$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer File: f3280fa0-3649-4902-978e-e7711edc5a33.cer (raw, json) Hash identifier: 3O8rsohUCqzIu78d5irQQIuOdZGjAfrLtzMwTVAOHVY= Subject key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849849767215BCD2191586E9680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 00:45:35 +0000 Certificate not after: Sun 18 Jul 2027 00:45:35 +0000 Subordinate resources: IP: 141.195.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:97:67:21:5b:cd:21:91:58:6e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 00:45:35 2025 GMT Not After : Jul 18 00:45:35 2027 GMT Subject: CN=f3280fa0-3649-4902-978e-e7711edc5a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:02:a9:d3:11:7a:a6:36:cb:5e:06:4e:03: e2:b1:18:a8:0f:70:06:6d:a5:de:f3:ae:f9:a3:55: af:98:60:66:1b:71:f3:6f:ce:89:d5:53:67:03:8c: ad:6c:57:b8:13:c1:72:0d:b1:da:c1:47:ad:c0:67: 64:1c:9c:5d:b7:f0:8d:37:8c:03:01:38:ed:e6:cd: e1:bd:2f:60:a4:42:c8:31:fd:d3:f6:a0:83:02:af: 19:f6:67:35:2b:e2:ef:07:11:54:d3:57:c9:f5:e8: 9d:54:ce:c5:e9:0d:53:3b:f7:15:fb:bc:84:8f:ab: 8a:30:56:7d:a0:f1:e9:ad:64:5b:c5:5b:06:b3:4f: f5:2f:92:9a:7e:95:5a:2a:4b:65:0d:83:1a:d3:6d: 0c:30:cf:1d:8d:d7:25:43:1d:d2:74:61:bb:4c:ef: bb:85:62:30:95:fc:90:1a:3f:58:25:f4:71:4f:6d: 02:70:44:b7:fa:75:21:cc:9a:8a:a5:0c:e2:b0:98: 96:de:23:c4:b2:4f:f0:5d:20:22:16:4e:4e:dd:bc: 1a:0a:b3:b5:37:31:d2:98:74:a1:bb:7a:52:b6:71: f2:16:9a:23:50:de:3b:02:8c:08:f6:1c:b0:b0:7b: cb:80:b4:12:35:7b:2c:24:91:fc:91:2c:89:f4:b1: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 141.195.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3f:76:77:a9:c5:d2:d3:4d:ef:e4:0a:67:df:49:a8:bc:92: de:c4:2b:d3:ee:b2:ea:87:69:aa:ef:b7:81:7d:b2:9c:5a:39: 94:42:35:16:9d:72:16:ff:0d:a9:48:d8:9d:90:61:bf:93:7b: fa:41:14:7b:95:a1:e8:f9:66:37:d2:c4:76:96:2d:7a:6a:8e: 87:aa:8e:65:c8:58:2f:77:34:ba:96:73:b8:1e:bc:ea:64:57: d8:82:30:a3:38:cd:93:4b:04:cd:8c:90:10:0f:0f:8b:46:f3: 0c:37:86:48:2d:e7:e2:80:b1:f9:b7:69:ad:fd:a3:04:c1:a2: 73:6d:d1:9e:b3:66:40:1d:22:a8:6a:fd:2c:a3:32:c9:2a:f3: 3d:13:b4:61:b4:a9:90:2b:c1:9c:52:7f:d8:3d:a0:ea:2b:db: d7:8e:7b:2b:b5:6c:86:2f:ab:7a:88:02:d7:e9:d3:14:d7:d3: e7:6b:3d:0e:ae:c6:98:32:7a:72:b8:bc:4a:c4:e6:ef:e9:fd: 11:f5:e4:08:33:c3:c5:dc:1c:20:6c:6e:b7:d1:9f:36:a2:af: 6a:fe:30:6d:79:4c:f8:ed:98:65:f4:27:65:65:df:fe:b7:5d: 18:44:3b:4e:be:61:a9:46:22:79:2d:f8:34:b2:6b:31:a6:b6: 7b:89:0d:df -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmEl2chW80hkVhuloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxNDAwNDUzNVoXDTI3MDcxODAwNDUzNVowLzEtMCsGA1UEAxMk ZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZYCqdMReqY2y14GTgPisRioD3AGbaXe8675 o1WvmGBmG3Hzb86J1VNnA4ytbFe4E8FyDbHawUetwGdkHJxdt/CNN4wDATjt5s3h vS9gpELIMf3T9qCDAq8Z9mc1K+LvBxFU01fJ9eidVM7F6Q1TO/cV+7yEj6uKMFZ9 oPHprWRbxVsGs0/1L5KafpVaKktlDYMa020MMM8djdclQx3SdGG7TO+7hWIwlfyQ Gj9YJfRxT20CcES3+nUhzJqKpQzisJiW3iPEsk/wXSAiFk5O3bwaCrO1NzHSmHSh u3pStnHyFpojUN47AowI9hywsHvLgLQSNXssJJH8kSyJ9LEjOQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCqAWPrdj4I7cqoDCLELar1P0nMmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YzMjgwZmEwLTM2NDktNDkwMi05 NzhlLWU3NzExZWRjNWEzMy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVk YzVhMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKNw2QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdj92d6nF0tNN7+QKZ99J qLyS3sQr0+6y6odpqu+3gX2ynFo5lEI1Fp1yFv8NqUjYnZBhv5N7+kEUe5Wh6Plm N9LEdpYtemqOh6qOZchYL3c0upZzuB686mRX2IIwozjNk0sEzYyQEA8Pi0bzDDeG SC3n4oCx+bdprf2jBMGic23RnrNmQB0iqGr9LKMyySrzPRO0YbSpkCvBnFJ/2D2g 6ivb1457K7Vshi+reogC1+nTFNfT52s9Dq7GmDJ6cri8SsTm7+n9EfXkCDPDxdwc IGxut9GfNqKvav4wbXlM+O2YZfQnZWXf/rddGEQ7Tr5hqUYieS34NLJrMaa2e4kN 3w== -----END CERTIFICATE-----Generated at Tue Nov 4 19:26:11 2025 by rpki-client