$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer File: d38fa32a-a6da-4615-8255-2c818c06ef15.cer (raw, json) Hash identifier: z+cEohBLST8OcpNZhKsXIFvXFuUi8g6n5FPRA6oJJWA= Subject key identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA9B93EFE0C009B57BF3F7D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 204.107.89.0/24 IP: 2606:8740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3e:fe:0c:00:9b:57:bf:3f:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=d38fa32a-a6da-4615-8255-2c818c06ef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:8e:1c:20:91:30:62:20:dd:87:c5:99:fa: 99:6a:87:73:bc:b2:45:9a:f7:2c:47:6e:2a:39:80: 7f:34:2d:52:a9:1c:d3:fc:35:91:98:82:de:62:84: 39:2c:0a:a4:27:22:2c:10:53:f4:a4:0e:0e:fc:ee: 21:c5:ea:f2:7b:50:63:50:24:45:ac:6f:1a:01:45: 35:81:ec:1c:ef:80:02:81:ca:9a:da:91:46:65:96: ca:30:7b:24:05:37:d1:e9:09:f4:0c:fe:92:cd:97: d8:9d:4c:34:8f:1f:43:15:9c:c5:89:2d:69:d5:4a: 47:94:60:45:1e:5e:d2:bc:e2:b2:81:5e:73:7f:96: fd:d8:fe:3d:72:5a:4b:38:0b:56:0c:29:1c:bd:7f: af:41:67:fb:07:0e:75:da:4f:47:86:34:1d:b2:93: 08:84:63:78:ae:a9:6e:4f:76:bd:de:55:ce:fb:69: d4:83:f2:1f:02:51:4e:e2:18:30:5b:0c:35:e7:4f: eb:e3:94:4b:5d:07:bc:53:b4:be:67:5c:20:7f:74: 40:61:57:41:ff:33:ef:ff:72:79:75:27:aa:33:dc: 01:37:ff:1f:29:bc:2f:1b:cf:44:71:44:02:f1:c2: e3:11:ba:fb:a2:7d:51:d0:61:e5:cb:a3:26:07:12: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.107.89.0/24 IPv6: 2606:8740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:76:e9:0c:c2:87:9d:b7:7b:a5:2a:39:73:62:58:fe:ea:69: 47:91:73:1c:41:b4:dc:b6:1e:3b:51:7a:76:b7:f4:1b:3c:dd: 07:9e:e9:b0:34:25:f5:f8:bb:e7:1a:29:bd:dc:70:fc:ef:30: db:9e:62:83:3d:fd:85:52:02:79:51:0d:16:e6:59:37:a9:1d: 7d:50:c4:7c:40:f0:99:d5:65:df:83:9c:3d:b0:15:f2:6e:99: 47:26:b2:d1:a5:77:92:c5:a3:a2:fc:52:c9:9b:34:85:45:cb: a8:09:87:0d:8e:34:47:ab:09:67:11:87:ca:b8:92:13:60:96: 78:0a:57:60:b9:74:47:bd:2d:82:90:3b:37:07:24:80:54:43: ca:ba:ff:c2:eb:71:d5:c2:9b:bd:98:b3:2a:0e:81:bc:f3:45: 2b:d3:f0:51:45:6d:00:a6:a1:4a:26:c4:ef:75:4b:b6:5c:a8: 9e:ac:02:81:f6:d6:be:c4:a3:d1:f3:81:9e:a8:53:83:ba:d0: 7e:e1:a5:ac:86:62:b5:e5:a0:eb:8e:91:cc:d8:80:d7:1e:77: a9:a6:87:e3:0a:39:a2:ee:c4:e1:33:6f:2b:c2:bc:30:3d:8f: 73:b0:5b:60:8d:63:ff:b3:6a:45:b4:07:c3:85:98:12:b3:8a: d0:ec:56:77 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEqpuT7+DACbV78/fUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk ZDM4ZmEzMmEtYTZkYS00NjE1LTgyNTUtMmM4MThjMDZlZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20SOHCCRMGIg3YfFmfqZaodzvLJFmvcsR24q OYB/NC1SqRzT/DWRmILeYoQ5LAqkJyIsEFP0pA4O/O4hxerye1BjUCRFrG8aAUU1 gewc74ACgcqa2pFGZZbKMHskBTfR6Qn0DP6SzZfYnUw0jx9DFZzFiS1p1UpHlGBF Hl7SvOKygV5zf5b92P49clpLOAtWDCkcvX+vQWf7Bw512k9HhjQdspMIhGN4rqlu T3a93lXO+2nUg/IfAlFO4hgwWww150/r45RLXQe8U7S+Z1wgf3RAYVdB/zPv/3J5 dSeqM9wBN/8fKbwvG89EcUQC8cLjEbr7on1R0GHly6MmBxJkUQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFLBnHHdahFY2zrJpRcVv5KMdBwdsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MzhmYTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgxOGMwNmVmMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzOGZhMzJhLWE2ZGEtNDYxNS04 MjU1LTJjODE4YzA2ZWYxNS9kMzhmYTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgxOGMw NmVmMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADMa1kwDQQCAAIwBwMFACYGh0AwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA PHbpDMKHnbd7pSo5c2JY/uppR5FzHEG03LYeO1F6drf0GzzdB57psDQl9fi75xop vdxw/O8w255igz39hVICeVENFuZZN6kdfVDEfEDwmdVl34OcPbAV8m6ZRyay0aV3 ksWjovxSyZs0hUXLqAmHDY40R6sJZxGHyriSE2CWeApXYLl0R70tgpA7NwckgFRD yrr/wutx1cKbvZizKg6BvPNFK9PwUUVtAKahSibE73VLtlyonqwCgfbWvsSj0fOB nqhTg7rQfuGlrIZiteWg646RzNiA1x53qaaH4wo5ou7E4TNvK8K8MD2Pc7BbYI1j /7NqRbQHw4WYErOK0OxWdw== -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:28 2025 by rpki-client