$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer File: f8838580-1598-45e5-8353-b551ae78b110.cer (raw, json) Hash identifier: ht1pa4A5ziXnAWLIFQ8/yjrjGMfI9J/10l5UFd+vlFk= Subject key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AC4BA33282BA41021D4DAD360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 16:54:22 +0000 Certificate not after: Sat 07 Aug 2027 00:45:35 +0000 Subordinate resources: IP: 64.190.42.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:ba:33:28:2b:a4:10:21:d4:da:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 6 16:54:22 2025 GMT Not After : Aug 7 00:45:35 2027 GMT Subject: CN=f8838580-1598-45e5-8353-b551ae78b110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:04:fb:54:8f:cc:87:ce:77:5d:3c:51:6c:6f: a8:45:32:29:ff:a2:d1:d8:e6:32:73:c4:a1:f6:df: 2c:8e:33:da:ed:0b:da:93:49:ae:35:ec:be:8f:06: 28:63:d8:92:67:e5:58:97:c2:ab:3f:e9:6a:32:b4: a8:c3:35:ff:78:ce:f5:9e:34:24:38:eb:37:29:a6: c3:17:28:0d:78:1b:75:cd:db:60:7d:68:14:f6:a1: 0d:11:e4:69:a1:38:08:6c:b9:3f:ca:5b:74:7d:a2: 11:1f:27:a2:40:bd:9e:36:25:00:27:d7:51:bd:24: 43:bc:92:cc:07:25:6a:1c:9a:26:37:99:1c:2d:6a: 1d:ec:bc:d5:c0:91:51:5f:91:8b:ee:02:3a:3e:12: 96:99:aa:8e:8a:71:52:21:53:42:39:39:5a:66:4f: 70:15:d2:c4:f5:21:35:79:60:7e:a4:28:a0:d7:07: 12:9f:67:bd:b0:e4:1a:27:5a:0d:ae:59:21:06:31: c9:55:f0:5f:6b:b0:b7:c4:10:3f:9b:ae:4a:1f:56: de:0a:99:b8:c1:b1:da:d8:01:20:62:58:4d:5d:d6: 6b:1b:ac:b3:74:77:2c:86:1e:0a:17:2c:78:15:c0: 0f:25:b4:09:5e:a6:2b:83:ba:f6:c4:8e:5e:83:2b: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.190.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:06:fe:73:0f:7b:11:60:96:c4:58:08:33:55:85:07:e4:a2: ce:b8:ba:3f:8b:87:dd:cd:fd:ca:a3:39:7b:46:e1:0f:44:29: 5b:73:b0:aa:9b:2b:75:fc:09:ef:59:da:0a:a2:69:48:75:84: 5f:e8:fc:09:d7:70:33:d9:f4:bf:43:07:35:6d:38:8e:91:3a: 06:14:79:e7:28:41:42:91:f8:71:92:4b:e8:79:55:5e:60:fe: 19:7e:15:d3:61:11:b4:e4:6e:4b:0c:59:1e:31:9b:08:28:19: aa:fb:9a:aa:7f:60:6f:03:74:6c:fd:43:1c:bd:1f:c2:65:e5: 2b:20:7a:a8:60:34:64:9e:99:40:68:b3:f8:bd:3f:f5:5b:f3: a8:99:a3:37:74:4b:90:5d:79:84:8e:24:4e:99:7f:bf:15:cb: 93:a4:7c:fc:f3:62:7b:65:99:db:28:5d:ed:97:f2:80:58:ba: ff:ec:f8:01:39:31:6a:54:ef:9c:24:44:3d:fd:90:b0:fc:7d: d2:f9:90:aa:33:de:2e:00:4b:59:1f:9d:4a:1b:33:a3:cf:51: 02:62:bf:3f:3d:5b:4f:7d:29:21:0a:e5:18:64:8a:b5:64:9e: d7:88:54:c5:52:8e:8f:af:88:7e:65:a2:23:ce:01:60:da:a1: 31:64:29:07 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErEujMoK6QQIdTa02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgwNjE2NTQyMloXDTI3MDgwNzAwNDUzNVowLzEtMCsGA1UEAxMk Zjg4Mzg1ODAtMTU5OC00NWU1LTgzNTMtYjU1MWFlNzhiMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwT7VI/Mh853XTxRbG+oRTIp/6LR2OYyc8Sh 9t8sjjPa7Qvak0muNey+jwYoY9iSZ+VYl8KrP+lqMrSowzX/eM71njQkOOs3KabD FygNeBt1zdtgfWgU9qENEeRpoTgIbLk/ylt0faIRHyeiQL2eNiUAJ9dRvSRDvJLM ByVqHJomN5kcLWod7LzVwJFRX5GL7gI6PhKWmaqOinFSIVNCOTlaZk9wFdLE9SE1 eWB+pCig1wcSn2e9sOQaJ1oNrlkhBjHJVfBfa7C3xBA/m65KH1beCpm4wbHa2AEg YlhNXdZrG6yzdHcshh4KFyx4FcAPJbQJXqYrg7r2xI5egyukqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFN6G+/L98PV4voP7ZQ8Uu+f+dXzUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m ODgzODU4MC0xNTk4LTQ1ZTUtODM1My1iNTUxYWU3OGIxMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Y4ODM4NTgwLTE1OTgtNDVlNS04 MzUzLWI1NTFhZTc4YjExMC9mODgzODU4MC0xNTk4LTQ1ZTUtODM1My1iNTUxYWU3 OGIxMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAviowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAawb+cw97EWCWxFgIM1WF B+Sizri6P4uH3c39yqM5e0bhD0QpW3OwqpsrdfwJ71naCqJpSHWEX+j8CddwM9n0 v0MHNW04jpE6BhR55yhBQpH4cZJL6HlVXmD+GX4V02ERtORuSwxZHjGbCCgZqvua qn9gbwN0bP1DHL0fwmXlKyB6qGA0ZJ6ZQGiz+L0/9VvzqJmjN3RLkF15hI4kTpl/ vxXLk6R8/PNie2WZ2yhd7ZfygFi6/+z4ATkxalTvnCREPf2QsPx90vmQqjPeLgBL WR+dShszo89RAmK/Pz1bT30pIQrlGGSKtWSe14hUxVKOj6+IfmWiI84BYNqhMWQp Bw== -----END CERTIFICATE-----Generated at Sat Aug 9 02:51:41 2025 by rpki-client