$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer File: 204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer (raw, json) Hash identifier: Rvo31/TOyJwpMEnMVhP7Vt06MnNbPt5OpqDfafKqB4c= Subject key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AD7C38C7A11FD6BB144CC1F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 12:33:34 +0000 Certificate not after: Tue 16 Nov 2027 13:33:34 +0000 Subordinate resources: IP: 199.88.252.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:c3:8c:7a:11:fd:6b:b1:44:cc:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 13 12:33:34 2025 GMT Not After : Nov 16 13:33:34 2027 GMT Subject: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:10:a1:04:2f:e7:82:a7:31:2c:5c:13:56: 24:00:62:fe:b8:fe:82:36:40:83:7c:64:66:1c:af: 07:a5:bc:0b:16:37:9f:a6:cc:6a:80:89:ff:ec:51: 51:65:da:7b:2e:39:84:ec:9d:fd:58:c2:96:ea:b6: 32:89:05:63:bd:ed:7d:c8:4c:4b:8e:1e:61:d2:24: 2e:35:bb:38:db:b4:eb:c3:0c:1f:25:61:a6:62:53: 1c:51:71:c3:57:79:71:4e:5b:c4:e3:03:97:45:9e: a1:4a:a9:1a:ba:74:2a:71:95:70:dc:31:65:68:fb: af:42:84:4d:6e:df:f4:4f:85:aa:dc:6a:bc:20:57: 64:0c:3b:b0:91:25:74:c2:fa:bc:96:30:10:95:71: 4e:d4:1d:f6:39:b0:64:c2:86:53:0c:cc:13:b5:a2: eb:57:a4:13:0d:04:87:6e:ac:d4:d4:d2:f8:13:40: 47:0f:7b:22:50:68:ad:b1:0b:75:a7:22:83:34:33: c6:a5:e2:fb:0a:c1:a0:82:87:01:87:85:8f:99:95: d4:58:28:c2:be:63:c2:d1:b9:9b:37:ef:53:8c:fb: 9d:65:f7:d9:25:05:f8:9f:b2:e3:a9:ac:8f:d5:c3: 3a:2d:9a:1c:d6:fc:99:b1:71:dd:a5:96:ff:8b:1d: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:99:b7:c5:e6:18:85:d1:1b:41:66:60:31:f2:91:55:4e: 38:74:6d:d0:34:4a:b7:32:1e:08:f0:fd:a9:df:4c:da:2a:42: 88:04:a7:37:cc:53:c5:50:82:d5:85:7a:3c:88:a5:6f:6a:1f: 32:95:60:74:0f:8e:15:ab:35:4f:98:bf:90:81:8c:25:72:92: 68:78:58:87:fb:a1:77:cd:3c:1f:2e:e2:9f:b7:15:b1:e0:e4: 22:86:41:97:e5:13:b7:00:c6:ef:17:e1:43:f3:56:47:e7:90: c0:5a:a8:7e:27:36:15:a7:7f:b4:07:1b:a0:a8:ae:a9:73:16: 09:e1:69:51:41:62:0a:a5:d1:89:6b:32:e6:96:ff:55:79:1e: d3:f9:a8:00:fd:cc:42:4d:a9:3d:b2:6c:f1:76:56:19:5d:35: f4:ba:07:21:74:f6:4d:59:7b:74:9e:8e:a4:8c:95:2f:16:77: c3:d3:4b:51:51:45:23:47:86:df:36:53:c1:76:44:a1:7d:f0: 63:d7:7f:31:3a:6e:92:8a:07:49:12:6e:2a:cc:7a:a2:0f:da: 44:b8:ab:02:cd:b7:d2:50:73:88:56:67:1d:b2:8a:fe:a7:f8: ea:58:a7:f6:56:8f:64:99:31:81:4e:03:bd:df:66:99:c1:4d: 2b:82:63:1c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErXw4x6Ef1rsUTMH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxMzEyMzMzNFoXDTI3MTExNjEzMzMzNFowLzEtMCsGA1UEAxMk MjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph4QoQQv54KnMSxcE1YkAGL+uP6CNkCDfGRm HK8HpbwLFjefpsxqgIn/7FFRZdp7LjmE7J39WMKW6rYyiQVjve19yExLjh5h0iQu Nbs427TrwwwfJWGmYlMcUXHDV3lxTlvE4wOXRZ6hSqkaunQqcZVw3DFlaPuvQoRN bt/0T4Wq3Gq8IFdkDDuwkSV0wvq8ljAQlXFO1B32ObBkwoZTDMwTtaLrV6QTDQSH bqzU1NL4E0BHD3siUGitsQt1pyKDNDPGpeL7CsGggocBh4WPmZXUWCjCvmPC0bmb N+9TjPudZffZJQX4n7LjqayP1cM6LZoc1vyZsXHdpZb/ix3sBwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBWyLPYx07fMMo2J9uHrFFywPSL9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwNGI2ZTM1LWMyYjUtNDA4NC05 YzcwLWRkNWU3YzdkOGNmOC8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3 ZDhjZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHWPwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATZKZt8XmGIXRG0FmYDHy kVVOOHRt0DRKtzIeCPD9qd9M2ipCiASnN8xTxVCC1YV6PIilb2ofMpVgdA+OFas1 T5i/kIGMJXKSaHhYh/uhd808Hy7in7cVseDkIoZBl+UTtwDG7xfhQ/NWR+eQwFqo fic2Fad/tAcboKiuqXMWCeFpUUFiCqXRiWsy5pb/VXke0/moAP3MQk2pPbJs8XZW GV019LoHIXT2TVl7dJ6OpIyVLxZ3w9NLUVFFI0eG3zZTwXZEoX3wY9d/MTpukooH SRJuKsx6og/aRLirAs230lBziFZnHbKK/qf46lin9laPZJkxgU4Dvd9mmcFNK4Jj HA== -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:50 2025 by rpki-client