$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9.cer File: 75c56265-28c8-443f-b178-7ec56393f3c9.cer (raw, json) Hash identifier: apwB86no5QgDrzn0FdXXbS066OAtoGSCdX+eJ2yzzP0= Subject key identifier: A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858498CF7726FBDF62C1180D64780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Apr 2025 00:45:34 +0000 Certificate not after: Wed 21 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 40578 IP: 199.5.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:f7:72:6f:bd:f6:2c:11:80:d6:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 17 00:45:34 2025 GMT Not After : Jul 21 00:45:34 2027 GMT Subject: CN=75c56265-28c8-443f-b178-7ec56393f3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:09:da:d0:e5:80:28:d0:15:be:82:f9:5a: 30:c3:1f:45:b5:17:03:8e:c9:b8:c0:94:88:de:2b: 5b:09:18:24:86:5c:01:12:2f:73:7b:e2:25:1e:fb: 12:95:c2:28:61:82:c8:0d:b5:4a:ff:3a:42:6b:cd: c2:6d:20:b3:a0:8b:3b:d2:15:c3:8c:45:76:be:4d: ba:f9:18:4e:da:0d:08:fb:ce:f7:d4:90:f0:05:16: c7:be:76:c2:73:f4:9c:96:04:ce:1c:98:b5:3e:ac: 70:57:8d:29:15:aa:f6:cf:22:f8:83:65:30:5a:3e: 03:08:7b:73:98:7b:6b:d7:44:69:12:46:a7:74:11: 54:0e:8b:ea:ed:f2:1f:84:22:ac:6c:0c:e0:30:82: 9a:66:fa:f7:d0:06:e4:b3:07:b3:ca:55:91:a4:3b: f3:24:bb:37:a2:e4:5d:48:59:d6:e9:25:08:36:7f: bf:1c:ef:74:6b:58:61:b3:b6:4e:76:0f:b3:6c:aa: 00:8f:2b:b7:98:d8:0a:3a:6d:4f:db:73:e5:6f:20: d0:1e:c7:d0:34:32:bc:ef:bb:a3:f7:7f:81:5e:75: 54:16:f3:87:0d:17:98:05:0a:92:d6:d5:59:4f:b6: c3:21:aa:d6:b5:f0:f8:aa:71:62:ad:fe:68:ea:4b: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.5.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40578 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:86:11:4a:0f:6e:06:c1:bb:d7:41:84:b1:68:01:4e:64:f0: 2f:80:bf:e8:80:12:63:06:03:55:26:33:5b:fb:79:94:e9:0f: 72:fc:8e:e8:34:1a:22:f6:8f:22:cb:ce:35:96:07:ea:59:24: a7:23:de:30:c6:b9:75:65:9b:3c:d0:65:3c:61:df:27:a8:92: ab:34:21:01:a9:87:74:42:19:56:e3:8c:37:e0:16:da:ae:49: 2f:8f:60:6b:ce:52:be:57:f9:74:4f:ad:32:66:54:33:cd:2a: 4c:6e:b6:eb:2c:7f:12:4a:11:a7:b6:d6:5a:d3:8f:3e:37:b0: 22:c2:91:c4:b0:0a:4b:79:3d:f7:ec:b2:aa:8c:59:e0:97:04: 5e:58:3e:37:91:e4:45:f2:1e:16:23:4b:ef:ee:bb:42:31:9a: 50:bf:df:7d:3c:64:98:1f:39:41:e7:3c:f3:10:8b:46:9c:eb: dc:ab:2e:c7:ec:f9:33:6d:4f:79:ee:bb:89:5c:64:e1:e9:2a: 52:b7:03:e6:93:88:e4:eb:37:a1:9d:05:92:6e:45:6f:84:8f: fc:5c:23:e2:6d:5f:6d:81:df:ec:30:54:32:e5:3b:ea:01:ac: 84:21:a9:7a:bc:02:fa:45:17:4c:fc:a5:a0:00:b9:8a:25:2a: 86:53:d0:fa -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmM93JvvfYsEYDWR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQxNzAwNDUzNFoXDTI3MDcyMTAwNDUzNFowLzEtMCsGA1UEAxMk NzVjNTYyNjUtMjhjOC00NDNmLWIxNzgtN2VjNTYzOTNmM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT0J2tDlgCjQFb6C+Vowwx9FtRcDjsm4wJSI 3itbCRgkhlwBEi9ze+IlHvsSlcIoYYLIDbVK/zpCa83CbSCzoIs70hXDjEV2vk26 +RhO2g0I+8731JDwBRbHvnbCc/SclgTOHJi1PqxwV40pFar2zyL4g2UwWj4DCHtz mHtr10RpEkandBFUDovq7fIfhCKsbAzgMIKaZvr30AbkswezylWRpDvzJLs3ouRd SFnW6SUINn+/HO90a1hhs7ZOdg+zbKoAjyu3mNgKOm1P23PlbyDQHsfQNDK877uj 93+BXnVUFvOHDReYBQqS1tVZT7bDIarWtfD4qnFirf5o6ksWbwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKdC0N2zU1XRVP/n6ujNGR3cs4jzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 NWM1NjI2NS0yOGM4LTQ0M2YtYjE3OC03ZWM1NjM5M2YzYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc1YzU2MjY1LTI4YzgtNDQzZi1i MTc4LTdlYzU2MzkzZjNjOS83NWM1NjI2NS0yOGM4LTQ0M2YtYjE3OC03ZWM1NjM5 M2YzYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHBRwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ6CMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI+GEUoPbgbBu9dBhLFoAU5k8C+Av+iAEmMGA1UmM1v7eZTp D3L8jug0GiL2jyLLzjWWB+pZJKcj3jDGuXVlmzzQZTxh3yeokqs0IQGph3RCGVbj jDfgFtquSS+PYGvOUr5X+XRPrTJmVDPNKkxutussfxJKEae21lrTjz43sCLCkcSw Ckt5PffssqqMWeCXBF5YPjeR5EXyHhYjS+/uu0IxmlC/3308ZJgfOUHnPPMQi0ac 69yrLsfs+TNtT3nuu4lcZOHpKlK3A+aTiOTrN6GdBZJuRW+Ej/xcI+JtX22B3+ww VDLlO+oBrIQhqXq8AvpFF0z8paAAuYolKoZT0Po= -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:59 2025 by rpki-client