$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer File: 8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer (raw, json) Hash identifier: gtXh/NjMNyaWap1oR4AUfv5rKkNTTopJFP+5t9m6aW8= Subject key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority key identifier: DB:8C:F6:28:FF:3E:B7:EB:89:80:D5:4E:33:C0:CB:28:07:32:5E:63 Certificate issuer: /CN=2a1354c7-abca-41b6-8b21-4e35a8d9c2b4 Certificate serial: 010D0C9F4328584A04018A969181F5D7771BE380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 29 May 2025 16:07:06 +0000 Certificate not after: Wed 01 Sep 2027 16:07:06 +0000 Subordinate resources: IP: 40.27.0.0/16 IP: 40.57.0.0/16 IP: 40.183.0.0/16 IP: 40.223.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:04:01:8a:96:91:81:f5:d7:77:1b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1354c7-abca-41b6-8b21-4e35a8d9c2b4 Validity Not Before: May 29 16:07:06 2025 GMT Not After : Sep 1 16:07:06 2027 GMT Subject: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:e0:f3:27:d6:db:d2:6d:f6:93:5d:83:e8: d8:80:28:45:d5:18:bf:bb:e4:d0:43:a0:67:83:a8: be:33:70:8a:96:4c:27:17:ee:d5:ee:54:26:a3:e9: b4:6f:3f:50:b1:06:8f:df:1e:b4:ef:d2:73:4c:27: 8a:f8:bd:62:f5:99:da:80:89:2a:46:84:54:2c:9f: d2:71:74:7c:27:8f:50:d9:e6:0d:c6:04:e1:ac:1b: 33:d5:0b:8c:20:b9:8e:01:2f:a5:6b:9d:f5:34:ef: ea:e1:33:fd:11:06:de:65:5a:f3:d6:89:0d:71:27: 1b:23:78:3f:18:2d:0a:61:6d:05:d6:5c:0f:0b:77: b0:13:ad:6a:85:ca:61:a3:83:a1:82:b3:ba:cd:bf: c0:3d:45:54:be:c9:66:4d:e7:95:cb:48:1d:ee:24: 47:e7:2d:ea:34:c7:0a:6d:9e:67:32:85:c1:7b:d5: 55:4a:da:fa:8b:91:5d:05:3d:01:aa:dd:ac:bf:0b: b3:e4:73:34:57:ff:b7:0b:f2:b7:c9:e7:94:28:24: 91:8b:70:e3:4b:c6:20:03:b5:64:b3:8d:57:15:3e: c2:93:d8:ef:7b:96:26:4e:55:0c:0e:fb:b1:9a:3e: 8a:46:7f:1f:7b:09:1d:ce:28:98:ad:1e:8b:3d:e4: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl X509v3 Authority Key Identifier: keyid:DB:8C:F6:28:FF:3E:B7:EB:89:80:D5:4E:33:C0:CB:28:07:32:5E:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/16 40.57.0.0/16 40.183.0.0/16 40.223.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:70:a3:bf:df:16:b7:72:c5:06:35:40:5d:1a:b4:cc:55: 3d:c8:dd:85:2d:c6:a7:d4:83:6d:bb:98:18:b7:ee:85:db:ca: a0:e4:36:6c:25:8e:58:39:25:22:ab:4e:b0:04:ef:0b:e1:3a: 6b:e6:22:9c:67:1d:cf:71:b3:81:c7:70:3a:c7:57:6e:c4:1d: 72:86:96:0d:14:ed:fe:79:7c:d6:d4:24:cb:84:28:09:e2:de: d5:04:5b:ae:fa:f8:bb:31:a5:20:46:20:a8:26:d4:96:0a:44: fc:2f:4d:03:a0:33:1d:d5:c5:6f:a7:66:1a:06:ca:00:4d:f5: 9e:3c:1b:ab:f0:51:8f:ed:aa:7c:75:94:29:fd:b3:db:5c:ff: 0b:43:c8:2e:1f:4c:1a:61:d8:1f:c9:2c:c9:94:b0:4c:64:20: 0f:05:51:25:15:55:e0:30:39:a9:42:b7:fb:d3:6c:77:58:98: be:16:af:85:fb:7a:0b:c9:64:6c:c3:39:2b:4c:ad:44:61:80: f0:ba:7d:a1:8b:16:a3:ef:0c:6c:c2:bd:0d:13:5b:7a:cb:1d: 98:bf:23:c6:13:9a:fb:90:fc:b3:b8:56:7e:a1:f9:3b:aa:03: 91:63:80:d5:b2:8c:05:f2:36:08:53:57:2d:99:1f:48:98:3a: 98:61:b0:9c -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUAQ0Mn0MoWEoEAYqWkYH113cb44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExMzU0YzctYWJjYS00MWI2LThiMjEtNGUzNWE4ZDlj MmI0MB4XDTI1MDUyOTE2MDcwNloXDTI3MDkwMTE2MDcwNlowPTE7MDkGA1UEAxMy ODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFkYWFkZTMxZGYwZGIwZjM4 OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TeDzJ9bb0m32k12D 6NiAKEXVGL+75NBDoGeDqL4zcIqWTCcX7tXuVCaj6bRvP1CxBo/fHrTv0nNMJ4r4 vWL1mdqAiSpGhFQsn9JxdHwnj1DZ5g3GBOGsGzPVC4wguY4BL6VrnfU07+rhM/0R Bt5lWvPWiQ1xJxsjeD8YLQphbQXWXA8Ld7ATrWqFymGjg6GCs7rNv8A9RVS+yWZN 55XLSB3uJEfnLeo0xwptnmcyhcF71VVK2vqLkV0FPQGq3ay/C7PkczRX/7cL8rfJ 55QoJJGLcONLxiADtWSzjVcVPsKT2O97liZOVQwO+7GaPopGfx97CR3OKJitHos9 5IeXAgMBAAGjggOzMIIDrzAdBgNVHQ4EFgQUJ4royrjba92C117dbYUNGSANH5Mw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUz ZGM2NDExOWQvNS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2NDExOWQv NS8yNzhBRThDQUI4REI2QkREODJENzVFREQ2RDg1MEQxOTIwMEQxRjkzLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIx LTRlMzVhOGQ5YzJiNC8yYTEzNTRjNy1hYmNhLTQxYjYtOGIyMS00ZTM1YThkOWMy YjQuY3JsMB8GA1UdIwQYMBaAFNuM9ij/PrfriYDVTjPAyygHMl5jMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvMmExMzU0YzctYWJjYS00MWI2LThiMjEtNGUzNWE4 ZDljMmI0LmNlcjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMDACgbAwMAKDkD AwAotwMDACjfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFi/cKO/3xa3csUGNUBdGrTMVT3I3YUtxqfUg227 mBi37oXbyqDkNmwljlg5JSKrTrAE7wvhOmvmIpxnHc9xs4HHcDrHV27EHXKGlg0U 7f55fNbUJMuEKAni3tUEW676+LsxpSBGIKgm1JYKRPwvTQOgMx3VxW+nZhoGygBN 9Z48G6vwUY/tqnx1lCn9s9tc/wtDyC4fTBph2B/JLMmUsExkIA8FUSUVVeAwOalC t/vTbHdYmL4Wr4X7egvJZGzDOStMrURhgPC6faGLFqPvDGzCvQ0TW3rLHZi/I8YT mvuQ/LO4Vn6h+TuqA5FjgNWyjAXyNghTVy2ZH0iYOphhsJw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:16 2025 by rpki-client