$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c770623c-1e65-4067-9d69-686b86d12be5.cer File: c770623c-1e65-4067-9d69-686b86d12be5.cer (raw, json) Hash identifier: oTBbGRer0YOCqNF7t3ktC2ftJX+znGHQYsf5jTmuHn0= Subject key identifier: 01:BD:EC:99:31:13:9A:1B:7C:F2:13:D6:33:46:B8:5E:29:5C:8F:8B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A102D9F5E00550DE165E7CD20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c770623c-1e65-4067-9d69-686b86d12be5/c770623c-1e65-4067-9d69-686b86d12be5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c770623c-1e65-4067-9d69-686b86d12be5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 00:45:37 +0000 Certificate not after: Mon 06 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 46128 IP: 192.157.40.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:2d:9f:5e:00:55:0d:e1:65:e7:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 3 00:45:37 2025 GMT Not After : Sep 6 00:45:37 2027 GMT Subject: CN=c770623c-1e65-4067-9d69-686b86d12be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:e6:39:38:16:17:cf:d4:d4:d5:9c:94:81: d1:59:55:58:75:f9:61:e9:c9:c0:bc:66:bc:38:1e: ae:03:85:3b:39:b2:a6:ac:ec:39:b9:64:fd:1c:d1: 67:0f:ac:77:ce:7d:fb:85:6f:f9:17:d7:3f:3b:fe: 7f:3c:12:5c:10:b2:e2:6b:14:bb:8e:ed:fe:c5:93: 2e:4c:a6:c4:e1:3a:9b:c1:43:14:6a:01:14:c0:ba: 59:62:8f:1b:5d:8b:80:a5:ad:7f:ad:1f:ee:b7:55: f0:99:7e:1e:d7:87:3b:29:7d:2b:ec:f5:8d:6b:b4: a4:6e:ce:f0:1d:55:1e:f4:18:26:ef:bf:e9:15:87: 16:f9:92:74:a8:0f:4a:8e:68:96:8a:4a:8d:35:ed: 26:dc:3d:b9:bc:b2:f2:2b:19:e9:5a:0d:9e:cb:d7: 04:35:25:ee:77:99:0c:53:18:5c:11:40:95:dd:54: de:17:eb:15:1e:c9:5d:0c:de:68:79:2c:3d:df:75: 11:1c:e1:94:0a:96:96:8c:a6:34:50:7d:07:a9:52: 8d:78:04:55:fb:cf:d1:4e:99:82:ce:33:2f:08:7a: 22:7f:dd:4c:aa:8e:b6:4d:01:58:fd:51:03:e7:da: 0e:ee:67:3d:c1:e0:ea:c0:e4:c9:f6:f9:28:94:f7: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:EC:99:31:13:9A:1B:7C:F2:13:D6:33:46:B8:5E:29:5C:8F:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c770623c-1e65-4067-9d69-686b86d12be5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c770623c-1e65-4067-9d69-686b86d12be5/c770623c-1e65-4067-9d69-686b86d12be5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.157.40.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0f:47:cc:be:e6:75:0b:9f:46:bd:fd:b1:3b:3d:b7:f5:8c: 6a:aa:e4:60:3b:b4:b9:64:23:96:22:a6:67:e3:2b:39:f6:fb: 0e:67:ea:a8:a1:89:4e:6a:83:91:a0:23:55:07:24:f2:01:40: 18:de:7d:c8:3a:f8:a5:e7:f3:c7:22:d5:90:8e:b5:ef:e7:83: 03:39:14:52:c1:39:99:34:df:33:86:03:e2:12:10:8a:ac:3f: ee:87:57:36:52:0d:07:80:a6:95:ce:28:be:72:d8:c5:55:ad: b2:e4:2a:24:9c:1a:59:87:3d:80:b1:04:ad:7b:e0:0f:ce:2a: db:65:e1:9d:80:f3:bd:2e:73:e0:b5:bc:d3:de:ed:ee:a6:28: 81:0c:83:21:6a:74:06:d2:30:c1:2a:e5:0e:e4:4d:b6:df:d1: ac:27:9a:f6:1c:47:a0:85:9d:dd:02:f4:8c:42:b6:d7:2b:fa: 49:41:1f:47:92:64:e5:ca:66:2f:e3:ad:2c:a2:22:70:8e:ae: 13:4c:df:36:a8:9f:6e:70:67:e3:7b:8f:43:66:3a:49:66:4f: 6b:7b:74:13:70:9b:64:70:0c:36:c8:b1:b9:ff:55:ec:4e:e6: 3f:8f:9b:43:cd:d4:80:d7:1d:00:80:73:e2:06:91:66:55:56: d4:5a:47:83 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEoQLZ9eAFUN4WXnzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYwMzAwNDUzN1oXDTI3MDkwNjAwNDUzN1owLzEtMCsGA1UEAxMk Yzc3MDYyM2MtMWU2NS00MDY3LTlkNjktNjg2Yjg2ZDEyYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w3mOTgWF8/U1NWclIHRWVVYdflh6cnAvGa8 OB6uA4U7ObKmrOw5uWT9HNFnD6x3zn37hW/5F9c/O/5/PBJcELLiaxS7ju3+xZMu TKbE4TqbwUMUagEUwLpZYo8bXYuApa1/rR/ut1XwmX4e14c7KX0r7PWNa7Skbs7w HVUe9Bgm77/pFYcW+ZJ0qA9KjmiWikqNNe0m3D25vLLyKxnpWg2ey9cENSXud5kM UxhcEUCV3VTeF+sVHsldDN5oeSw933URHOGUCpaWjKY0UH0HqVKNeARV+8/RTpmC zjMvCHoif91Mqo62TQFY/VED59oO7mc9weDqwOTJ9vkolPfZOwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAG97JkxE5obfPIT1jNGuF4pXI+LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j NzcwNjIzYy0xZTY1LTQwNjctOWQ2OS02ODZiODZkMTJiZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2M3NzA2MjNjLTFlNjUtNDA2Ny05 ZDY5LTY4NmI4NmQxMmJlNS9jNzcwNjIzYy0xZTY1LTQwNjctOWQ2OS02ODZiODZk MTJiZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPAnSgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALQwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD0PR8y+5nULn0a9/bE7Pbf1jGqq5GA7tLlkI5YipmfjKzn2 +w5n6qihiU5qg5GgI1UHJPIBQBjefcg6+KXn88ci1ZCOte/ngwM5FFLBOZk03zOG A+ISEIqsP+6HVzZSDQeAppXOKL5y2MVVrbLkKiScGlmHPYCxBK174A/OKttl4Z2A 870uc+C1vNPe7e6mKIEMgyFqdAbSMMEq5Q7kTbbf0awnmvYcR6CFnd0C9IxCttcr +klBH0eSZOXKZi/jrSyiInCOrhNM3zaon25wZ+N7j0NmOklmT2t7dBNwm2RwDDbI sbn/VexO5j+Pm0PN1IDXHQCAc+IGkWZVVtRaR4M= -----END CERTIFICATE-----Generated at Sun Jun 15 04:45:54 2025 by rpki-client