$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer File: d3f2a064-9e78-4a16-a8db-33eef399665d.cer (raw, json) Hash identifier: 90HhqJUFx/Zs/607pt2knD4rjeyMWBeUD1gQ9SldvYs= Subject key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AB7AE8D66C96DC28D7AB70580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 Aug 2025 00:45:23 +0000 Certificate not after: Fri 05 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 397753 IP: 64.49.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:ae:8d:66:c9:6d:c2:8d:7a:b7:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 2 00:45:23 2025 GMT Not After : Nov 5 00:45:23 2027 GMT Subject: CN=d3f2a064-9e78-4a16-a8db-33eef399665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:0c:3b:f8:64:5e:bd:ed:c5:a3:ce:e2:f9: 79:2d:e0:09:37:36:72:e3:e4:c1:d8:d1:48:55:31: 0a:10:cf:52:78:5a:2b:1a:83:c3:64:84:c2:59:46: cd:55:de:a1:f1:01:57:6a:8d:95:9b:3d:e5:67:ce: be:66:c3:d7:57:0a:5e:15:81:5b:38:50:d4:b9:81: a1:52:6a:f8:10:e9:bc:23:77:67:38:27:48:b8:d3: d4:83:2b:8d:f4:50:a1:47:a5:a2:46:f1:45:c2:d6: 9b:dd:29:0b:b5:8e:73:3e:ad:5b:19:21:31:4d:99: db:18:c9:90:60:7b:d7:7a:59:96:62:31:c2:53:72: fd:9a:4d:d4:13:bb:4c:0d:52:24:26:a8:2b:58:8f: 19:5e:bc:0f:29:e2:89:71:2d:00:26:2a:72:2c:31: a3:01:4b:a7:ab:1e:38:5e:fb:b3:2f:99:fb:23:b3: 8a:09:b2:29:5b:e1:9a:39:de:ac:47:9f:f2:a2:83: 2b:7f:5d:08:50:51:c1:d0:ed:2d:07:5a:5d:d8:50: 61:46:4e:32:b7:8b:cb:78:6d:5e:24:b3:ea:8c:1f: 5e:bd:b4:75:04:32:87:b3:c6:89:8a:74:f2:b6:7b: 78:b5:af:6d:f4:ce:59:e0:9f:37:40:ce:30:15:42: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.49.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397753 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a8:d4:44:c8:b2:7e:7c:e9:b0:45:14:96:43:2e:b9:c8:80: 62:93:6a:64:dc:c9:e5:94:ab:b1:1c:b9:12:b1:eb:fd:21:96: b7:21:20:3a:5d:07:6b:e1:81:fd:1e:82:dc:78:da:6a:a6:d2: a6:00:56:24:6e:ea:bd:7c:48:16:f1:9d:d6:ec:70:15:75:3a: 19:0d:08:7e:8b:7d:36:39:09:b5:83:92:0a:5f:2b:c2:0b:92: 19:fe:9d:bc:8e:52:64:7c:6a:9a:85:05:2d:67:26:7c:bb:04: f7:f1:09:0d:56:4a:2c:ce:b0:8c:7e:c6:8a:36:ce:5a:d1:47: 8d:af:0f:0c:ba:6b:f9:b3:7e:01:b6:04:17:bf:ac:cb:38:10: 3a:ad:1d:0d:3b:15:40:f0:92:6d:8a:3d:34:26:f3:cf:67:d9: 83:95:68:c4:4e:7e:c9:7f:cb:fc:d1:53:74:97:a3:32:36:81: 48:61:a8:d4:7b:bb:31:cd:f4:f0:29:4c:6b:51:0d:00:66:a7: 12:25:06:35:0e:37:e3:3a:07:91:61:80:83:d5:34:da:5b:9d: 4a:56:4a:57:35:48:1f:38:f6:03:c0:7a:26:92:78:ea:13:63: 9d:8f:84:b2:fd:0c:30:fe:7d:56:72:ad:bd:a9:cb:a6:0c:6d: 0c:23:ab:8b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEq3ro1myW3CjXq3BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwMjAwNDUyM1oXDTI3MTEwNTAwNDUyM1owLzEtMCsGA1UEAxMk ZDNmMmEwNjQtOWU3OC00YTE2LWE4ZGItMzNlZWYzOTk2NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0MO/hkXr3txaPO4vl5LeAJNzZy4+TB2NFI VTEKEM9SeForGoPDZITCWUbNVd6h8QFXao2Vmz3lZ86+ZsPXVwpeFYFbOFDUuYGh Umr4EOm8I3dnOCdIuNPUgyuN9FChR6WiRvFFwtab3SkLtY5zPq1bGSExTZnbGMmQ YHvXelmWYjHCU3L9mk3UE7tMDVIkJqgrWI8ZXrwPKeKJcS0AJipyLDGjAUunqx44 XvuzL5n7I7OKCbIpW+GaOd6sR5/yooMrf10IUFHB0O0tB1pd2FBhRk4yt4vLeG1e JLPqjB9evbR1BDKHs8aJinTytnt4ta9t9M5Z4J83QM4wFUI0UQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEw4HIUlWbbBeP/jup2DO8cQ+x9RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k M2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5OTY2NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzZjJhMDY0LTllNzgtNGExNi1h OGRiLTMzZWVmMzk5NjY1ZC9kM2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5 OTY2NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAMSAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhG5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEGo1ETIsn586bBFFJZDLrnIgGKTamTcyeWUq7EcuRKx6/0h lrchIDpdB2vhgf0egtx42mqm0qYAViRu6r18SBbxndbscBV1OhkNCH6LfTY5CbWD kgpfK8ILkhn+nbyOUmR8apqFBS1nJny7BPfxCQ1WSizOsIx+xoo2zlrRR42vDwy6 a/mzfgG2BBe/rMs4EDqtHQ07FUDwkm2KPTQm889n2YOVaMROfsl/y/zRU3SXozI2 gUhhqNR7uzHN9PApTGtRDQBmpxIlBjUON+M6B5FhgIPVNNpbnUpWSlc1SB849gPA eiaSeOoTY52PhLL9DDD+fVZyrb2py6YMbQwjq4s= -----END CERTIFICATE-----Generated at Mon Aug 4 07:56:57 2025 by rpki-client