$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer File: 46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer (raw, json) Hash identifier: 3DTZJq8YMjsLG3lhVzDF+jkuJQF1/bPUg5krbC0Pcuw= Subject key identifier: BE:F8:B5:F9:23:47:13:55:91:46:F2:9C:26:9F:1B:55:5E:A0:12:CB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A856E583ACEC9F1A572A27980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 00:45:35 +0000 Certificate not after: Mon 18 Oct 2027 00:45:35 +0000 Subordinate resources: IP: 47.182.0.0 -- 47.190.255.255 IP: 172.102.32.0/19 IP: 172.108.0.0/16 IP: 2606:4c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:6e:58:3a:ce:c9:f1:a5:72:a2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 15 00:45:35 2025 GMT Not After : Oct 18 00:45:35 2027 GMT Subject: CN=46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:52:f5:83:b4:65:68:a9:c8:a9:f9:63:2a: 01:ac:2d:cc:9e:b5:68:0c:03:71:71:79:c5:66:a7: 78:5c:e8:ab:1a:f6:55:b5:e0:64:cc:10:08:c7:99: c8:d4:f6:64:7c:2e:26:65:7c:2c:b5:c4:a4:7c:b6: 37:2e:0f:3d:99:74:10:4b:7b:8f:8c:26:89:f6:47: 3e:03:9c:61:f6:a0:d3:08:15:ee:68:02:bf:d1:31: b4:51:f0:34:22:89:4f:eb:c9:e1:f6:d9:cb:d6:c7: 89:6a:d7:30:93:73:6f:db:ab:71:ec:7a:55:a4:ef: 9c:7e:cc:ac:b7:55:a0:04:0c:18:db:d8:e0:98:92: 76:42:07:20:02:17:03:8e:e5:47:46:c9:f0:bd:99: 61:5f:b8:72:10:ca:f7:aa:80:ae:ed:5e:75:10:a0: 74:d4:da:ba:c4:1f:83:8d:ba:3b:7e:44:e8:84:33: f7:fe:fa:c7:39:15:3d:9a:a7:e7:0d:40:5f:f4:2f: d3:aa:8f:53:a9:29:81:02:3f:08:58:9b:7c:b1:3d: a6:53:c0:3e:44:63:4b:bb:12:ed:7a:6b:1f:a6:d7: 71:fc:fe:1d:1e:ea:d8:5b:fe:a7:56:ad:5f:36:6f: 95:15:d4:9f:4f:d9:13:fa:c8:66:e0:52:3e:46:c2: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F8:B5:F9:23:47:13:55:91:46:F2:9C:26:9F:1B:55:5E:A0:12:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 47.182.0.0-47.190.255.255 172.102.32.0/19 172.108.0.0/16 IPv6: 2606:4c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d2:af:82:77:db:54:f1:fc:c7:5b:a6:b2:dc:6f:34:ea:24: 3b:c3:0e:e4:2d:4d:1e:56:85:c7:29:4b:46:94:15:25:12:02: 24:c9:b9:f5:fd:8a:86:c3:b7:ab:4f:1f:50:ca:2b:64:0b:f8: aa:7d:f4:1c:3e:a6:f7:ed:cc:fb:96:6c:69:94:ee:78:0f:81: ca:05:40:3d:3a:73:9b:42:01:02:08:0b:08:63:cc:47:50:8c: cf:d4:bf:1c:69:90:d5:49:90:f5:a9:68:b4:db:d4:19:0b:4e: be:16:cc:ff:c2:51:d9:eb:f1:7f:24:8e:e9:f7:68:69:e9:a0: 5c:ab:71:de:bb:ec:1d:6d:08:ab:4b:d4:36:44:01:dc:9f:c2: 2c:6e:58:49:7a:eb:d8:b0:b4:59:e3:fe:83:79:9e:9d:73:d8: 7d:b0:eb:6d:a6:76:71:62:2b:bf:7a:39:2d:d2:7c:bc:aa:c8: 8d:ac:61:fb:5f:c7:2e:9a:df:cd:7f:1d:38:0b:ba:9d:8d:12: 19:43:45:8e:ab:b9:d9:ca:68:d8:6d:0c:a0:c7:36:1e:71:24: f7:fe:d8:66:2b:e8:61:1a:8a:a3:18:d1:6c:53:d1:92:87:e6: f6:8f:26:1c:39:57:f3:11:d3:df:87:6d:c3:0c:ef:e6:a3:b9: 29:36:81:2b -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEqFblg6zsnxpXKieYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxNTAwNDUzNVoXDTI3MTAxODAwNDUzNVowLzEtMCsGA1UEAxMk NDZiZjFmMDMtMmViZC00MDVlLWE1YjctNjJiZGYzZDdkYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKpS9YO0ZWipyKn5YyoBrC3MnrVoDANxcXnF Zqd4XOirGvZVteBkzBAIx5nI1PZkfC4mZXwstcSkfLY3Lg89mXQQS3uPjCaJ9kc+ A5xh9qDTCBXuaAK/0TG0UfA0IolP68nh9tnL1seJatcwk3Nv26tx7HpVpO+cfsys t1WgBAwY29jgmJJ2QgcgAhcDjuVHRsnwvZlhX7hyEMr3qoCu7V51EKB01Nq6xB+D jbo7fkTohDP3/vrHORU9mqfnDUBf9C/Tqo9TqSmBAj8IWJt8sT2mU8A+RGNLuxLt emsfptdx/P4dHurYW/6nVq1fNm+VFdSfT9kT+shm4FI+RsLR+QIDAQABo4IEHzCC BBswHQYDVR0OBBYEFL74tfkjRxNVkUbynCafG1VeoBLLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 NmJmMWYwMy0yZWJkLTQwNWUtYTViNy02MmJkZjNkN2RiZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1h NWI3LTYyYmRmM2Q3ZGJlNi80NmJmMWYwMy0yZWJkLTQwNWUtYTViNy02MmJkZjNk N2RiZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB0EAgABMBcwCgMDAS+2AwMAL74DBAWsZiADAwCsbDANBAIAAjAH AwUAJgZMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCA0q+Cd9tU8fzHW6ay3G806iQ7ww7kLU0eVoXHKUtG lBUlEgIkybn1/YqGw7erTx9QyitkC/iqffQcPqb37cz7lmxplO54D4HKBUA9OnOb QgECCAsIY8xHUIzP1L8caZDVSZD1qWi029QZC06+Fsz/wlHZ6/F/JI7p92hp6aBc q3Heu+wdbQirS9Q2RAHcn8IsblhJeuvYsLRZ4/6DeZ6dc9h9sOttpnZxYiu/ejkt 0ny8qsiNrGH7X8cumt/Nfx04C7qdjRIZQ0WOq7nZymjYbQygxzYecST3/thmK+hh GoqjGNFsU9GSh+b2jyYcOVfzEdPfh23DDO/mo7kpNoEr -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:31 2025 by rpki-client