$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5.cer File: 017daff1-6a0f-45af-8ab5-802438ab1ef5.cer (raw, json) Hash identifier: bh8I4+hU3PAiEl7NWu8TSABFzqfEPHLPcvNHNsOxQWU= Subject key identifier: B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A66B8D33724A1F4583AC376F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:45:37 +0000 Certificate not after: Thu 07 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 396903 IP: 148.59.43.0/24 IP: 2620:4c:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b8:d3:37:24:a1:f4:58:3a:c3:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 4 00:45:37 2025 GMT Not After : Oct 7 00:45:37 2027 GMT Subject: CN=017daff1-6a0f-45af-8ab5-802438ab1ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:41:64:9a:80:5f:12:7e:0b:53:30:2f:d0: e4:85:89:d5:d8:25:24:63:25:ed:5c:39:d1:21:d3: 31:be:7e:87:24:8c:b0:7a:73:cf:88:06:f3:08:9f: 6a:83:1d:92:0b:41:d0:46:ef:d2:7d:31:c1:59:4a: f1:00:a3:b1:2b:53:3b:4d:36:69:21:c0:1e:21:74: 02:4a:f6:e1:c1:91:63:85:05:26:0f:e6:eb:f9:e2: c4:53:46:7b:70:43:6d:f4:df:d1:ca:0a:58:65:f3: 22:74:3b:1e:df:e5:75:3d:10:6f:68:03:58:d9:a8: b1:1c:39:a5:90:83:f0:4f:b4:b0:3b:a4:45:01:8e: 98:1b:df:ec:58:f1:44:98:ee:7e:c2:5d:4d:50:6d: 63:01:35:af:67:da:28:a8:ef:3d:88:c8:27:dc:d0: f6:43:50:83:4b:60:9d:d7:1f:3d:62:96:94:d1:22: 7a:6f:e1:41:9a:eb:4b:94:1b:0f:82:7d:f9:45:d8: 0a:20:65:96:a0:16:ae:1d:df:07:4b:ac:c3:f8:49: 48:8b:97:bf:af:a0:1f:df:3c:d3:b9:e6:cf:95:90: 58:5d:f6:4c:b2:b0:9a:48:c9:8a:f2:0a:ea:80:31: a8:77:ca:fb:26:ad:c6:4a:39:9f:1b:30:a3:25:58: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 148.59.43.0/24 IPv6: 2620:4c:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396903 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a2:94:92:32:b8:fb:5f:4e:86:be:79:1b:b9:9a:79:5e:a3: 9e:0d:2c:8c:5f:9e:e6:84:34:c8:f8:63:05:ff:9c:78:09:64: 8b:15:57:07:ab:5e:5d:c0:27:78:9b:87:74:66:61:34:f5:49: 2b:37:32:82:e8:77:ab:f9:d8:89:bd:d4:0a:fd:fe:96:f8:ab: 76:4a:85:cf:19:0d:22:1a:fd:3c:ed:f8:d8:4d:bf:29:5b:03: a4:c0:40:ba:22:aa:95:c0:6d:71:de:33:5c:21:6f:a0:ea:ff: f5:2f:8d:23:95:64:46:0b:10:a5:5e:97:fa:b7:2e:e8:3a:67: 23:92:20:49:d1:bb:76:b6:18:95:9c:b8:c8:8e:d2:01:f9:3a: 6b:93:9f:59:4b:d5:2d:f6:62:e5:54:b2:9c:6b:7f:16:ea:c6: 8f:c5:3e:a6:f6:2e:8a:af:59:4d:d6:72:74:ef:65:dc:22:e8: 28:52:1c:a4:c7:15:5a:da:86:ff:e9:2a:39:8a:fe:fe:ba:88: 9c:88:25:1b:0e:21:55:2f:db:b4:d7:5f:76:3e:53:e1:5a:de: c5:e3:40:7f:5b:0d:36:da:6f:f2:aa:79:d7:dc:34:6f:9b:8d: a6:6f:20:1e:ef:6a:15:9f:ce:b5:9e:1f:c8:8a:bf:77:ed:ee: df:06:5e:84 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEpmuNM3JKH0WDrDdvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcwNDAwNDUzN1oXDTI3MTAwNzAwNDUzN1owLzEtMCsGA1UEAxMk MDE3ZGFmZjEtNmEwZi00NWFmLThhYjUtODAyNDM4YWIxZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEFBZJqAXxJ+C1MwL9DkhYnV2CUkYyXtXDnR IdMxvn6HJIywenPPiAbzCJ9qgx2SC0HQRu/SfTHBWUrxAKOxK1M7TTZpIcAeIXQC SvbhwZFjhQUmD+br+eLEU0Z7cENt9N/RygpYZfMidDse3+V1PRBvaANY2aixHDml kIPwT7SwO6RFAY6YG9/sWPFEmO5+wl1NUG1jATWvZ9ooqO89iMgn3ND2Q1CDS2Cd 1x89YpaU0SJ6b+FBmutLlBsPgn35RdgKIGWWoBauHd8HS6zD+ElIi5e/r6Af3zzT uebPlZBYXfZMsrCaSMmK8grqgDGod8r7Jq3GSjmfGzCjJVi6CwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFLfdiCUFLB96eVfihpur+7Mw0SrGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MTdkYWZmMS02YTBmLTQ1YWYtOGFiNS04MDI0MzhhYjFlZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAxN2RhZmYxLTZhMGYtNDVhZi04 YWI1LTgwMjQzOGFiMWVmNS8wMTdkYWZmMS02YTBmLTQ1YWYtOGFiNS04MDI0Mzhh YjFlZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACUOyswDwQCAAIwCQMHACYgAEwgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGDmcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADqKUkjK4+19Ohr55G7maeV6j ng0sjF+e5oQ0yPhjBf+ceAlkixVXB6teXcAneJuHdGZhNPVJKzcyguh3q/nYib3U Cv3+lvirdkqFzxkNIhr9PO342E2/KVsDpMBAuiKqlcBtcd4zXCFvoOr/9S+NI5Vk RgsQpV6X+rcu6DpnI5IgSdG7drYYlZy4yI7SAfk6a5OfWUvVLfZi5VSynGt/FurG j8U+pvYuiq9ZTdZydO9l3CLoKFIcpMcVWtqG/+kqOYr+/rqInIglGw4hVS/btNdf dj5T4VrexeNAf1sNNtpv8qp519w0b5uNpm8gHu9qFZ/OtZ4fyIq/d+3u3wZehA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:01 2025 by rpki-client