$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer File: 340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer (raw, json) Hash identifier: d4XgZRBW15dDdPBphk5GoDhHDbMstemlPBOIASkFdqM= Subject key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AECB98FD22BC1E78072290A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 00:45:25 +0000 Certificate not after: Wed 24 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 30330 AS: 33471 IP: 2602:803:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b9:8f:d2:2b:c1:e7:80:72:29:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 21 00:45:25 2025 GMT Not After : Nov 24 01:45:25 2027 GMT Subject: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:bb:de:d5:91:26:04:c4:b7:74:78:83:ec: 22:8b:cb:8f:be:06:86:3c:ce:03:2d:1a:c9:12:75: a7:af:5b:95:f7:9c:46:55:bb:04:a5:1a:f3:b8:64: 4a:2a:d0:95:73:c9:9f:8c:04:63:90:79:b6:e2:ea: a2:14:95:d3:59:54:3d:68:41:31:11:ea:f3:7e:e5: dc:f3:11:53:70:b8:9a:e1:28:0e:bb:08:da:6d:bd: b0:14:b8:f7:77:4e:6f:10:49:6f:70:b4:ac:72:44: 52:d4:ea:0f:25:f4:1c:c6:f3:f2:c5:9b:37:6b:f2: 86:bb:e7:96:f1:e9:e2:c7:a9:35:05:5c:5e:dc:96: e2:40:8b:c3:0b:a4:d4:58:29:bb:fd:86:76:df:6a: 8b:b5:61:7c:fa:4c:35:09:8d:42:54:b0:37:9f:da: 18:93:5e:65:12:50:23:b5:b2:e2:e5:db:e8:23:86: 36:db:ce:47:da:91:60:86:20:ac:e7:cc:01:3c:23: a5:74:c6:16:09:37:14:85:15:7d:d5:56:0f:aa:5d: 38:32:c5:12:29:99:27:91:23:46:28:dc:15:6b:33: 4d:54:ed:8f:ec:6f:12:05:60:ac:59:10:c1:72:fc: 3a:98:e3:df:01:55:1a:ac:0d:f5:a4:f1:9c:7a:d4: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2602:803:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30330 33471 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c4:fa:31:21:f1:f6:6d:47:34:44:5f:b9:9b:97:bf:f3:a4: ed:bf:50:ef:5f:d7:fb:24:33:4b:1d:50:b9:35:09:58:6d:45: 02:de:a0:ae:88:2a:6a:f6:8f:c6:d8:49:61:6d:b4:b7:c2:b0: 90:dd:58:b2:92:b0:91:c9:19:99:45:24:f3:36:b3:ed:d7:47: 72:70:26:f2:d7:f0:9f:a6:89:3b:e0:7f:a1:4e:69:d0:df:ba: 23:47:12:ac:ed:27:bc:14:89:58:ea:86:09:55:8e:bc:f6:c6: 63:ad:33:c4:b4:a7:6d:29:67:b1:f1:25:a7:e6:c7:54:67:a8: 65:f0:5c:92:26:56:00:8a:c1:8b:9f:69:d4:60:30:fd:0d:25: 84:7d:51:a6:41:b1:2b:d7:b7:1a:45:0e:21:15:58:4b:30:71: a7:c9:f1:d6:0d:bd:dc:21:8d:ed:6b:ca:ee:53:9a:c1:fc:fd: 20:b8:8f:18:34:cd:77:89:57:a8:11:ae:6e:73:24:33:a9:27: 8d:71:dc:ad:d3:73:04:1e:93:6d:56:d3:28:f1:8e:48:6c:fe: 38:59:95:3e:ec:0e:15:af:d2:cb:e9:c7:99:94:85:09:8e:63: fe:f2:4b:52:0a:6b:70:6f:63:1e:e2:98:af:c7:7c:74:93:22: 00:25:f3:d7 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWErsuY/SK8HngHIpCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgyMTAwNDUyNVoXDTI3MTEyNDAxNDUyNVowLzEtMCsGA1UEAxMk MzQwZGE3N2UtMWZmOS00NWZjLWIxZWMtMGVhYTBlNDM1ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKK73tWRJgTEt3R4g+wii8uPvgaGPM4DLRrJ EnWnr1uV95xGVbsEpRrzuGRKKtCVc8mfjARjkHm24uqiFJXTWVQ9aEExEerzfuXc 8xFTcLia4SgOuwjabb2wFLj3d05vEElvcLSsckRS1OoPJfQcxvPyxZs3a/KGu+eW 8enix6k1BVxe3JbiQIvDC6TUWCm7/YZ232qLtWF8+kw1CY1CVLA3n9oYk15lElAj tbLi5dvoI4Y2285H2pFghiCs58wBPCOldMYWCTcUhRV91VYPql04MsUSKZknkSNG KNwVazNNVO2P7G8SBWCsWRDBcvw6mOPfAVUarA31pPGcetTFHwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIyXAlLU/YjTpR1bXzAzCIXLXCfEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NDBkYTc3ZS0xZmY5LTQ1ZmMtYjFlYy0wZWFhMGU0MzU4NmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM0MGRhNzdlLTFmZjktNDVmYy1i MWVjLTBlYWEwZTQzNTg2Yi8zNDBkYTc3ZS0xZmY5LTQ1ZmMtYjFlYy0wZWFhMGU0 MzU4NmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggDUDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgJ2egIDAIK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHLE+jEh8fZtRzREX7mbl7/zpO2/UO9f1/skM0sd ULk1CVhtRQLeoK6IKmr2j8bYSWFttLfCsJDdWLKSsJHJGZlFJPM2s+3XR3JwJvLX 8J+miTvgf6FOadDfuiNHEqztJ7wUiVjqhglVjrz2xmOtM8S0p20pZ7HxJafmx1Rn qGXwXJImVgCKwYufadRgMP0NJYR9UaZBsSvXtxpFDiEVWEswcafJ8dYNvdwhje1r yu5TmsH8/SC4jxg0zXeJV6gRrm5zJDOpJ41x3K3TcwQek21W0yjxjkhs/jhZlT7s DhWv0svpx5mUhQmOY/7yS1IKa3BvYx7imK/HfHSTIgAl89c= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:47 2025 by rpki-client