$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer File: 0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer (raw, json) Hash identifier: +xoi+qAZ7hrR843YRyN7HcdDnDJ+LBbWlapZjpXoGqo= Subject key identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A2B688269F632356533882180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 18:51:06 +0000 Certificate not after: Wed 15 Sep 2027 18:51:06 +0000 Subordinate resources: AS: 401773 IP: 199.5.222.0/24 IP: 204.147.144.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:68:82:69:f6:32:35:65:33:88:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 12 18:51:06 2025 GMT Not After : Sep 15 18:51:06 2027 GMT Subject: CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:26:3f:84:4f:13:bc:cc:19:9b:ce:10:12: fc:f6:63:c2:f3:e2:0c:1a:c3:d9:ac:af:47:47:f2: a2:c2:04:97:60:51:b8:e6:37:b6:70:8f:98:92:02: 6d:51:b1:df:00:84:07:fe:84:f1:2a:c6:2e:88:cf: 73:36:a5:84:8e:e5:c1:6d:7a:9b:ae:b3:4a:f1:62: fa:61:3a:b3:f1:89:94:e4:30:0d:75:f4:13:2b:64: be:a7:ff:fb:63:e1:64:ce:75:a3:4f:0e:e6:28:61: 51:24:91:aa:f1:f9:ca:7b:81:0f:f6:a9:2f:74:6d: 6a:a4:29:6d:48:33:24:68:c1:49:ca:18:31:f2:71: 73:43:76:91:f1:cb:1f:0a:a6:85:4d:09:4e:9b:d1: 5a:d8:2a:cf:85:37:5b:45:ce:d9:40:67:71:d8:cc: 49:69:17:5a:a1:22:c4:7b:0c:b6:2e:24:b8:ca:d8: 77:e5:ac:38:72:79:bf:c1:80:77:e6:de:24:8a:dd: cb:87:c7:5c:13:c3:b8:c1:bd:9e:06:8b:a3:74:87: 73:1c:74:4b:a9:06:59:a3:7f:08:e5:c8:87:37:e8: 7c:1e:12:db:b0:e7:81:45:3f:96:96:3e:34:22:a5: 76:00:75:8c:7b:09:47:0a:16:21:3b:66:7a:ad:28: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 199.5.222.0/24 204.147.144.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401773 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d9:8b:e4:7d:17:13:e1:cd:da:0f:7d:a3:17:5a:03:07:77: 7f:ec:bd:7a:af:59:71:e5:d9:37:95:29:de:22:be:dd:a3:f3: 4b:96:05:0a:d2:a2:29:be:98:85:29:7c:6d:48:2b:89:a9:c4: 4a:d2:e1:cc:01:d9:57:95:36:11:ed:92:e6:d0:6c:9f:a1:1f: f7:32:60:f5:1f:1c:f9:5d:e3:58:b9:13:12:bc:8e:36:5b:db: 2b:e8:b2:dd:a2:85:64:d6:71:5c:9f:49:90:0f:86:34:ac:08: 6b:91:bd:61:5c:d8:fc:29:37:19:7b:ac:99:16:36:dc:dc:8d: f3:f6:01:e5:e9:7f:b2:25:ef:3e:a4:14:dd:43:88:79:f3:d7: 58:b0:45:57:72:03:0d:60:cf:65:6c:2b:fa:bc:40:4e:6a:14: 99:48:44:cc:c6:67:1a:32:a9:63:0d:19:dd:6e:e8:1e:21:5a: 3e:ea:2c:a0:28:e4:39:78:30:eb:10:b7:5b:dc:1c:74:ee:21: a8:0b:23:9d:de:4e:d0:69:b3:7d:e7:21:b5:af:da:0c:40:24: cf:d1:a4:a3:85:b8:64:23:40:bb:14:14:15:7b:6d:73:88:71: be:2c:7e:08:a4:54:65:78:cf:8b:02:cc:51:97:9e:da:0e:7b: b3:7a:55:5a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEoraIJp9jI1ZTOIIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYxMjE4NTEwNloXDTI3MDkxNTE4NTEwNlowLzEtMCsGA1UEAxMk MGY3M2FkOGQtY2I1YS00NmE4LWE1ZjMtOGY5MDE0ZmRlNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MYmP4RPE7zMGZvOEBL89mPC8+IMGsPZrK9H R/KiwgSXYFG45je2cI+YkgJtUbHfAIQH/oTxKsYuiM9zNqWEjuXBbXqbrrNK8WL6 YTqz8YmU5DANdfQTK2S+p//7Y+FkznWjTw7mKGFRJJGq8fnKe4EP9qkvdG1qpClt SDMkaMFJyhgx8nFzQ3aR8csfCqaFTQlOm9Fa2CrPhTdbRc7ZQGdx2MxJaRdaoSLE ewy2LiS4yth35aw4cnm/wYB35t4kit3Lh8dcE8O4wb2eBoujdIdzHHRLqQZZo38I 5ciHN+h8HhLbsOeBRT+Wlj40IqV2AHWMewlHChYhO2Z6rSj9IwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFJfI/K24hcTx4JWa1d2OGzlWy8BiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w ZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRmZGU1OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBmNzNhZDhkLWNiNWEtNDZhOC1h NWYzLThmOTAxNGZkZTU4Yy8wZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRm ZGU1OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHBd4DBATMk5AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiFtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACfZi+R9FxPhzdoPfaMXWgMHd3/svXqvWXHl2TeV Kd4ivt2j80uWBQrSoim+mIUpfG1IK4mpxErS4cwB2VeVNhHtkubQbJ+hH/cyYPUf HPld41i5ExK8jjZb2yvost2ihWTWcVyfSZAPhjSsCGuRvWFc2PwpNxl7rJkWNtzc jfP2AeXpf7Il7z6kFN1DiHnz11iwRVdyAw1gz2VsK/q8QE5qFJlIRMzGZxoyqWMN Gd1u6B4hWj7qLKAo5Dl4MOsQt1vcHHTuIagLI53eTtBps33nIbWv2gxAJM/RpKOF uGQjQLsUFBV7bXOIcb4sfgikVGV4z4sCzFGXntoOe7N6VVo= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:09 2025 by rpki-client