$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer File: 6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer (raw, json) Hash identifier: zo7+6VZvVqSXSqWpj45+A1rdIp152Pc9maAC4cYvOvw= Subject key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AC86EAC85CE7E12D96652DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:45:25 +0000 Certificate not after: Thu 11 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 26337 IP: 129.121.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:6e:ac:85:ce:7e:12:d9:66:52:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 8 00:45:25 2025 GMT Not After : Nov 11 01:45:25 2027 GMT Subject: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:bf:49:25:27:1d:35:11:f2:58:b5:88:df: 4b:cb:57:dd:a0:38:3c:86:10:a3:51:59:d6:f3:06: 6a:fe:75:ad:31:c0:b5:c8:94:e6:28:c6:43:b2:bf: 9f:3d:2f:d0:74:42:d8:de:97:64:a5:f4:19:9f:a8: d9:ff:f7:bc:49:77:01:5e:9f:81:81:8b:f5:cb:8a: e6:6d:89:5d:c0:7a:1c:71:57:8a:26:2b:89:c2:88: 74:68:36:e0:fd:bd:8b:44:09:e5:12:87:ea:b1:31: a0:15:9e:ca:ec:1a:3b:ad:92:63:15:0a:80:2f:bb: 1e:5e:5c:10:d2:c8:bd:41:0b:96:a7:e6:ed:fa:bc: 20:39:fe:28:ba:86:69:bd:22:b3:ac:31:c0:e2:fd: 1c:a8:ce:f3:fa:b4:6b:f7:b6:27:b1:90:b6:cf:da: d7:90:97:9e:05:15:d7:90:93:2f:74:2c:b4:dd:ca: b6:92:49:46:2e:95:e6:c2:ed:e4:9e:29:b3:76:fb: d8:9f:5e:9d:38:21:8a:c9:96:75:c5:29:24:26:81: 5a:83:d0:fe:fe:8a:4c:a7:49:f4:74:84:c4:ad:80: 58:20:ba:df:50:ef:a4:09:87:f2:76:08:7a:64:3d: b9:a1:1b:0f:67:ba:2a:7b:21:0c:70:93:fd:c4:da: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 129.121.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26337 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:30:ba:d9:43:48:a1:7b:bf:08:4c:fc:9d:45:ba:85:c1:22: 09:d9:06:7f:57:ae:4f:5a:a8:f4:44:8d:50:78:38:f9:9d:18: bf:08:18:bf:b1:29:81:ff:dc:cf:71:81:1e:ec:40:68:15:39: 23:ed:ca:11:5c:4b:3d:06:66:53:cf:f6:c7:cd:62:8e:94:52: fb:38:b0:06:19:84:66:4c:10:85:00:79:3a:49:2b:52:f3:d9: c0:7c:38:d6:eb:4c:c9:45:9e:02:e1:6e:07:29:05:27:b6:45: 6f:12:f4:64:43:36:7e:8d:d8:7e:77:43:80:d2:17:03:25:cb: 42:6f:14:47:9a:ed:43:ab:a6:6c:0b:75:97:7f:4c:f3:03:e5: 07:9f:e9:d2:b0:40:b2:46:37:09:a1:2e:5e:e7:04:3d:52:5f: 91:bf:6a:ac:74:fb:7d:e2:89:af:53:0b:8a:6d:8e:30:7d:43: 98:34:d1:25:b7:65:39:94:c1:75:c0:75:e8:6b:d4:9e:4d:f5: 2f:d4:00:78:00:a4:28:7f:6a:16:24:98:4a:6d:16:a6:83:ea: 38:12:e3:30:67:a0:7f:f7:6b:23:d8:1b:59:82:64:92:b3:97: c6:a1:55:ba:ff:ff:7d:f9:16:30:56:36:13:43:34:47:f0:52: 12:b4:1e:bd -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWErIbqyFzn4S2WZS3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgwODAwNDUyNVoXDTI3MTExMTAxNDUyNVowLzEtMCsGA1UEAxMk NmYzNzlmYjEtYWNmMC00OTdlLTgwMGItNWIxZWNhNmFiN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwm/SSUnHTUR8li1iN9Ly1fdoDg8hhCjUVnW 8wZq/nWtMcC1yJTmKMZDsr+fPS/QdELY3pdkpfQZn6jZ//e8SXcBXp+BgYv1y4rm bYldwHoccVeKJiuJwoh0aDbg/b2LRAnlEofqsTGgFZ7K7Bo7rZJjFQqAL7seXlwQ 0si9QQuWp+bt+rwgOf4ouoZpvSKzrDHA4v0cqM7z+rRr97YnsZC2z9rXkJeeBRXX kJMvdCy03cq2kklGLpXmwu3knimzdvvYn16dOCGKyZZ1xSkkJoFag9D+/opMp0n0 dITErYBYILrfUO+kCYfydgh6ZD25oRsPZ7oqeyEMcJP9xNrPIwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFON4ZNAOsF10vUeqc0gLUEAnVBLTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 ZjM3OWZiMS1hY2YwLTQ5N2UtODAwYi01YjFlY2E2YWI3YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZmMzc5ZmIxLWFjZjAtNDk3ZS04 MDBiLTViMWVjYTZhYjdhNi82ZjM3OWZiMS1hY2YwLTQ5N2UtODAwYi01YjFlY2E2 YWI3YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBeTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJm 4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB0MLrZQ0ihe78ITPydRbqFwSIJ2QZ/V65PWqj0RI1QeDj5nRi/ CBi/sSmB/9zPcYEe7EBoFTkj7coRXEs9BmZTz/bHzWKOlFL7OLAGGYRmTBCFAHk6 SStS89nAfDjW60zJRZ4C4W4HKQUntkVvEvRkQzZ+jdh+d0OA0hcDJctCbxRHmu1D q6ZsC3WXf0zzA+UHn+nSsECyRjcJoS5e5wQ9Ul+Rv2qsdPt94omvUwuKbY4wfUOY NNElt2U5lMF1wHXoa9SeTfUv1AB4AKQof2oWJJhKbRamg+o4EuMwZ6B/92sj2BtZ gmSSs5fGoVW6//99+RYwVjYTQzRH8FIStB69 -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:56 2025 by rpki-client