$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bcf2cf6-46a4-4d88-b030-085e964ad534.cer File: 1bcf2cf6-46a4-4d88-b030-085e964ad534.cer (raw, json) Hash identifier: VTXmDbkfoh7StHz+3kNXy3RjANXXRyYu/4ubWAvdjCk= Subject key identifier: FF:77:CF:C1:48:E2:E6:71:BC:6C:FB:C2:B3:27:AF:BB:BA:0A:8A:1E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584ABA793BD472E1A1C64C7F1C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bcf2cf6-46a4-4d88-b030-085e964ad534/1bcf2cf6-46a4-4d88-b030-085e964ad534.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bcf2cf6-46a4-4d88-b030-085e964ad534/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Aug 2025 00:45:23 +0000 Certificate not after: Sat 06 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 14176 IP: 192.234.0.0/24 IP: 2602:fe35::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:79:3b:d4:72:e1:a1:c6:4c:7f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 3 00:45:23 2025 GMT Not After : Nov 6 00:45:23 2027 GMT Subject: CN=1bcf2cf6-46a4-4d88-b030-085e964ad534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:ad:93:3d:e8:96:f3:7e:df:ae:67:b0:32: f5:ac:c9:a7:a9:a3:00:00:ec:23:fe:de:97:75:fb: 4f:ad:28:0f:60:f1:0a:18:df:2f:5a:b9:25:19:76: 5f:cf:c7:00:87:bc:a1:6c:d8:e0:37:7e:05:f3:c4: c5:82:3b:d9:f5:cb:05:7a:44:cf:24:4e:5c:a9:3e: 6d:1b:f9:11:ea:94:57:2f:95:fc:9c:e6:d0:f3:7e: d5:f4:62:43:90:61:f8:9f:64:a5:f4:bd:29:ed:c8: e6:1a:1d:87:df:25:a0:02:dc:b7:a9:80:ce:7e:11: 7f:1a:fe:a3:84:41:e1:6f:72:0e:01:53:ad:cd:ae: b0:cf:b5:b4:b4:a7:11:8a:ac:41:11:a8:56:ec:eb: 24:92:cd:43:4c:a9:87:75:eb:0a:08:88:37:72:70: 17:69:2d:cb:08:98:13:cc:ec:e0:15:f2:82:82:15: e4:1d:50:b1:a6:7d:0c:77:e5:6c:17:39:dc:86:0a: 35:85:8b:28:c4:e6:68:fb:25:71:db:ad:6d:5a:cf: 79:0a:a9:77:ea:09:15:13:a5:35:06:87:ad:ff:51: ac:15:92:7f:11:ca:0a:ee:19:45:be:0a:e6:d7:5b: 3a:3c:17:50:68:f8:ab:4a:af:e2:9e:79:f7:8c:bd: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:CF:C1:48:E2:E6:71:BC:6C:FB:C2:B3:27:AF:BB:BA:0A:8A:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bcf2cf6-46a4-4d88-b030-085e964ad534/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bcf2cf6-46a4-4d88-b030-085e964ad534/1bcf2cf6-46a4-4d88-b030-085e964ad534.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.234.0.0/24 IPv6: 2602:fe35::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f7:d8:84:40:fc:00:58:e9:01:5b:f2:50:84:39:81:6b:e2: 75:a2:77:ee:01:5a:fe:5f:0e:a4:02:9c:79:03:71:c8:1d:48: 4f:c3:9a:e8:e9:fb:a2:04:f1:92:84:4e:9e:f3:7a:ae:f3:ad: 59:eb:cd:c2:82:44:0d:08:01:14:5f:00:f4:05:f3:bc:e3:a6: d4:0f:e5:53:ce:e2:f0:52:4f:4b:9e:20:e4:6e:4d:5e:a7:0b: 64:c5:02:fa:7e:b5:c0:aa:7d:64:d0:26:0a:9a:00:1c:47:82: ad:77:41:48:e2:45:e5:c9:5b:0d:36:85:40:54:17:44:d9:4a: f7:f0:b4:0b:2e:a3:70:6b:25:ae:23:9c:6a:ac:ae:ff:52:76: 54:54:4c:4e:90:a6:28:13:f7:76:42:58:e6:9c:56:51:39:f1: 99:ca:28:41:6f:66:68:a9:bc:90:12:8d:26:66:fb:7e:7e:43: a6:8e:7b:e3:87:5d:95:2e:74:03:6b:d6:da:f0:4c:88:bc:fe: 6a:27:43:c1:fb:d6:44:d6:da:a2:2b:b0:c5:1d:c5:51:90:04: 62:99:ec:20:8d:43:89:81:a3:68:c7:8e:a2:54:b5:76:8f:fa: 29:7b:11:34:e0:e5:26:ce:de:68:3b:69:71:e8:cd:51:33:1e: ee:61:72:16 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEq6eTvUcuGhxkx/HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgwMzAwNDUyM1oXDTI3MTEwNjAwNDUyM1owLzEtMCsGA1UEAxMk MWJjZjJjZjYtNDZhNC00ZDg4LWIwMzAtMDg1ZTk2NGFkNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxqtkz3olvN+365nsDL1rMmnqaMAAOwj/t6X dftPrSgPYPEKGN8vWrklGXZfz8cAh7yhbNjgN34F88TFgjvZ9csFekTPJE5cqT5t G/kR6pRXL5X8nObQ837V9GJDkGH4n2Sl9L0p7cjmGh2H3yWgAty3qYDOfhF/Gv6j hEHhb3IOAVOtza6wz7W0tKcRiqxBEahW7Oskks1DTKmHdesKCIg3cnAXaS3LCJgT zOzgFfKCghXkHVCxpn0Md+VsFznchgo1hYsoxOZo+yVx261tWs95Cql36gkVE6U1 Boet/1GsFZJ/EcoK7hlFvgrm11s6PBdQaPirSq/innn3jL1GlwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFP93z8FI4uZxvGz7wrMnr7u6CooeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x YmNmMmNmNi00NmE0LTRkODgtYjAzMC0wODVlOTY0YWQ1MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiY2YyY2Y2LTQ2YTQtNGQ4OC1i MDMwLTA4NWU5NjRhZDUzNC8xYmNmMmNmNi00NmE0LTRkODgtYjAzMC0wODVlOTY0 YWQ1MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADA6gAwDgQCAAIwCAMGBCYC/jUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjdgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJb32IRA/ABY6QFb8lCEOYFr4nWi d+4BWv5fDqQCnHkDccgdSE/Dmujp+6IE8ZKETp7zeq7zrVnrzcKCRA0IARRfAPQF 87zjptQP5VPO4vBST0ueIORuTV6nC2TFAvp+tcCqfWTQJgqaABxHgq13QUjiReXJ Ww02hUBUF0TZSvfwtAsuo3BrJa4jnGqsrv9SdlRUTE6QpigT93ZCWOacVlE58ZnK KEFvZmipvJASjSZm+35+Q6aOe+OHXZUudANr1trwTIi8/monQ8H71kTW2qIrsMUd xVGQBGKZ7CCNQ4mBo2jHjqJUtXaP+il7ETTg5SbO3mg7aXHozVEzHu5hchY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:05 2025 by rpki-client