$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer File: 8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer (raw, json) Hash identifier: ox30FvKvOw76Ccd5ksWWj3nVKZrBBHtoTItGedSYqqo= Subject key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849D58D3C9A7720EA54AA3E5680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 00:45:34 +0000 Certificate not after: Mon 16 Aug 2027 00:45:34 +0000 Subordinate resources: IP: 23.140.40.0/24 IP: 141.195.112.0/22 IP: 2602:fb26::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:8d:3c:9a:77:20:ea:54:aa:3e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 13 00:45:34 2025 GMT Not After : Aug 16 00:45:34 2027 GMT Subject: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:cd:f1:29:ef:05:c5:0b:b1:bc:5f:84:97: da:b3:77:07:6f:36:b7:57:de:20:ea:a8:d2:a0:c5: 16:e2:84:c9:1c:fa:ff:cb:39:9c:58:ba:5f:65:4b: a5:1a:3a:9b:48:d1:4c:e9:89:38:d6:fc:bd:d0:d6: 5f:74:ac:a2:20:dd:3e:71:2b:cc:0a:13:60:ac:04: d2:62:10:a6:96:a3:c3:df:b1:0d:18:95:fc:1c:80: f6:f9:82:db:5a:5f:bd:87:2a:42:ab:b8:46:7f:49: 41:08:63:cb:d7:ff:e6:3c:0a:02:36:57:dc:0c:9e: d6:28:e2:78:8d:33:a9:cb:15:11:df:e6:57:7c:47: 35:31:59:35:ab:c8:5f:86:d1:15:6d:87:ad:f6:4f: 4f:8b:2e:c1:4f:ae:ac:82:79:68:fb:e7:e2:10:f0: 44:7e:1a:9b:8b:f3:c1:49:07:10:2d:8b:d8:89:99: 65:63:95:3d:55:20:60:e1:dd:27:fb:f3:1d:a9:f3: 15:26:a0:01:d9:eb:8a:a7:7e:6b:b6:fd:4d:92:66: 6a:8a:c8:22:3a:9a:9c:85:a4:14:af:21:18:af:4e: 97:b5:06:35:49:12:bc:22:34:3a:c0:7b:32:47:23: 73:9b:df:26:9e:6e:9d:f5:6e:26:9c:77:a4:d2:b4: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.40.0/24 141.195.112.0/22 IPv6: 2602:fb26::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f0:c3:26:e0:d8:dd:e3:40:0c:01:b6:70:0b:33:25:97:75: 64:d2:74:b0:19:9c:1f:ee:38:e6:d5:7f:1e:8a:ea:3f:c0:fd: a5:c8:92:c4:31:61:c8:ba:2f:ef:34:18:a4:1c:59:c9:47:cc: 98:ea:af:0b:ac:cd:b4:78:cc:90:ba:c2:1e:5b:ff:35:88:41: 89:f9:f2:26:3a:b0:86:74:fd:d9:68:e9:48:d3:34:f8:a1:80: 16:09:fa:b4:ff:72:48:20:da:21:56:37:6d:a6:e7:be:b3:bc: b1:bc:52:2c:7c:e3:8d:65:3b:e7:9c:93:5b:40:a8:a7:20:d7: c0:78:19:fc:12:82:b1:fd:c0:8f:a8:ed:9f:88:98:c1:1b:60: f0:74:e9:e3:74:9b:19:fa:a4:c0:95:26:da:04:55:d9:cf:97: ef:f5:f6:92:dc:7a:fa:3e:56:b9:42:ce:62:c9:a9:c8:43:a1: 35:ea:cb:0b:9f:f6:e8:fc:03:6c:e9:ff:24:f3:22:a4:36:79: 9e:8d:24:d8:84:fe:a8:d6:21:04:d4:4b:93:a3:0a:87:1a:1b: e2:90:c3:3e:ec:3f:0c:8c:2c:60:38:93:7b:43:2c:c8:fc:ac: 63:78:97:53:d6:6d:e0:d7:22:87:7b:b4:23:b8:96:22:13:89: 78:78:83:87 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEnVjTyadyDqVKo+VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxMzAwNDUzNFoXDTI3MDgxNjAwNDUzNFowLzEtMCsGA1UEAxMk OGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTrN8SnvBcULsbxfhJfas3cHbza3V94g6qjS oMUW4oTJHPr/yzmcWLpfZUulGjqbSNFM6Yk41vy90NZfdKyiIN0+cSvMChNgrATS YhCmlqPD37ENGJX8HID2+YLbWl+9hypCq7hGf0lBCGPL1//mPAoCNlfcDJ7WKOJ4 jTOpyxUR3+ZXfEc1MVk1q8hfhtEVbYet9k9Piy7BT66sgnlo++fiEPBEfhqbi/PB SQcQLYvYiZllY5U9VSBg4d0n+/MdqfMVJqAB2euKp35rtv1NkmZqisgiOpqchaQU ryEYr06XtQY1SRK8IjQ6wHsyRyNzm98mnm6d9W4mnHek0rSU4QIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFNk0EcCzxaRAZWQB4wSY3Isy15flMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhhZTkxOTI4LTM1Y2YtNDZlZC1i Zjg3LTkyZDliZmQ2MjllYy84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZk NjI5ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjCgDBAKNw3AwDgQCAAIwCAMGBCYC+yYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLwwybg2N3jQAwBtnALMyWXdWTSdLAZnB/uOObVfx6K6j/A/aXIksQx Yci6L+80GKQcWclHzJjqrwuszbR4zJC6wh5b/zWIQYn58iY6sIZ0/dlo6UjTNPih gBYJ+rT/ckgg2iFWN22m576zvLG8Uix8441lO+eck1tAqKcg18B4GfwSgrH9wI+o 7Z+ImMEbYPB06eN0mxn6pMCVJtoEVdnPl+/19pLcevo+VrlCzmLJqchDoTXqywuf 9uj8A2zp/yTzIqQ2eZ6NJNiE/qjWIQTUS5OjCocaG+KQwz7sPwyMLGA4k3tDLMj8 rGN4l1PWbeDXIod7tCO4liITiXh4g4c= -----END CERTIFICATE-----Generated at Tue Jul 1 09:38:29 2025 by rpki-client