$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e.cer File: a865eade-baea-4362-8186-981fcc003a4e.cer (raw, json) Hash identifier: XdSUI355viaE9KbCKN55ONO8mKG5PS559bSrI/yWvNA= Subject key identifier: A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A9363C18DA070F6D276D2E6F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Jul 2025 00:45:35 +0000 Certificate not after: Sat 23 Oct 2027 00:45:35 +0000 Subordinate resources: IP: 76.76.0.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:63:c1:8d:a0:70:f6:d2:76:d2:e6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 20 00:45:35 2025 GMT Not After : Oct 23 00:45:35 2027 GMT Subject: CN=a865eade-baea-4362-8186-981fcc003a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:c9:f8:18:c4:d0:93:74:5b:df:af:e0:60: be:6a:e9:41:be:62:7c:d3:e1:54:7e:e2:34:6b:3a: ac:cf:08:3b:9c:10:c8:5a:1e:fd:62:a0:52:cd:bf: 97:2a:6f:34:d8:03:70:32:c3:53:ba:1d:0c:6a:92: 87:12:67:98:e7:e6:64:6c:55:95:da:77:8f:76:9a: 3f:b2:b7:82:b0:1a:7a:d6:df:47:5b:dc:16:90:fd: c8:be:17:25:f6:9e:52:6d:34:80:b5:a5:5d:10:c8: 00:6a:6f:9d:83:61:75:f0:86:ad:47:80:69:00:2d: 6b:69:5c:d4:50:3e:43:dc:2a:c2:d7:c9:86:f9:1d: fa:81:68:65:1f:d9:cc:9a:1d:d4:8a:d8:51:79:b2: 46:b8:78:a7:b9:d6:43:7b:71:8c:48:dd:1d:8f:d6: 5d:8b:f1:2e:4c:d4:f3:26:96:07:e9:11:2b:75:df: 60:94:df:02:06:82:c9:bb:5b:b4:03:50:80:0e:46: 62:e8:af:ae:ca:b9:68:53:13:d7:99:64:4e:12:94: ab:c4:6d:cd:d8:7d:6f:5f:ab:31:33:15:7b:b6:b4: 79:b6:f0:42:3b:b9:cf:92:ef:52:de:d2:bc:9e:b4: 8f:8c:b3:32:5c:39:a3:f5:a8:58:c7:b7:47:d6:ae: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 76.76.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:86:09:0d:90:99:66:a8:04:17:d9:e2:63:c0:79:50:bf: 0e:96:7c:df:5f:f0:4f:99:3c:51:03:1f:e0:06:e1:64:89:0e: af:fe:4d:f9:d3:ea:b4:79:49:5d:4f:dd:0b:ad:0d:ca:ad:0d: 05:d9:d5:71:b5:43:df:f1:ab:63:0c:27:78:b8:f4:05:6c:36: 6f:f3:aa:8b:47:8e:01:97:f6:dc:fd:d3:5c:c7:0e:60:03:6b: 19:13:73:6e:37:9c:db:3b:c2:07:b8:93:0c:2a:c8:c1:97:e2: 00:01:f7:83:0e:47:38:62:c8:4e:f6:f7:1c:93:b1:99:d6:c6: 3d:54:50:1a:81:16:04:77:d8:55:ba:56:c4:30:81:c7:a3:cf: 6d:37:17:9f:f1:5e:61:b5:b2:e0:0f:dc:f5:2b:ed:03:c8:ca: 09:1e:69:6b:ea:fd:07:bf:56:e1:7c:f7:c0:d4:75:24:1b:62: 19:86:c5:4d:34:37:32:83:17:db:a6:c6:1d:da:d5:f4:50:88: 59:a6:ca:0b:0a:07:ce:17:55:e7:d5:bd:40:dd:a2:89:25:e3: a5:e0:93:ff:34:fa:69:80:c2:9b:b3:93:0f:27:3f:3c:ea:da: 5d:6d:84:47:54:df:cf:fc:33:22:3d:57:c1:31:61:40:53:f2: 60:83:d3:46 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqTY8GNoHD20nbS5vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcyMDAwNDUzNVoXDTI3MTAyMzAwNDUzNVowLzEtMCsGA1UEAxMk YTg2NWVhZGUtYmFlYS00MzYyLTgxODYtOTgxZmNjMDAzYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPXJ+BjE0JN0W9+v4GC+aulBvmJ80+FUfuI0 azqszwg7nBDIWh79YqBSzb+XKm802ANwMsNTuh0MapKHEmeY5+ZkbFWV2nePdpo/ sreCsBp61t9HW9wWkP3Ivhcl9p5SbTSAtaVdEMgAam+dg2F18IatR4BpAC1raVzU UD5D3CrC18mG+R36gWhlH9nMmh3UithRebJGuHinudZDe3GMSN0dj9Zdi/EuTNTz JpYH6RErdd9glN8CBoLJu1u0A1CADkZi6K+uyrloUxPXmWROEpSrxG3N2H1vX6sx MxV7trR5tvBCO7nPku9S3tK8nrSPjLMyXDmj9ahYx7dH1q4MswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKDea18MzC7PSaY78IMdy567F05YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h ODY1ZWFkZS1iYWVhLTQzNjItODE4Ni05ODFmY2MwMDNhNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E4NjVlYWRlLWJhZWEtNDM2Mi04 MTg2LTk4MWZjYzAwM2E0ZS9hODY1ZWFkZS1iYWVhLTQzNjItODE4Ni05ODFmY2Mw MDNhNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFMTAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPfuGCQ2QmWaoBBfZ4mPA eVC/DpZ831/wT5k8UQMf4AbhZIkOr/5N+dPqtHlJXU/dC60Nyq0NBdnVcbVD3/Gr YwwneLj0BWw2b/Oqi0eOAZf23P3TXMcOYANrGRNzbjec2zvCB7iTDCrIwZfiAAH3 gw5HOGLITvb3HJOxmdbGPVRQGoEWBHfYVbpWxDCBx6PPbTcXn/FeYbWy4A/c9Svt A8jKCR5pa+r9B79W4Xz3wNR1JBtiGYbFTTQ3MoMX26bGHdrV9FCIWabKCwoHzhdV 59W9QN2iiSXjpeCT/zT6aYDCm7OTDyc/POraXW2ER1Tfz/wzIj1XwTFhQFPyYIPT Rg== -----END CERTIFICATE-----Generated at Tue Jul 29 14:45:29 2025 by rpki-client