$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer File: f509b96c-10eb-4731-ae65-8d698aade657.cer (raw, json) Hash identifier: 6kCkBSG52MmyXccn8l08kjkGQfvQYskr7JDFEdIvpIo= Subject key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584998222F61AE39F6F0B04EBEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 19402 IP: 208.66.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2f:61:ae:39:f6:f0:b0:4e:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=f509b96c-10eb-4731-ae65-8d698aade657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:07:b6:b3:e5:ea:a7:d3:46:b3:07:c4:41:04: fd:02:e4:cf:4a:39:56:9b:09:75:29:61:01:cf:d6: df:5e:2e:24:68:36:42:8b:e6:ca:d4:20:15:a9:e9: 8a:a3:d8:e6:97:90:b4:15:34:35:28:a9:19:a3:19: 16:37:e0:6e:5a:9e:36:c0:ad:e0:10:fa:b2:90:fc: 67:06:ed:ea:c8:e4:84:dd:cf:a8:0f:f5:ce:9d:ec: 96:be:7c:34:ad:c6:f5:9d:b4:10:62:18:08:34:c1: 9e:c8:8d:56:a6:d6:0e:fe:56:6b:ea:13:53:58:a3: fd:5e:70:e8:23:f3:b8:86:d0:68:5a:19:36:d6:15: 8c:c2:21:d6:b9:70:a4:9d:60:86:44:aa:9e:83:69: 91:1b:04:d9:6e:6b:6c:ea:a9:ee:75:ef:d0:4c:b7: 6b:cf:db:e2:a4:f3:fd:c3:71:c5:2b:39:c0:60:32: c5:f7:c7:b4:66:f5:ec:24:df:3d:e8:28:90:48:02: 57:36:88:0a:d0:76:6b:58:a9:7d:a8:db:b9:49:fc: 11:4f:95:a1:0e:86:86:0c:01:80:3b:26:4d:80:8f: bd:89:10:18:e3:3c:76:9e:63:ed:9d:9c:ea:6f:78: 53:39:00:5c:b3:4a:69:6e:77:2d:25:61:59:73:13: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 208.66.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:38:77:6f:8a:7a:80:91:91:13:d6:fb:b4:ed:ed:57:83:4b: 43:4f:33:b9:4e:84:04:c1:af:46:d9:fb:ad:15:d7:9c:09:7f: a5:d5:36:2d:e9:7a:b8:ce:a1:b2:ae:c6:bf:5a:78:2c:dd:35: a5:a0:fb:55:7b:14:03:a1:32:f6:f5:72:ba:7d:94:15:d8:c1: 74:d1:22:b7:a0:90:9f:d2:32:92:a8:f0:6c:46:63:c6:eb:17: 60:50:76:8b:80:20:3f:e9:1a:b7:57:3b:62:8c:03:5f:ac:9e: 3e:9b:b2:00:c0:bb:97:59:5c:86:a8:5e:83:4a:6e:f8:4e:96: 17:2d:09:10:c3:1f:c0:6d:25:05:d3:2c:ec:3b:53:75:e9:3d: 9f:dd:d2:2e:67:bc:45:6a:32:85:41:42:13:36:48:d8:59:2a: 56:fc:8b:4f:7e:52:46:d8:d4:28:3b:40:23:da:2a:a9:d3:82: d5:5e:78:6f:b9:2a:91:95:10:dc:a7:45:1f:2c:cf:ed:cf:34: 17:9f:e4:8e:70:b8:a1:32:78:84:15:04:2d:95:a9:43:be:b0: 81:68:53:40:ff:db:27:69:23:f3:43:34:29:aa:6c:78:d5:a0: e3:67:81:75:2f:6d:eb:4c:21:dd:32:2c:8c:99:3f:51:cb:00: 8c:4c:64:e7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmYIi9hrjn28LBOvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk ZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRlNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQe2s+Xqp9NGswfEQQT9AuTPSjlWmwl1KWEB z9bfXi4kaDZCi+bK1CAVqemKo9jml5C0FTQ1KKkZoxkWN+BuWp42wK3gEPqykPxn Bu3qyOSE3c+oD/XOneyWvnw0rcb1nbQQYhgINMGeyI1WptYO/lZr6hNTWKP9XnDo I/O4htBoWhk21hWMwiHWuXCknWCGRKqeg2mRGwTZbmts6qnude/QTLdrz9vipPP9 w3HFKznAYDLF98e0ZvXsJN896CiQSAJXNogK0HZrWKl9qNu5SfwRT5WhDoaGDAGA OyZNgI+9iRAY4zx2nmPtnZzqb3hTOQBcs0ppbnctJWFZcxMODwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIjxLCk8NPIxNbu6siPUgEzVBWKMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9m NTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Y1MDliOTZjLTEwZWItNDczMS1h ZTY1LThkNjk4YWFkZTY1Ny9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFh ZGU2NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQQuQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC S8owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYjh3b4p6gJGRE9b7tO3tV4NLQ08zuU6EBMGvRtn7rRXXnAl/ pdU2Lel6uM6hsq7Gv1p4LN01paD7VXsUA6Ey9vVyun2UFdjBdNEit6CQn9Iykqjw bEZjxusXYFB2i4AgP+kat1c7YowDX6yePpuyAMC7l1lchqheg0pu+E6WFy0JEMMf wG0lBdMs7DtTdek9n93SLme8RWoyhUFCEzZI2FkqVvyLT35SRtjUKDtAI9oqqdOC 1V54b7kqkZUQ3KdFHyzP7c80F5/kjnC4oTJ4hBUELZWpQ76wgWhTQP/bJ2kj80M0 KapseNWg42eBdS9t60wh3TIsjJk/UcsAjExk5w== -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:41 2025 by rpki-client