$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer File: 4113c935-d29d-41b5-bec0-a7395bdeac99.cer (raw, json) Hash identifier: ZuKwYhnpc4CMLouwUN9BRMXdxyLiRLT8MLP+f1d+l28= Subject key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A426DF0B6123038E0903CBCB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 00:45:37 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 192.241.8.0/22 IP: 199.195.156.0/22 IP: 2604:3440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:6d:f0:b6:12:30:38:e0:90:3c:bc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 21 00:45:37 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:47:59:f2:f6:db:ae:c2:a8:2e:d9:f9:0c: 0c:0f:dc:4b:10:97:84:2e:58:99:62:60:d7:04:6b: 51:a0:48:c0:2a:d7:af:f3:f5:a2:f2:b3:b5:3d:57: 7b:3c:26:25:d4:16:61:c7:ee:cb:f1:6c:6b:0b:fd: 26:24:a3:45:4a:ed:27:ee:b0:7a:ca:d5:45:07:24: d9:96:83:fe:e9:00:50:9d:81:68:28:86:58:c8:8e: f3:d1:c1:9d:05:5f:2b:31:42:f4:2d:fe:f4:9c:5b: f0:ab:8d:cc:42:bd:ac:d1:c1:8c:60:e2:f5:21:1f: 53:0c:f8:03:d8:ac:29:62:a2:70:c0:8d:6e:c0:f6: 6f:b1:3b:f4:1d:1b:a3:01:d3:c3:fc:a2:e5:7f:4a: ab:12:4e:6f:fe:e0:e6:42:59:cb:c7:d1:1b:de:c8: fc:ad:dc:ff:e5:6a:a5:31:91:5f:15:96:64:11:b4: ba:0c:b4:c6:45:0d:e8:87:b3:0a:ff:7d:a9:ed:66: 05:4f:5a:f1:e4:b2:73:ef:dd:54:fe:86:0c:62:21: b5:78:0e:17:06:7c:46:44:9a:62:e4:c9:88:1e:2a: 9d:7b:b6:0c:64:11:ab:46:af:bc:d0:82:d0:c4:8a: 3b:f3:58:2e:c6:d3:71:58:dc:9e:d6:90:af:75:3b: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.241.8.0/22 199.195.156.0/22 IPv6: 2604:3440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6d:a9:7a:fd:d0:b7:ab:30:6f:11:2b:f7:75:14:fc:a9:a1: 58:fe:f6:49:fd:fb:da:62:54:8b:71:b0:f7:47:74:bf:62:31: 20:14:b7:89:e0:64:06:02:fd:9f:a2:71:8f:4f:fb:a9:d7:31: 2c:10:91:d7:9a:9c:ed:52:9f:51:eb:d4:65:59:06:98:c5:e0: 36:71:f6:be:b3:c2:5e:f5:4d:a7:5d:2f:aa:e3:be:9c:bc:0a: ce:61:47:09:f2:ba:0b:be:2d:5b:1c:76:60:c9:57:04:5f:0b: aa:49:b6:ca:e0:68:ed:82:f7:19:c2:61:08:70:e0:20:34:41: 91:f0:2e:f9:8a:8f:10:0a:97:67:4a:bc:46:0c:08:ea:28:9b: 97:2e:06:ac:03:44:10:18:9b:16:61:e1:29:19:ac:94:f2:95: 22:ec:1a:c2:26:c0:c4:c5:2a:a3:ee:34:77:50:34:a0:91:49: fd:86:f2:2c:68:5c:32:bf:4a:89:e3:25:31:58:ca:78:01:c3: bd:7e:74:47:f1:91:5f:fc:63:e2:33:45:21:18:50:63:8b:fa: 6d:35:45:92:be:ec:8b:6a:a9:4d:ad:d9:70:c7:2a:f6:a6:e9: 94:c1:b3:89:48:41:a4:9d:cc:32:91:88:69:a4:4b:43:a4:e5: dc:39:2e:e1 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEpCbfC2EjA44JA8vLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyMTAwNDUzN1oXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk NDExM2M5MzUtZDI5ZC00MWI1LWJlYzAtYTczOTViZGVhYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkRHWfL2267CqC7Z+QwMD9xLEJeELliZYmDX BGtRoEjAKtev8/Wi8rO1PVd7PCYl1BZhx+7L8WxrC/0mJKNFSu0n7rB6ytVFByTZ loP+6QBQnYFoKIZYyI7z0cGdBV8rMUL0Lf70nFvwq43MQr2s0cGMYOL1IR9TDPgD 2KwpYqJwwI1uwPZvsTv0HRujAdPD/KLlf0qrEk5v/uDmQlnLx9Eb3sj8rdz/5Wql MZFfFZZkEbS6DLTGRQ3oh7MK/32p7WYFT1rx5LJz791U/oYMYiG1eA4XBnxGRJpi 5MmIHiqde7YMZBGrRq+80ILQxIo781guxtNxWNye1pCvdTsZcwIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFBgw0Wqh+O+/tyFObA/xelBZmA7GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJkZWFjOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMTNjOTM1LWQyOWQtNDFiNS1i ZWMwLWE3Mzk1YmRlYWM5OS80MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJk ZWFjOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALA8QgDBALHw5wwDQQCAAIwBwMFACYENEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYm2pev3Qt6swbxEr93UU/KmhWP72Sf372mJUi3Gw90d0v2IxIBS3ieBk BgL9n6Jxj0/7qdcxLBCR15qc7VKfUevUZVkGmMXgNnH2vrPCXvVNp10vquO+nLwK zmFHCfK6C74tWxx2YMlXBF8Lqkm2yuBo7YL3GcJhCHDgIDRBkfAu+YqPEAqXZ0q8 RgwI6iibly4GrANEEBibFmHhKRmslPKVIuwawibAxMUqo+40d1A0oJFJ/YbyLGhc Mr9KieMlMVjKeAHDvX50R/GRX/xj4jNFIRhQY4v6bTVFkr7si2qpTa3ZcMcq9qbp lMGziUhBpJ3MMpGIaaRLQ6Tl3Dku4Q== -----END CERTIFICATE-----Generated at Wed Jul 9 16:47:26 2025 by rpki-client