$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer File: e351cae3-e8b7-49f3-8533-235870399685.cer (raw, json) Hash identifier: u0jSfPxmdR4QCTD1mNWnSAiG3fE/vwF9moGR92wQvak= Subject key identifier: AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584782E9777477FECFCA4C539B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Oct 2024 00:45:26 +0000 Certificate not after: Fri 15 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 22673 AS: 40903 IP: 198.252.160.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:e9:77:74:77:fe:cf:ca:4c:53:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 12 00:45:26 2024 GMT Not After : Jan 15 01:45:26 2027 GMT Subject: CN=e351cae3-e8b7-49f3-8533-235870399685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:17:01:5c:b5:3f:4a:c7:32:ae:14:d0:af: 1b:2c:d3:19:de:53:cf:a1:bb:c6:a7:01:a7:15:b0: 5d:95:e5:38:00:bf:90:74:b1:48:d9:66:2f:48:e1: 8d:fe:7a:5d:61:bc:a1:55:0b:89:dd:18:21:60:ec: 22:a0:e3:08:db:4c:fc:cb:f6:68:db:59:53:77:d3: 82:3a:e3:2d:fc:d0:e0:b1:4c:3d:94:16:bd:02:39: 46:73:3e:d8:4e:9f:a2:c5:c8:f0:7d:9d:c4:61:1f: 2c:1e:f3:c2:8a:7a:40:d3:37:83:78:d9:70:6b:1f: e7:0b:54:04:36:31:d7:8e:31:21:f2:03:76:a9:34: 86:90:07:ef:01:cb:6f:f5:9b:32:3d:cc:d4:fb:ad: bb:f0:70:30:12:42:a1:b3:9d:01:66:a9:32:cd:51: 3c:de:c7:13:62:20:b1:5a:42:a5:c9:9b:29:6e:55: a2:60:b0:66:d0:d5:f5:02:a8:9d:ec:d3:75:36:e3: 12:a8:42:3a:78:ed:54:1b:02:f1:61:3c:fb:c4:71: 0b:1c:bf:14:12:6c:2f:7e:e4:8f:5e:dd:c1:b1:d8: 77:6b:c1:a1:a4:4c:36:bc:c1:1b:b9:f7:90:69:cd: 0a:de:d2:b5:fe:6c:0d:c9:e5:d9:c4:85:c3:20:ed: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 198.252.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22673 40903 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:a4:2e:32:85:24:be:16:8e:bd:c5:71:00:1a:9b:f1:44: 22:bb:d8:ae:03:fa:90:96:d9:b0:7e:12:7c:dd:d0:c1:ed:0e: f9:c7:c9:eb:88:f3:c3:a1:d7:f8:4b:92:24:a9:f7:00:e5:31: 84:3f:a9:f7:c5:4e:f1:be:de:6e:bc:a1:51:bd:c2:a9:15:6f: ee:bd:4e:3b:d8:4d:6b:96:8c:36:c3:65:2a:4b:b3:2e:96:1c: 2c:e8:f9:c5:92:58:2d:e6:fd:68:cd:34:c4:90:aa:c7:e3:9c: f9:46:71:c6:1e:e6:6f:21:c0:ac:7b:69:74:b2:7b:70:5e:ff: 11:01:0a:cc:2d:3f:2a:f0:17:97:94:48:2c:88:2b:82:b3:24: e5:16:b4:a2:25:1c:93:a2:d4:8f:98:9f:8b:12:77:dc:40:d3: 25:79:26:76:19:58:0d:bc:fe:3a:84:80:f9:fa:ce:f9:cf:d8: cb:7b:d2:b6:0a:ba:39:a7:56:fb:c3:9c:91:43:54:c2:f3:ef: 37:17:ba:eb:d9:0d:cc:19:75:96:76:41:41:a8:76:85:61:1a: e5:4c:e7:3a:ab:5e:f6:f2:95:c1:fa:bf:13:2d:e3:4d:13:62: 3c:7b:be:a7:8a:9c:10:90:df:95:37:98:54:1f:5f:86:a6:b5: 70:32:d2:d8 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEeC6Xd0d/7PykxTm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAxMjAwNDUyNloXDTI3MDExNTAxNDUyNlowLzEtMCsGA1UEAxMk ZTM1MWNhZTMtZThiNy00OWYzLTg1MzMtMjM1ODcwMzk5Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bQXAVy1P0rHMq4U0K8bLNMZ3lPPobvGpwGn FbBdleU4AL+QdLFI2WYvSOGN/npdYbyhVQuJ3RghYOwioOMI20z8y/Zo21lTd9OC OuMt/NDgsUw9lBa9AjlGcz7YTp+ixcjwfZ3EYR8sHvPCinpA0zeDeNlwax/nC1QE NjHXjjEh8gN2qTSGkAfvActv9ZsyPczU+6278HAwEkKhs50BZqkyzVE83scTYiCx WkKlyZspblWiYLBm0NX1Aqid7NN1NuMSqEI6eO1UGwLxYTz7xHELHL8UEmwvfuSP Xt3Bsdh3a8GhpEw2vMEbufeQac0K3tK1/mwNyeXZxIXDIO1nyQIDAQABo4IEHzCC BBswHQYDVR0OBBYEFK3b8KoQk3lrzCbNSw3ZeNVVXKT4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l MzUxY2FlMy1lOGI3LTQ5ZjMtODUzMy0yMzU4NzAzOTk2ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UzNTFjYWUzLWU4YjctNDlmMy04 NTMzLTIzNTg3MDM5OTY4NS9lMzUxY2FlMy1lOGI3LTQ5ZjMtODUzMy0yMzU4NzAz OTk2ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADG/KAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC WJECAwCfxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAuhKQuMoUkvhaOvcVxABqb8UQiu9iuA/qQltmwfhJ8 3dDB7Q75x8nriPPDodf4S5IkqfcA5TGEP6n3xU7xvt5uvKFRvcKpFW/uvU472E1r low2w2UqS7Mulhws6PnFklgt5v1ozTTEkKrH45z5RnHGHuZvIcCse2l0sntwXv8R AQrMLT8q8BeXlEgsiCuCsyTlFrSiJRyTotSPmJ+LEnfcQNMleSZ2GVgNvP46hID5 +s75z9jLe9K2Cro5p1b7w5yRQ1TC8+83F7rr2Q3MGXWWdkFBqHaFYRrlTOc6q172 8pXB+r8TLeNNE2I8e76nipwQkN+VN5hUH1+GprVwMtLY -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:20 2025 by rpki-client