$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer File: 5482ccc0-e4dd-479e-a029-460a79acc9cc.cer (raw, json) Hash identifier: TVdKGG9qdly1ODFixGY/kJ/3s1BUEPeR3EB/mSAsp3Q= Subject key identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849E0B7FA31B9F817F1E6A1C240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 May 2025 00:45:35 +0000 Certificate not after: Fri 20 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 32809 IP: 63.141.0.0/20 IP: 65.23.160.0/19 IP: 209.188.64.0/20 IP: 2607:f0f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:b7:fa:31:b9:f8:17:f1:e6:a1:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 17 00:45:35 2025 GMT Not After : Aug 20 00:45:35 2027 GMT Subject: CN=5482ccc0-e4dd-479e-a029-460a79acc9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:37:97:b4:ed:5b:86:04:41:2d:2b:98:a4: 7c:9b:ab:3c:31:b8:6c:e5:00:21:b5:35:0a:c0:8c: ff:15:1b:f3:5a:42:91:dd:6b:72:c1:09:cb:f2:d3: 65:78:df:9d:24:99:b9:d1:87:3b:4b:d3:3a:f4:80: 59:ca:b2:c1:fc:70:b5:a9:9b:51:c7:39:77:25:a8: ac:f5:cf:e1:45:46:c7:9e:c6:e9:35:4d:2b:4e:37: a9:d1:4c:94:6b:08:2d:00:39:6c:ba:61:db:00:db: 1a:75:06:83:34:c5:66:ad:a6:1d:bb:8b:b8:2c:36: 1c:b7:a1:de:43:64:bc:b3:8e:24:30:13:2d:5d:37: bc:c9:d2:e6:81:a0:5b:8a:6b:a7:86:bb:76:d4:97: f7:44:b6:50:46:26:85:fb:f0:87:8f:0e:79:57:e6: fe:78:64:40:1e:67:59:14:a0:e2:38:a6:23:13:e3: c8:74:15:4d:a3:1a:e9:a4:13:26:2b:13:6a:6f:1c: 51:3e:a6:c7:95:6f:54:e5:b1:58:90:f5:07:74:de: 55:86:9b:99:36:76:8a:f2:92:1a:75:d5:c1:cb:a9: e4:3f:6f:4c:2f:57:8e:d7:09:a1:59:fb:9a:95:04: 2a:0c:c1:04:9f:d3:69:21:54:03:ae:a9:90:64:ec: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 63.141.0.0/20 65.23.160.0/19 209.188.64.0/20 IPv6: 2607:f0f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32809 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d6:84:f8:ab:b4:36:b7:8a:73:51:98:58:3c:22:d4:33:fc: bc:7b:1f:a3:be:b9:ad:2b:74:12:eb:4e:05:da:8f:b8:81:df: 9b:10:96:f6:14:83:52:8a:b3:ab:61:08:85:1c:42:ec:4c:8e: 4d:9c:d8:70:d9:d3:47:37:2b:dc:00:4e:0a:34:70:f9:03:ba: ab:25:be:48:e9:0a:fc:7d:26:25:70:1c:4c:61:5f:42:96:cf: 38:f3:cf:62:54:0a:91:c8:37:c9:91:c4:04:b9:cc:1b:75:a7: ea:2a:88:56:fe:09:ad:7a:0d:f1:0f:51:8e:2d:91:5d:d4:6f: a3:39:85:53:4c:79:c7:30:9d:62:b3:a2:2b:a8:92:7f:ae:de: eb:60:9c:49:ef:80:2c:af:c6:2f:1d:3e:91:24:d3:f6:09:ff: a2:38:e8:4a:8a:e7:41:83:ac:c2:24:a1:0d:80:ad:5a:86:90: 8a:a6:c0:b3:52:c3:5c:3f:c4:06:b9:84:34:a7:9b:da:ae:b7: ba:ff:d1:ad:ca:07:84:2d:88:a7:23:b7:a1:e5:87:d0:a5:55: b3:6d:44:22:a0:9c:b2:30:63:33:ab:ec:19:1b:1e:28:f4:7f: f4:b0:47:f7:f9:f0:b2:d0:d7:ae:ef:f3:e9:60:f1:35:e6:08: 27:1e:74:4b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEngt/oxufgX8eahwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUxNzAwNDUzNVoXDTI3MDgyMDAwNDUzNVowLzEtMCsGA1UEAxMk NTQ4MmNjYzAtZTRkZC00NzllLWEwMjktNDYwYTc5YWNjOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvM3l7TtW4YEQS0rmKR8m6s8Mbhs5QAhtTUK wIz/FRvzWkKR3WtywQnL8tNleN+dJJm50Yc7S9M69IBZyrLB/HC1qZtRxzl3Jais 9c/hRUbHnsbpNU0rTjep0UyUawgtADlsumHbANsadQaDNMVmraYdu4u4LDYct6He Q2S8s44kMBMtXTe8ydLmgaBbimunhrt21Jf3RLZQRiaF+/CHjw55V+b+eGRAHmdZ FKDiOKYjE+PIdBVNoxrppBMmKxNqbxxRPqbHlW9U5bFYkPUHdN5VhpuZNnaK8pIa ddXBy6nkP29ML1eO1wmhWfualQQqDMEEn9NpIVQDrqmQZOwtuQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFGmdFU/g8jP6Pl+3vSK/obA+lY3sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 NDgyY2NjMC1lNGRkLTQ3OWUtYTAyOS00NjBhNzlhY2M5Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU0ODJjY2MwLWU0ZGQtNDc5ZS1h MDI5LTQ2MGE3OWFjYzljYy81NDgyY2NjMC1lNGRkLTQ3OWUtYTAyOS00NjBhNzlh Y2M5Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAQ/jQADBAVBF6ADBATRvEAwDQQCAAIwBwMFACYH 8PgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIApMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE3WhPirtDa3 inNRmFg8ItQz/Lx7H6O+ua0rdBLrTgXaj7iB35sQlvYUg1KKs6thCIUcQuxMjk2c 2HDZ00c3K9wATgo0cPkDuqslvkjpCvx9JiVwHExhX0KWzzjzz2JUCpHIN8mRxAS5 zBt1p+oqiFb+Ca16DfEPUY4tkV3Ub6M5hVNMeccwnWKzoiuokn+u3utgnEnvgCyv xi8dPpEk0/YJ/6I46EqK50GDrMIkoQ2ArVqGkIqmwLNSw1w/xAa5hDSnm9qut7r/ 0a3KB4QtiKcjt6Hlh9ClVbNtRCKgnLIwYzOr7BkbHij0f/SwR/f58LLQ167v8+lg 8TXmCCcedEs= -----END CERTIFICATE-----Generated at Mon Jun 16 16:39:51 2025 by rpki-client