$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer File: a9a8478d-2e70-4659-8d85-8edbac09d675.cer (raw, json) Hash identifier: 58rlaeeidc6eqAsOV3xacpOjVkuUreZHAELZuDZ7SOY= Subject key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA9B93EDF294DD51E8E7F5200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 27370 IP: 140.241.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3e:df:29:4d:d5:1e:8e:7f:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:14:0b:69:a7:83:a5:12:64:9c:e5:8f:86: d9:b8:9c:46:48:6a:54:2c:f8:5d:47:f3:30:16:52: 26:02:1b:d4:2e:c3:19:ab:06:0a:a7:f2:e9:3e:51: f5:96:ae:55:ba:50:b4:9f:ba:3f:78:a9:37:c3:21: 2b:77:f1:f8:24:cf:d8:6f:e5:bb:bc:98:3c:49:4e: 48:83:06:63:e8:1e:4e:b3:b0:87:4d:ff:74:6b:03: cc:87:33:6b:e8:51:d6:be:88:de:b0:a5:e9:8e:69: 44:8d:3e:f8:d9:e6:8c:73:d1:c5:ac:47:17:0f:bf: bd:77:17:2c:de:2c:5a:ae:f5:62:a1:a8:4d:0b:28: 46:d8:e7:80:c2:4a:72:c0:97:28:8c:2b:ff:69:f7: 46:db:e7:d8:9b:da:5f:65:62:d4:12:67:9f:a5:8b: 01:c0:a9:a4:e2:38:02:1a:33:bb:06:00:f4:d9:cc: bb:5b:75:9b:e9:8d:b7:bf:37:a1:28:ba:94:ef:58: 7d:d4:78:d1:bb:e7:d2:78:11:5c:d3:c8:ee:19:c5: 95:50:24:f9:5b:d7:12:47:bb:6a:ed:dd:04:20:0f: 77:ad:2b:7a:3f:16:2e:00:a8:b0:4b:0b:b2:93:9d: 92:8e:c1:c9:ed:c6:a7:bd:54:5b:bd:de:84:3b:0e: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 140.241.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27370 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:18:88:55:09:30:e3:31:03:97:23:de:ce:84:98:82:f0:3a: 7a:66:b6:77:8a:11:61:bb:7a:6a:d5:2a:2a:91:16:54:50:35: df:dc:39:05:1e:77:ad:1b:a6:1f:29:47:83:b3:92:dd:7f:8c: 5a:ed:41:40:61:4a:9a:85:21:b5:2a:3b:23:f6:72:34:7c:d9: 06:51:bd:c2:fc:64:99:8d:9b:d1:f7:aa:75:95:65:6e:6e:a4: 99:2f:31:22:e0:b2:f0:75:eb:5d:b0:8e:c4:14:ce:eb:f2:3c: 71:c3:3c:0f:7b:36:2b:c1:4b:bf:23:03:52:45:da:c8:20:dd: c9:62:e3:97:ba:38:a7:c7:e4:7b:74:a7:d4:17:25:bf:2a:21: c2:44:ff:5d:81:e9:89:b1:2e:84:c0:96:f4:9a:96:14:80:82: f2:61:0e:12:00:43:3a:82:cc:ed:78:99:c3:4c:94:fb:f1:53: 63:1d:a6:a6:b6:fe:3b:d3:e2:0c:b6:f7:a8:b4:ec:d4:a4:24: 47:42:1c:e3:62:74:5e:29:bf:b9:02:c5:96:bc:fc:e6:9e:ce: d7:1e:55:a4:54:93:25:02:25:c5:07:da:5f:b6:cb:b4:6e:64: 00:61:30:2f:bf:31:c4:31:4e:cd:0c:4d:bd:f8:86:a7:9e:03: d2:df:b4:6f -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEqpuT7fKU3VHo5/UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk YTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlkNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oMUC2mng6USZJzlj4bZuJxGSGpULPhdR/Mw FlImAhvULsMZqwYKp/LpPlH1lq5VulC0n7o/eKk3wyErd/H4JM/Yb+W7vJg8SU5I gwZj6B5Os7CHTf90awPMhzNr6FHWvojesKXpjmlEjT742eaMc9HFrEcXD7+9dxcs 3ixarvVioahNCyhG2OeAwkpywJcojCv/afdG2+fYm9pfZWLUEmefpYsBwKmk4jgC GjO7BgD02cy7W3Wb6Y23vzehKLqU71h91HjRu+fSeBFc08juGcWVUCT5W9cSR7tq 7d0EIA93rSt6PxYuAKiwSwuyk52SjsHJ7canvVRbvd6EOw6ZjQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFHfe16sORvUwg6C9QOC91jYGOahnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5YTg0NzhkLTJlNzAtNDY1OS04 ZDg1LThlZGJhYzA5ZDY3NS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMw OWQ2NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCM8TAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJq 6jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBBGIhVCTDjMQOXI97OhJiC8Dp6ZrZ3ihFhu3pq1SoqkRZUUDXf 3DkFHnetG6YfKUeDs5Ldf4xa7UFAYUqahSG1Kjsj9nI0fNkGUb3C/GSZjZvR96p1 lWVubqSZLzEi4LLwdetdsI7EFM7r8jxxwzwPezYrwUu/IwNSRdrIIN3JYuOXujin x+R7dKfUFyW/KiHCRP9dgemJsS6EwJb0mpYUgILyYQ4SAEM6gszteJnDTJT78VNj Haamtv470+IMtveotOzUpCRHQhzjYnReKb+5AsWWvPzmns7XHlWkVJMlAiXFB9pf tsu0bmQAYTAvvzHEMU7NDE29+IanngPS37Rv -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:33 2025 by rpki-client