$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer File: e97da778-a1f6-4dad-9d0a-d3a070010373.cer (raw, json) Hash identifier: w0joJvaTiKn2lgaRYzDX6mZSc0hJMn9yWY+FAnTZ7dU= Subject key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A9BC3CFC7117F44E7CC3F0110 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Jul 2025 00:45:35 +0000 Certificate not after: Tue 26 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 21538 IP: 192.131.134.0/24 IP: 2602:fc30::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:c3:cf:c7:11:7f:44:e7:cc:3f:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 23 00:45:35 2025 GMT Not After : Oct 26 00:45:35 2027 GMT Subject: CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:a1:80:28:5a:92:ad:27:17:3d:50:45:9c: e4:7f:b6:63:cb:72:59:74:05:cb:1a:f7:31:a1:09: da:77:2d:3c:96:71:86:f8:0b:92:3f:58:4f:90:69: b5:e8:6a:f5:5d:f3:4e:16:23:72:90:79:1d:9a:c3: fa:dc:e8:7d:41:6d:d1:40:5e:f1:0a:a9:91:d5:48: ff:5d:a1:d7:02:e5:64:ab:c8:d2:38:a4:22:aa:c6: ea:bd:b3:df:a9:c2:ed:0c:ab:0c:4f:90:09:3a:4c: b0:28:3d:97:e1:98:85:a7:b9:52:09:4d:6d:c7:c7: e4:3f:47:61:47:49:dc:95:7c:6c:6d:e2:77:c7:be: fb:e4:63:aa:b2:26:d0:43:2f:23:63:26:cc:1a:c5: 77:b4:62:3b:61:fb:fd:bc:70:df:cc:96:f4:3a:c3: 8a:3c:12:1d:4e:66:a9:fc:3d:63:ec:8b:72:af:03: 31:e6:11:e1:33:f2:14:9a:21:fa:07:24:16:5b:a5: 54:83:98:70:20:62:93:82:3c:dc:1f:ce:6e:34:13: 05:4d:67:f1:e9:fa:2c:0e:c9:9b:a3:8c:5a:d5:46: 52:c2:2c:37:f3:13:13:6b:50:4c:c8:8f:82:04:7e: 48:96:06:e3:b3:ba:a2:c6:a9:15:7a:2b:42:be:49: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.131.134.0/24 IPv6: 2602:fc30::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21538 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b1:1c:b2:8a:32:bc:e2:9c:28:ff:0c:88:e5:e8:07:7c:0a: 22:52:4a:58:8e:4f:33:d8:0e:04:45:95:12:ea:4e:76:3a:a6: 6f:06:34:3d:ea:8d:57:3a:e9:bb:62:16:ad:77:c0:ae:1a:cd: b3:e5:10:d8:3d:66:bb:04:0c:2e:bd:a3:cf:99:15:b7:ac:c5: 93:0a:67:0e:f4:18:df:18:6f:4c:48:fe:88:e8:e7:26:00:1c: ab:97:ba:b6:43:37:3b:87:a9:1f:92:19:58:0f:21:8f:a5:c6: 42:13:c5:5f:0e:2c:01:21:43:54:01:9a:41:d6:40:d6:a3:33: 23:60:6a:e3:d1:80:2a:4c:ed:54:86:93:47:1b:8d:66:46:8b: 7f:f0:e8:49:f3:3e:d7:02:29:18:a5:d0:cf:4d:96:55:e8:70: 4c:8f:67:95:2a:f0:16:ec:68:9b:d6:62:29:24:ae:f0:bf:e0: d7:7a:ae:a2:42:36:a2:f3:55:fd:88:e0:af:c4:86:dd:a1:8b: 7d:10:3a:a5:da:9c:81:77:23:dc:e3:fc:23:88:f4:a4:b6:15: 2c:51:b2:b3:90:08:a8:fe:28:8b:01:99:5a:50:f8:4b:31:d1: c3:73:10:51:54:91:74:22:9b:17:cb:2e:fb:9b:9a:6b:74:7c: 0b:a3:84:c9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEqbw8/HEX9E58w/ARAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcyMzAwNDUzNVoXDTI3MTAyNjAwNDUzNVowLzEtMCsGA1UEAxMk ZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEwMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfGhgChakq0nFz1QRZzkf7Zjy3JZdAXLGvcx oQnady08lnGG+AuSP1hPkGm16Gr1XfNOFiNykHkdmsP63Oh9QW3RQF7xCqmR1Uj/ XaHXAuVkq8jSOKQiqsbqvbPfqcLtDKsMT5AJOkywKD2X4ZiFp7lSCU1tx8fkP0dh R0nclXxsbeJ3x7775GOqsibQQy8jYybMGsV3tGI7Yfv9vHDfzJb0OsOKPBIdTmap /D1j7ItyrwMx5hHhM/IUmiH6ByQWW6VUg5hwIGKTgjzcH85uNBMFTWfx6fosDsmb o4xa1UZSwiw38xMTa1BMyI+CBH5Ilgbjs7qixqkVeitCvkl/awIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDLgtqaQaUIhIEC9SpDlkuCPHnuqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l OTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U5N2RhNzc4LWExZjYtNGRhZC05 ZDBhLWQzYTA3MDAxMDM3My9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAw MTAzNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAg4YwDgQCAAIwCAMGBCYC/DAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlQiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALGxHLKKMrzinCj/DIjl6Ad8CiJS SliOTzPYDgRFlRLqTnY6pm8GND3qjVc66btiFq13wK4azbPlENg9ZrsEDC69o8+Z FbesxZMKZw70GN8Yb0xI/ojo5yYAHKuXurZDNzuHqR+SGVgPIY+lxkITxV8OLAEh Q1QBmkHWQNajMyNgauPRgCpM7VSGk0cbjWZGi3/w6EnzPtcCKRil0M9NllXocEyP Z5Uq8BbsaJvWYikkrvC/4Nd6rqJCNqLzVf2I4K/Eht2hi30QOqXanIF3I9zj/COI 9KS2FSxRsrOQCKj+KIsBmVpQ+Esx0cNzEFFUkXQimxfLLvubmmt0fAujhMk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:55 2025 by rpki-client