$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer File: d16114d0-9aed-42a2-956d-441c06a82e37.cer (raw, json) Hash identifier: B4fPr154FpdR0HDPyB0QCLGgla5BDdfbl4BGK3fmjEs= Subject key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858497807519D592BBE0FD296BEA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 12:45:34 +0000 Certificate not after: Tue 13 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 104.245.240.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:07:51:9d:59:2b:be:0f:d2:96:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 9 12:45:34 2025 GMT Not After : Jul 13 12:45:34 2027 GMT Subject: CN=d16114d0-9aed-42a2-956d-441c06a82e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:4d:5c:d1:dd:51:9a:a3:2f:a2:29:1f:16: 8c:93:53:17:71:e4:71:67:7a:8f:9b:ff:48:02:07: 6b:8f:a8:d6:b7:f4:8e:77:57:ba:4a:a5:d4:de:68: 60:5b:75:69:6d:30:da:cf:36:1f:e3:27:84:ff:3e: 6b:01:6e:74:43:2b:35:dd:2d:8e:db:0d:f9:99:c7: 21:72:48:77:12:c9:0d:ee:a9:cf:85:ca:dc:3e:54: d7:f1:fd:d8:a1:06:66:9e:d6:4f:73:e4:35:86:8a: 63:5b:b2:f6:9f:2d:2c:b6:83:72:24:a4:46:07:ef: be:4a:53:08:74:72:3d:6a:a0:25:83:79:d1:f9:dd: df:a0:8d:f5:53:a5:9d:e9:28:87:ee:7b:75:70:30: e7:0e:d6:5b:72:32:61:ae:7c:4a:79:88:86:d0:e9: 1a:af:e9:5a:13:aa:2a:b6:8a:a7:06:61:08:89:b1: 83:6c:1c:7e:f2:41:48:ba:77:04:9a:72:8f:84:67: 7c:e0:08:aa:5a:9a:d4:08:52:fa:ba:23:44:2b:ee: 1c:cf:96:6d:43:dc:dc:ab:1b:af:c1:fd:ae:88:9a: fd:81:c7:96:d2:e8:70:a9:90:a9:94:28:5d:cd:61: dc:ce:0e:2c:40:36:9f:15:a8:45:fd:fe:9f:24:c4: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.245.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4d:27:a5:cf:b6:92:59:91:97:25:69:b0:b9:b0:f1:29:c7: ef:52:b1:1d:c1:e2:72:2f:53:3e:b9:47:18:cf:0c:20:ce:f9: 91:fa:b5:9a:ff:b0:55:ee:90:ff:e1:a1:69:89:d6:40:72:b3: 5d:5f:92:e4:b9:85:4c:99:98:f6:6b:ac:56:79:f0:66:e5:df: 9a:55:89:46:1f:41:ac:c8:21:6f:29:6e:d4:b7:80:bd:95:94: 57:14:dc:87:08:c3:61:be:ba:9b:99:fe:56:7d:2b:7d:2d:6e: ab:5b:1d:42:e9:a7:6a:74:2a:fb:79:e2:f8:12:01:9d:0a:fd: f7:8a:94:58:56:84:79:d0:6e:bf:29:5b:e3:01:d5:ea:94:64: d2:d3:ad:13:2c:0d:f3:e2:6e:95:b1:4b:1c:9a:b6:f2:56:6d: 6c:4d:a1:ce:3f:04:51:45:6a:2a:75:67:eb:3d:d3:05:95:2a: bc:b2:43:b2:ab:d6:77:85:9c:88:4b:d2:ca:e3:80:7f:f9:4d: 42:44:10:03:1e:be:59:99:27:a0:fd:d4:61:b5:f8:0f:0a:a5: 6d:a3:81:9e:5a:43:59:af:a2:46:e7:40:76:86:c4:51:f0:7c: 7b:d8:f5:5c:b0:0c:f0:16:29:1e:35:5d:62:cc:c4:44:93:98: 1e:a0:b7:ec -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEl4B1GdWSu+D9KWvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwOTEyNDUzNFoXDTI3MDcxMzEyNDUzNFowLzEtMCsGA1UEAxMk ZDE2MTE0ZDAtOWFlZC00MmEyLTk1NmQtNDQxYzA2YTgyZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprRNXNHdUZqjL6IpHxaMk1MXceRxZ3qPm/9I Agdrj6jWt/SOd1e6SqXU3mhgW3VpbTDazzYf4yeE/z5rAW50Qys13S2O2w35mcch ckh3EskN7qnPhcrcPlTX8f3YoQZmntZPc+Q1hopjW7L2ny0stoNyJKRGB+++SlMI dHI9aqAlg3nR+d3foI31U6Wd6SiH7nt1cDDnDtZbcjJhrnxKeYiG0Okar+laE6oq toqnBmEIibGDbBx+8kFIuncEmnKPhGd84AiqWprUCFL6uiNEK+4cz5ZtQ9zcqxuv wf2uiJr9gceW0uhwqZCplChdzWHczg4sQDafFahF/f6fJMQpVwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMexJ37wWiuPS1en8tMQo9RnwzmKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MTYxMTRkMC05YWVkLTQyYTItOTU2ZC00NDFjMDZhODJlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QxNjExNGQwLTlhZWQtNDJhMi05 NTZkLTQ0MWMwNmE4MmUzNy9kMTYxMTRkMC05YWVkLTQyYTItOTU2ZC00NDFjMDZh ODJlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo9fAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR00npc+2klmRlyVpsLmw 8SnH71KxHcHici9TPrlHGM8MIM75kfq1mv+wVe6Q/+GhaYnWQHKzXV+S5LmFTJmY 9musVnnwZuXfmlWJRh9BrMghbylu1LeAvZWUVxTchwjDYb66m5n+Vn0rfS1uq1sd QumnanQq+3ni+BIBnQr994qUWFaEedBuvylb4wHV6pRk0tOtEywN8+JulbFLHJq2 8lZtbE2hzj8EUUVqKnVn6z3TBZUqvLJDsqvWd4WciEvSyuOAf/lNQkQQAx6+WZkn oP3UYbX4DwqlbaOBnlpDWa+iRudAdobEUfB8e9j1XLAM8BYpHjVdYszERJOYHqC3 7A== -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:35 2025 by rpki-client