad:f3:70:ce:09:84:06:af:64: 9f:30:ee:a6:59:f0:3e:7c:54:19:08:aa:c1:87:69:30:25:87: 61:9e:61:c6:e4:5f:22:24:9c:1d:d7:e4:45:13:21:ff:39:9d: aa:8a:cd:b2:bd:1e:31:b7:43:3f:6e:19:26:0b:e0:e5:b5:de: c8:41:4d:4e:59:17:98:c7:d3:b2:eb:aa:ec:ab:19:a4:26:d2: 1a:5f:2d:3c:48:f6:42:fe:6a:a4:fa:d2:bf:fa:fb:79:dc:a6: de:b1:20:49:0e:07:07:76:75:b3:16:70:e3:18:91:61:e8:73: 9a:f5:5f:c6 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWErVH63yuYSqVTxZG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgxMjEzNTE0NloXDTI3MTExNTE0NTE0NlowLzEtMCsGA1UEAxMk MmU0Yzg4NmQtMGMzOC00MGU1LTk4YTMtMDIxZjJlYjhmNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr84V1uplGBWRUV1ippVN+yAmalRdy2MxAQcv KML3kA0uKo7PnaVbwUScSZPphsHGUSB4dm6IiLiz/MfGdPWomSPZgGdG91D0jrI+ SQD42PVgd8jHpj4GC4/WAwezpFii2Ccm2TYPQJzakoqjqS3Y3TmnKQLq+26N5P7Y ol9C4NG9wOchnBgtASw7B4gidbeQLkAE7S9svRtWmwMxqjs+DN8ATQP8w8x18g3v 8mZSQm9pglskH1K1BucLKr60oSf/ga4tgnk8hCKgzvexB6V8fMLJr+haaivE7fU8 5uWSX4NlwwBIjK7hpJoco9R4/4MXDM4wTTkroV49xakgVbcPCQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFA442/Js7Lf+Hi+VEbxGLmKEZ8PcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y ZTRjODg2ZC0wYzM4LTQwZTUtOThhMy0wMjFmMmViOGY0YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzJlNGM4ODZkLTBjMzgtNDBlNS05 OGEzLTAyMWYyZWI4ZjRjOS8yZTRjODg2ZC0wYzM4LTQwZTUtOThhMy0wMjFmMmVi OGY0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjSwwDgQCAAIwCAMGACYC9fYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlT4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKYWs4oIE+eHbyE3ke1HmX8A8Doe WoExrkFK2xQcpE8vOXq5NomOJXwid4ZiQYRh40psNTgNSCLEW4VOsY8R5HhpSIG6 afzehhSCNoKm9GPrF5jSlTqDbEyWPamLC46ZBcd6wu8V34uxIwypZVXIY8czlIl2 uEwzdDcucZFxHmdlrf1RvaUi6K3zcM4JhAavZJ8w7qZZ8D58VBkIqsGHaTAlh2Ge YcbkXyIknB3X5EUTIf85naqKzbK9HjG3Qz9uGSYL4OW13shBTU5ZF5jH07Lrquyr GaQm0hpfLTxI9kL+aqT60r/6+3ncpt6xIEkOBwd2dbMWcOMYkWHoc5r1X8Y= -----END CERTIFICATE-----Generated at Sat Aug 23 16:50:09 2025 by rpki-client