$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/45c326e3-1651-4d60-a964-d9dbf3106730.cer File: 45c326e3-1651-4d60-a964-d9dbf3106730.cer (raw, json) Hash identifier: o2DKIHokWa0NGAj337gcjXQSalRDvTEJ6JQck/1idag= Subject key identifier: 0A:04:29:B0:55:E8:A6:49:E8:E3:24:A3:77:B3:BE:AB:8A:B0:CA:CE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A625A8EB4E8314579469210C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/45c326e3-1651-4d60-a964-d9dbf3106730/45c326e3-1651-4d60-a964-d9dbf3106730.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/45c326e3-1651-4d60-a964-d9dbf3106730/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 11:12:27 +0000 Certificate not after: Mon 23 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 397563 IP: 2602:f5f9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:5a:8e:b4:e8:31:45:79:46:92:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 2 11:12:27 2025 GMT Not After : Nov 23 01:45:25 2026 GMT Subject: CN=45c326e3-1651-4d60-a964-d9dbf3106730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:6c:61:d2:32:e1:d3:04:1b:91:52:47:a7: be:c0:6d:2d:5c:3e:d0:1f:7f:eb:f1:cd:00:a6:51: b4:f3:6e:b6:ed:74:c7:64:33:1d:f2:2a:9d:9b:9f: 5b:10:de:ab:c5:17:49:28:1e:2d:92:73:13:fe:b1: a5:48:88:a5:3a:11:1b:95:c4:3e:18:82:7e:0a:90: 43:ab:54:20:e9:8b:f7:03:2d:61:e2:49:ee:0e:b8: c9:35:07:69:4f:c3:9c:77:96:b5:fe:ca:b0:6a:84: 92:96:52:d3:7e:f5:67:21:fe:d2:40:b4:13:10:53: be:ca:f3:1b:4e:7c:f5:ce:e6:2e:55:25:25:a1:e4: eb:b6:2f:ab:7b:d6:b9:4f:a2:f5:36:38:fc:73:ba: 9e:60:96:e9:04:54:bf:aa:51:fa:0f:3d:05:ec:fa: b7:1e:cd:ca:9e:82:bf:6b:d9:05:76:9b:4d:95:72: 65:dd:7c:10:cd:d7:84:13:1f:bc:7a:18:1f:54:ef: 93:03:79:e1:1a:a1:fa:4d:a7:5d:69:d0:8d:ed:55: 55:00:1c:bc:d4:73:8f:0b:58:a7:f6:76:1b:f7:45: b3:37:89:c2:91:14:b4:7e:c1:14:26:0a:63:28:09: f8:8d:89:ac:07:4d:3a:78:40:e8:5b:f4:b2:58:03: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:04:29:B0:55:E8:A6:49:E8:E3:24:A3:77:B3:BE:AB:8A:B0:CA:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/45c326e3-1651-4d60-a964-d9dbf3106730/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/45c326e3-1651-4d60-a964-d9dbf3106730/45c326e3-1651-4d60-a964-d9dbf3106730.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5f9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397563 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:04:ab:c6:99:45:d3:0b:4e:c4:5c:11:90:e2:65:d3:d6:f9: 69:d4:d1:1d:e2:f2:8b:b1:55:67:01:fd:2d:22:de:16:34:ad: 64:28:d4:88:11:9f:31:f6:68:b1:89:48:36:d8:e0:24:4e:0e: 52:10:09:fd:66:c0:65:20:ba:85:64:21:cf:1a:5c:6b:f0:48: 47:f5:d5:d3:68:be:07:5f:58:da:f8:1a:fa:1f:34:87:5b:f0: bc:72:e6:c7:af:bc:0e:78:fe:8c:1b:ac:01:35:ed:0d:5f:d3: 56:ff:18:3b:dd:d4:bb:8c:06:b7:6b:3c:41:1f:7c:07:7f:a0: 6e:ad:9f:95:d1:df:d6:17:11:65:bd:cc:55:d9:97:9b:22:8b: 1e:42:dd:e0:fe:8f:24:82:52:f3:25:18:ea:07:0c:ab:f6:9a: 76:91:b3:d6:de:10:c9:c0:af:89:da:f2:cf:b3:74:e5:da:d7: 2a:e5:8a:c3:8e:e1:dc:4f:58:a3:5f:a3:37:9f:13:91:db:89: 20:81:7c:f8:d9:2e:37:5a:bd:50:f5:98:b6:b9:e8:ec:cb:79: 33:a5:8e:85:98:33:6b:81:71:c3:9c:81:9b:38:1a:cd:3c:67: 1c:ff:49:45:d7:32:74:8b:9f:6e:6d:47:34:1a:09:7f:05:90: 13:8c:f4:26 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEpiWo606DFFeUaSEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcwMjExMTIyN1oXDTI2MTEyMzAxNDUyNVowLzEtMCsGA1UEAxMk NDVjMzI2ZTMtMTY1MS00ZDYwLWE5NjQtZDlkYmYzMTA2NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFFsYdIy4dMEG5FSR6e+wG0tXD7QH3/r8c0A plG082627XTHZDMd8iqdm59bEN6rxRdJKB4tknMT/rGlSIilOhEblcQ+GIJ+CpBD q1Qg6Yv3Ay1h4knuDrjJNQdpT8Ocd5a1/sqwaoSSllLTfvVnIf7SQLQTEFO+yvMb Tnz1zuYuVSUloeTrti+re9a5T6L1Njj8c7qeYJbpBFS/qlH6Dz0F7Pq3Hs3KnoK/ a9kFdptNlXJl3XwQzdeEEx+8ehgfVO+TA3nhGqH6TaddadCN7VVVABy81HOPC1in 9nYb90WzN4nCkRS0fsEUJgpjKAn4jYmsB006eEDoW/SyWANThQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFAoEKbBV6KZJ6OMko3ezvquKsMrOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 NWMzMjZlMy0xNjUxLTRkNjAtYTk2NC1kOWRiZjMxMDY3MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQ1YzMyNmUzLTE2NTEtNGQ2MC1h OTY0LWQ5ZGJmMzEwNjczMC80NWMzMjZlMy0xNjUxLTRkNjAtYTk2NC1kOWRiZjMx MDY3MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvX5ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGEPswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAqASrxplF0wtOxFwRkOJl09b5adTRHeLyi7FVZwH9LSLe FjStZCjUiBGfMfZosYlINtjgJE4OUhAJ/WbAZSC6hWQhzxpca/BIR/XV02i+B19Y 2vga+h80h1vwvHLmx6+8Dnj+jBusATXtDV/TVv8YO93Uu4wGt2s8QR98B3+gbq2f ldHf1hcRZb3MVdmXmyKLHkLd4P6PJIJS8yUY6gcMq/aadpGz1t4QycCvidryz7N0 5drXKuWKw47h3E9Yo1+jN58TkduJIIF8+NkuN1q9UPWYtrno7Mt5M6WOhZgza4Fx w5yBmzgazTxnHP9JRdcydIufbm1HNBoJfwWQE4z0Jg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:45 2025 by rpki-client