$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer File: 27b41e1f-1561-4820-9e8b-d00057b5083a.cer (raw, json) Hash identifier: D56Cc81UAHaiRDtL6jxXxh0z/wd/D5Vp9DG3AFTsZEc= Subject key identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A8D0FBF0987752545600C1700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 18:21:28 +0000 Certificate not after: Thu 25 Mar 2027 02:40:41 +0000 Subordinate resources: IP: 23.141.252.0/24 IP: 45.59.150.0/24 IP: 207.174.59.0/24 IP: 2602:f5e5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:0f:bf:09:87:75:25:45:60:0c:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 17 18:21:28 2025 GMT Not After : Mar 25 02:40:41 2027 GMT Subject: CN=27b41e1f-1561-4820-9e8b-d00057b5083a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:bc:d5:10:3f:20:99:f2:20:5a:e9:f0:e1: 13:c5:be:cc:96:a8:ad:38:87:65:ac:03:0e:07:f9: 00:4c:f1:e0:c2:36:8d:1e:29:ca:ea:94:8e:82:9d: 16:ea:81:55:f1:81:25:76:d6:21:f6:ba:28:d8:a4: 98:c1:d3:04:bd:ca:e0:7a:e7:be:3d:18:dc:68:73: 96:b4:c5:4d:c3:b3:5c:c2:44:07:12:cf:d1:da:82: cc:41:75:55:37:56:45:0f:48:fa:73:81:76:da:1f: ce:3f:99:56:7c:ef:5b:6a:96:85:df:cf:0c:3e:87: 88:9f:79:6b:9f:a4:56:49:a3:6b:64:28:d5:0f:4a: d2:d6:46:e7:8c:fc:5d:ff:48:e5:9f:30:43:82:d1: 30:d5:69:6d:fd:f9:ac:ec:3e:4d:b8:1b:d0:66:2b: f1:36:79:5e:ab:f9:cd:1a:8b:71:01:2f:d4:7f:25: 7a:02:99:79:74:05:c7:e2:9b:c0:26:bb:98:2a:47: ac:e9:5c:7a:9b:15:82:2d:2a:bb:5a:65:04:0e:66: 2d:e6:85:1a:fe:b4:31:a6:24:fb:2c:cd:a8:25:21: 16:71:7d:3d:e1:da:7e:ee:85:61:ad:f2:c8:6e:4c: 3d:50:9d:6f:fa:f1:f9:76:b8:41:05:64:16:12:60: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.141.252.0/24 45.59.150.0/24 207.174.59.0/24 IPv6: 2602:f5e5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7f:ae:9c:e0:18:51:1c:00:6f:cb:bc:5d:1b:e5:dd:a7:df: e2:75:0d:9a:5b:0f:d9:9d:bb:cd:cb:4f:b1:9a:22:26:f4:4c: 61:d0:5e:bf:ee:9f:91:a0:58:85:2a:21:1f:db:e1:46:a4:0d: 42:78:99:a8:14:76:fd:a2:e0:ce:98:1f:0a:c3:d3:3b:49:ae: 83:e6:b6:42:21:d5:bb:4d:2f:a1:57:01:dd:1a:e5:67:8c:58: 10:a2:3c:a1:9e:a5:4e:4c:23:83:77:a2:6c:35:20:37:8d:ec: 97:df:45:28:54:8b:c4:35:15:26:76:0c:b2:82:b6:0c:7d:24: a3:72:3a:16:3c:80:82:68:a1:3e:49:25:f1:84:fc:6e:96:40: e9:0b:ea:fe:d2:60:1e:06:73:13:ec:c3:e8:95:29:3e:56:f9: 60:c4:ca:69:c4:70:30:dc:ba:de:42:33:30:5e:b3:45:db:a4: 00:ff:7c:e0:aa:98:4a:b3:5b:f8:19:9e:57:07:95:12:c8:10: c4:87:a2:73:1d:33:ba:fb:24:47:b7:ad:dd:c1:cc:c7:66:78: 5b:e2:52:6d:a4:2b:38:79:7f:8e:99:be:90:16:81:e9:b0:3a: 4b:7c:0f:6e:c4:24:7d:80:87:89:64:6a:31:f2:52:1a:e4:0e: 9f:ec:bc:4e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqND78Jh3UlRWAMFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDcxNzE4MjEyOFoXDTI3MDMyNTAyNDA0MVowLzEtMCsGA1UEAxMk MjdiNDFlMWYtMTU2MS00ODIwLTllOGItZDAwMDU3YjUwODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUy81RA/IJnyIFrp8OETxb7MlqitOIdlrAMO B/kATPHgwjaNHinK6pSOgp0W6oFV8YEldtYh9roo2KSYwdMEvcrgeue+PRjcaHOW tMVNw7NcwkQHEs/R2oLMQXVVN1ZFD0j6c4F22h/OP5lWfO9bapaF388MPoeIn3lr n6RWSaNrZCjVD0rS1kbnjPxd/0jlnzBDgtEw1Wlt/fms7D5NuBvQZivxNnleq/nN GotxAS/UfyV6Apl5dAXH4pvAJruYKkes6Vx6mxWCLSq7WmUEDmYt5oUa/rQxpiT7 LM2oJSEWcX094dp+7oVhrfLIbkw9UJ1v+vH5drhBBWQWEmBeqQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFN3Y9hrDDULJZtfn0nY/342DX1nYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y N2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdiNTA4M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI3YjQxZTFmLTE1NjEtNDgyMC05 ZThiLWQwMDA1N2I1MDgzYS8yN2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdi NTA4M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXjfwDBAAtO5YDBADPrjswDgQCAAIwCAMGBCYC 9eUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADl/rpzgGFEcAG/LvF0b5d2n3+J1DZpbD9mdu83LT7GaIib0 TGHQXr/un5GgWIUqIR/b4UakDUJ4magUdv2i4M6YHwrD0ztJroPmtkIh1btNL6FX Ad0a5WeMWBCiPKGepU5MI4N3omw1IDeN7JffRShUi8Q1FSZ2DLKCtgx9JKNyOhY8 gIJooT5JJfGE/G6WQOkL6v7SYB4GcxPsw+iVKT5W+WDEymnEcDDcut5CMzBes0Xb pAD/fOCqmEqzW/gZnlcHlRLIEMSHonMdM7r7JEe3rd3BzMdmeFviUm2kKzh5f46Z vpAWgemwOkt8D27EJH2Ah4lkajHyUhrkDp/svE4= -----END CERTIFICATE-----Generated at Mon Aug 4 08:21:19 2025 by rpki-client