$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer File: 40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer (raw, json) Hash identifier: lCXwtSQhzAGigZAxcfB/v7CJnMVb/E+DReiBnQdwNnM= Subject key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849DDED46DDA2B41E09C9762F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 00:45:33 +0000 Certificate not after: Thu 19 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 30574 AS: 31776 IP: 204.8.172.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:ed:46:dd:a2:b4:1e:09:c9:76:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 16 00:45:33 2025 GMT Not After : Aug 19 00:45:33 2027 GMT Subject: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:ec:06:0b:2a:a1:58:9f:2a:a7:dd:8e:0a: d0:b7:0e:c0:a6:01:5c:46:91:58:13:ed:6e:3d:44: f4:f7:3b:73:28:ff:8e:c8:01:ad:95:c4:14:4b:43: 6f:05:9e:50:fd:a8:23:e3:3d:d3:ff:78:5c:c7:20: 79:55:d5:2e:96:f4:6d:09:a9:37:3b:29:84:c8:86: 43:19:5d:50:ec:8a:a1:cf:c1:a8:ff:0e:aa:2b:87: a4:de:db:e8:68:07:2e:68:d3:56:e3:c3:81:0a:40: 1b:67:44:cf:aa:22:78:b0:24:49:f6:39:07:12:89: 1f:44:7a:ef:27:42:57:d3:c7:c2:5b:7a:0a:e3:a9: ba:85:ea:96:09:3b:1b:f3:66:e2:50:c8:91:de:a1: e6:b4:11:78:51:7f:29:d0:a0:03:c6:d1:6c:e9:8c: 4f:b5:db:6e:10:ec:48:91:70:73:f0:25:1f:1c:3a: 26:84:e4:81:84:37:5d:b9:04:56:af:2d:98:f1:8a: fe:55:99:28:8b:99:5e:25:e9:72:31:a3:cf:fe:57: 82:41:54:d7:fb:f7:6e:c5:5d:a8:5d:f0:ab:06:be: 48:5a:f1:a7:0c:a7:29:58:9d:b0:94:e3:db:3f:52: 78:3f:6e:83:36:f5:d9:ba:51:78:e5:78:d5:08:31: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 204.8.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30574 31776 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:02:bb:c8:91:84:f5:8e:e0:45:06:06:94:da:06:a9:63:9d: 13:27:78:70:ec:0b:33:0f:b1:38:e0:cd:d0:8d:6a:9f:cd:69: f3:9f:e8:ca:f6:61:1d:33:de:e8:2f:d4:a2:37:13:c7:d2:91: 26:3f:96:d8:48:0c:bf:ed:7c:c5:46:92:df:37:35:d6:48:4c: 8b:60:99:a2:02:c8:4c:38:86:0e:2c:04:4b:1f:6c:a2:e5:2a: fd:1c:21:d3:47:b6:4b:4b:0e:24:15:24:65:58:9b:c0:0f:13: 12:6d:8d:76:a0:44:27:e1:a2:0b:03:09:83:71:c5:fd:ab:43: 45:55:45:aa:9c:1f:d8:cd:b3:66:e9:29:7f:db:07:1e:da:65: e3:79:91:7f:c6:79:92:71:85:92:af:70:66:9d:e5:f1:ea:ea: 50:80:79:67:cc:ed:70:79:a3:8b:4c:3c:4f:cd:42:55:d9:dd: b7:6c:14:6b:55:99:e1:ce:ba:35:b6:e5:b2:c8:fa:3f:4f:6d: dc:43:59:cf:85:cb:3a:59:a0:ce:89:cb:b3:f5:26:d8:3b:1b: ab:30:4b:55:ff:b7:c5:9e:08:04:f9:b0:eb:8d:ea:6c:ba:d7: b8:b2:37:dc:62:e9:39:1d:93:c0:cf:c7:cc:12:25:de:42:f5: 9b:56:98:3f -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEnd7UbdorQeCcl2L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUxNjAwNDUzM1oXDTI3MDgxOTAwNDUzM1owLzEtMCsGA1UEAxMk NDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2NkYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DDsBgsqoVifKqfdjgrQtw7ApgFcRpFYE+1u PUT09ztzKP+OyAGtlcQUS0NvBZ5Q/agj4z3T/3hcxyB5VdUulvRtCak3OymEyIZD GV1Q7Iqhz8Go/w6qK4ek3tvoaAcuaNNW48OBCkAbZ0TPqiJ4sCRJ9jkHEokfRHrv J0JX08fCW3oK46m6heqWCTsb82biUMiR3qHmtBF4UX8p0KADxtFs6YxPtdtuEOxI kXBz8CUfHDomhOSBhDdduQRWry2Y8Yr+VZkoi5leJelyMaPP/leCQVTX+/duxV2o XfCrBr5IWvGnDKcpWJ2wlOPbP1J4P26DNvXZulF45XjVCDGlhwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFNqCdXtreLh210bK2IF6v5oLFltiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQwYjM5YjJhLWNkZWYtNDQ0NS1h Y2U4LWJiMzlkNDNjZGE1ZC80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQz Y2RhNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALMCKwwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC d24CAnwgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABMCu8iRhPWO4EUGBpTaBqljnRMneHDsCzMPsTjgzdCN ap/NafOf6Mr2YR0z3ugv1KI3E8fSkSY/lthIDL/tfMVGkt83NdZITItgmaICyEw4 hg4sBEsfbKLlKv0cIdNHtktLDiQVJGVYm8APExJtjXagRCfhogsDCYNxxf2rQ0VV RaqcH9jNs2bpKX/bBx7aZeN5kX/GeZJxhZKvcGad5fHq6lCAeWfM7XB5o4tMPE/N QlXZ3bdsFGtVmeHOujW25bLI+j9PbdxDWc+FyzpZoM6Jy7P1Jtg7G6swS1X/t8We CAT5sOuN6my617iyN9xi6Tkdk8DPx8wSJd5C9ZtWmD8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:59 2025 by rpki-client