$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer File: b8fa95ca-aa42-4b86-891b-7be12d533da7.cer (raw, json) Hash identifier: iIlQULyN9Ta1uD6iJHG4ZHUVA9POQQ+tjiAdz+XXBcw= Subject key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849D2C28CC67865A58D67EE4E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 00:45:34 +0000 Certificate not after: Sun 15 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 13933 IP: 198.160.143.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:c2:8c:c6:78:65:a5:8d:67:ee:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 12 00:45:34 2025 GMT Not After : Aug 15 00:45:34 2027 GMT Subject: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:39:7c:5b:99:11:70:ab:dc:d1:ae:08:6c: 43:e0:8f:4a:4c:93:c4:b7:a3:da:e8:1d:7c:60:61: 0c:1d:ff:56:0b:61:f9:f6:97:3e:71:34:a4:d2:4a: 6b:f0:46:cd:11:d3:7e:a0:22:f6:bf:f2:ad:8d:28: 88:96:04:a7:de:bd:b5:7d:ba:ba:6c:5e:92:55:eb: 9d:4c:df:6f:8c:5e:e9:75:47:37:21:3e:4f:7c:cc: b8:ec:a3:8a:66:ef:7f:32:ec:35:1a:c1:b0:bd:f5: 51:7e:36:70:47:d3:76:19:39:80:20:39:c1:9e:88: 42:e8:88:c4:72:25:be:ee:51:ee:7a:ab:bf:17:04: ab:78:e6:a6:fc:7e:b9:8f:6a:78:48:cc:59:b7:c7: 8c:cb:ae:4b:8f:d3:f5:09:ee:ac:79:eb:bd:ab:2a: 9b:d9:d5:4f:29:7d:ec:b9:e7:59:e0:1b:06:9e:b1: 17:ff:63:4b:cd:8a:53:8c:b4:db:ac:dc:09:16:55: 4a:b6:9b:2f:62:47:58:c7:37:38:47:bd:09:05:34: ae:87:eb:0e:5e:48:b9:bb:72:5b:04:41:c2:b1:e4: 8f:1f:db:40:72:07:07:16:75:8f:04:1d:3d:7a:e4: fd:f1:c6:3c:08:ce:7c:6d:52:05:7e:80:63:98:64: 82:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.160.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5a:8b:d7:2c:aa:4b:7a:c0:40:30:d5:48:6c:36:7b:47:ee: dc:0b:aa:4a:84:64:14:47:5b:17:21:d1:2f:51:56:60:a5:7b: da:16:1e:21:e4:fa:d7:da:7c:20:48:80:7b:e1:31:c7:fe:4a: 03:f0:19:08:4f:e0:51:1c:73:93:a5:a5:d2:7e:38:7a:ad:90: 6d:a2:1c:d9:fc:cb:5c:1b:1a:7b:7a:ca:4e:b8:04:84:d1:54: 35:b7:25:34:a5:f2:d6:33:88:fb:cf:28:1f:9c:51:48:a4:70: cf:9c:31:a1:74:af:8e:6e:42:ab:60:07:4e:ed:5d:51:09:2b: 01:46:e8:d4:90:d4:68:2f:7d:af:90:bf:15:37:f8:23:2c:56: 01:c9:4e:e0:c0:3c:8e:1b:8b:9c:0e:2d:3e:3e:ed:3d:0c:20: 50:6f:19:4f:5f:da:07:de:f8:31:a9:d6:bd:5b:28:d3:19:f8: b0:9e:9f:29:92:9b:fe:3f:82:12:89:29:44:a9:85:e4:b0:e0: 18:97:33:32:f8:e8:1b:34:cb:a6:09:a7:cd:f4:7e:6c:29:d7: 28:58:ca:4a:2a:84:01:ba:7a:a6:2e:14:67:ef:39:81:12:fb: 79:b3:b5:32:fc:05:0e:f1:7e:22:ea:35:bc:f9:a0:9e:58:af: 40:21:a6:ef -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnSwozGeGWljWfuToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUxMjAwNDUzNFoXDTI3MDgxNTAwNDUzNFowLzEtMCsGA1UEAxMk YjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMzZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9c5fFuZEXCr3NGuCGxD4I9KTJPEt6Pa6B18 YGEMHf9WC2H59pc+cTSk0kpr8EbNEdN+oCL2v/KtjSiIlgSn3r21fbq6bF6SVeud TN9vjF7pdUc3IT5PfMy47KOKZu9/Muw1GsGwvfVRfjZwR9N2GTmAIDnBnohC6IjE ciW+7lHuequ/FwSreOam/H65j2p4SMxZt8eMy65Lj9P1Ce6seeu9qyqb2dVPKX3s uedZ4BsGnrEX/2NLzYpTjLTbrNwJFlVKtpsvYkdYxzc4R70JBTSuh+sOXki5u3Jb BEHCseSPH9tAcgcHFnWPBB09euT98cY8CM58bVIFfoBjmGSCFwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFO7DoyctxL2zYL2aeTOZgP3Nkdf9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i OGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I4ZmE5NWNhLWFhNDItNGI4Ni04 OTFiLTdiZTEyZDUzM2RhNy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1 MzNkYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGoI8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Nm0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASlqL1yyqS3rAQDDVSGw2e0fu3AuqSoRkFEdbFyHRL1FWYKV7 2hYeIeT619p8IEiAe+Exx/5KA/AZCE/gURxzk6Wl0n44eq2QbaIc2fzLXBsae3rK TrgEhNFUNbclNKXy1jOI+88oH5xRSKRwz5wxoXSvjm5Cq2AHTu1dUQkrAUbo1JDU aC99r5C/FTf4IyxWAclO4MA8jhuLnA4tPj7tPQwgUG8ZT1/aB974ManWvVso0xn4 sJ6fKZKb/j+CEokpRKmF5LDgGJczMvjoGzTLpgmnzfR+bCnXKFjKSiqEAbp6pi4U Z+85gRL7ebO1MvwFDvF+Iuo1vPmgnlivQCGm7w== -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:42 2025 by rpki-client