$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e.cer File: acbc4801-c34f-4a9c-92fc-e1576985a43e.cer (raw, json) Hash identifier: 8SGymSRDaGMj/m1EhtCKwul0yF6k00XUNBfepLTDTX4= Subject key identifier: C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A73CCD3129EF33C7677872EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 17:11:25 +0000 Certificate not after: Mon 11 Oct 2027 17:11:25 +0000 Subordinate resources: IP: 23.141.68.0/24 IP: 2602:f5f1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:cc:d3:12:9e:f3:3c:76:77:87:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 8 17:11:25 2025 GMT Not After : Oct 11 17:11:25 2027 GMT Subject: CN=acbc4801-c34f-4a9c-92fc-e1576985a43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:0d:11:b0:b1:f9:37:5a:a8:3b:0b:f8:4e: 9e:44:b8:45:51:2d:35:ed:49:db:64:e6:33:58:fa: 54:2b:61:22:0a:14:f9:c4:f6:b7:32:18:3f:8d:27: 4b:b9:46:cc:72:e8:a2:88:6f:19:04:4f:c5:e6:65: c8:46:2c:25:29:f1:8b:ed:e5:37:b9:fe:b3:90:af: 4b:26:c4:a1:81:7a:53:c7:f4:93:f0:b0:85:16:9e: 20:9a:9c:44:43:68:70:7f:48:95:cd:1c:39:d3:cf: 9a:b6:b3:e0:42:a0:b5:ae:e4:27:e2:01:16:4f:59: a5:ff:0a:a5:7a:b6:08:08:9c:b1:3c:c2:d5:c4:3e: 12:bd:f6:51:bf:2e:52:8b:da:91:6d:46:02:28:87: f7:16:4e:a3:d3:fa:36:34:73:40:99:10:5e:22:b7: f3:a0:4a:ee:3e:c7:0c:77:ac:24:a4:61:bd:0f:13: 03:c9:24:31:14:c7:2b:53:d4:67:88:c7:93:c9:1a: 54:46:1c:b1:23:3d:90:5c:f1:77:c4:fc:96:aa:6b: c2:cd:e0:25:22:8a:43:4e:f2:57:57:9a:48:ef:6a: f4:f8:35:f3:ca:d4:fa:e9:22:95:64:87:4d:e5:dd: 11:e3:8c:41:2d:81:dc:2c:9d:68:bf:cb:90:f3:2a: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.141.68.0/24 IPv6: 2602:f5f1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:88:57:fa:0a:cd:29:4e:6c:a5:fa:be:d9:cf:0b:3e:b9:17: 87:1f:cb:bc:00:58:ed:96:36:14:22:f3:73:10:35:48:ef:86: 9a:c5:61:dd:35:d5:e0:57:ea:67:d1:94:c3:ba:fb:1f:d8:b6: ac:de:7f:b0:52:af:3e:00:f3:da:46:a9:a0:5d:fc:9c:a4:5b: 50:53:84:df:9e:8a:18:f1:0f:d4:48:e9:02:6f:83:0f:7c:be: 62:62:a0:5a:6a:f5:f5:db:39:6d:7d:12:85:b4:7b:f7:7a:35: b2:8a:85:08:72:1f:88:30:86:30:fc:3b:c1:df:a4:9a:65:4b: 99:0f:b6:1d:f9:8e:ce:65:7f:e3:9b:2c:27:b9:fe:77:94:bf: fc:9e:ed:8f:c8:6e:1b:c1:56:27:41:f8:b1:99:e6:24:72:9d: 98:4b:8d:84:6a:0e:42:db:81:0f:cc:1c:9a:b7:07:64:7b:0a: 75:a2:04:ae:4b:b4:dc:54:f6:d9:b5:ef:e1:31:e8:45:33:ca: 3a:d5:55:d0:5c:c9:b3:c1:88:81:8d:b6:b1:b6:ea:95:e3:ea: 3a:7c:bf:c0:79:e7:d2:5e:86:2b:c3:3e:cf:24:e3:dd:36:9d: fd:43:02:a2:32:38:b7:f5:7e:be:db:aa:7d:df:6f:73:7b:2a: c3:22:81:64 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEpzzNMSnvM8dneHLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDcwODE3MTEyNVoXDTI3MTAxMTE3MTEyNVowLzEtMCsGA1UEAxMk YWNiYzQ4MDEtYzM0Zi00YTljLTkyZmMtZTE1NzY5ODVhNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfINEbCx+TdaqDsL+E6eRLhFUS017UnbZOYz WPpUK2EiChT5xPa3Mhg/jSdLuUbMcuiiiG8ZBE/F5mXIRiwlKfGL7eU3uf6zkK9L JsShgXpTx/ST8LCFFp4gmpxEQ2hwf0iVzRw508+atrPgQqC1ruQn4gEWT1ml/wql erYICJyxPMLVxD4SvfZRvy5Si9qRbUYCKIf3Fk6j0/o2NHNAmRBeIrfzoEruPscM d6wkpGG9DxMDySQxFMcrU9RniMeTyRpURhyxIz2QXPF3xPyWqmvCzeAlIopDTvJX V5pI72r0+DXzytT66SKVZIdN5d0R44xBLYHcLJ1ov8uQ8yqjAwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMOp2IuTAvaYuD1qYPx03/KvCLaWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Y2JjNDgwMS1jMzRmLTRhOWMtOTJmYy1lMTU3Njk4NWE0M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FjYmM0ODAxLWMzNGYtNGE5Yy05 MmZjLWUxNTc2OTg1YTQzZS9hY2JjNDgwMS1jMzRmLTRhOWMtOTJmYy1lMTU3Njk4 NWE0M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjUQwDgQCAAIwCAMGACYC9fEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADqIV/oKzSlObKX6vtnPCz65F4cfy7wAWO2WNhQi83MQNUjvhprFYd011eBX6mfR lMO6+x/Ytqzef7BSrz4A89pGqaBd/JykW1BThN+eihjxD9RI6QJvgw98vmJioFpq 9fXbOW19EoW0e/d6NbKKhQhyH4gwhjD8O8HfpJplS5kPth35js5lf+ObLCe5/neU v/ye7Y/IbhvBVidB+LGZ5iRynZhLjYRqDkLbgQ/MHJq3B2R7CnWiBK5LtNxU9tm1 7+Ex6EUzyjrVVdBcybPBiIGNtrG26pXj6jp8v8B559JehivDPs8k4902nf1DAqIy OLf1fr7bqn3fb3N7KsMigWQ= -----END CERTIFICATE-----Generated at Tue Jul 8 23:19:05 2025 by rpki-client