$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer File: f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer (raw, json) Hash identifier: wqjVAddXDc4KvDtdbR0Q4a2DeHYjHX9SXdBFZnX2h4E= Subject key identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A7778EE85DEFFC3AB4BC79880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 00:45:36 +0000 Certificate not after: Wed 13 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 4138 IP: 23.129.192.0/24 IP: 2604:55c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:78:ee:85:de:ff:c3:ab:4b:c7:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 10 00:45:36 2025 GMT Not After : Oct 13 00:45:36 2027 GMT Subject: CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:bb:09:b7:db:37:f9:f9:5c:f9:02:74:81: 6d:50:62:27:fd:20:84:f2:64:35:3f:08:c6:6a:32: 38:76:2f:81:1f:73:0f:60:09:f6:85:c6:e3:f5:3d: 41:4a:0a:0e:60:50:4a:db:8a:35:e2:47:80:d3:2b: 99:b8:77:95:2f:1e:82:f8:b8:75:24:44:f8:02:df: 61:06:02:53:26:5b:9f:16:ed:5f:c7:5c:28:93:75: 38:99:be:82:8c:55:3b:34:ba:29:3a:49:4d:50:56: 3e:9b:03:a5:9e:0c:cf:92:64:21:c1:72:bd:e7:f9: 8d:62:aa:e1:4a:59:49:07:1f:0d:81:d2:d7:b7:bd: 06:46:87:77:49:62:47:f0:8e:9b:ae:a5:9d:c3:c5: 9a:67:06:b1:e1:9f:e3:67:f3:38:61:2e:dc:a3:95: 8a:26:d9:bd:59:cf:ed:15:ac:95:be:4d:07:e5:b1: a0:a9:6c:42:b6:12:9f:fe:b8:eb:a6:87:09:db:af: d9:2b:22:fd:1a:22:a8:d2:58:2a:ed:89:64:81:0d: db:3f:41:f0:b5:bc:cb:13:ee:7c:49:29:86:71:78: 28:da:5b:7d:b0:ea:f4:03:c7:d5:b4:4a:1b:f5:52: b3:c7:f4:41:45:93:ab:4a:72:29:20:c8:45:50:99: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.192.0/24 IPv6: 2604:55c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:34:27:66:e4:dd:18:a6:58:86:e9:c7:fe:d7:11:e4:39:34: 56:7f:82:58:ba:a4:0d:a2:31:54:8f:0b:77:1c:5e:a7:64:d4: e8:7f:fa:4f:a3:05:8b:61:3b:21:0d:b1:ee:0c:bc:76:d0:06: c1:1d:5d:2f:ed:62:53:a6:7e:dc:a1:f2:ca:3d:86:39:15:3e: 33:1d:d6:61:af:b0:2f:0c:4c:95:22:4e:d6:c1:c8:9e:ff:c5: 57:01:6b:d4:25:71:a5:30:e4:c2:1a:02:09:eb:ff:0f:4b:c0: 5b:4e:57:ee:6f:f5:d8:86:cf:05:70:1f:f7:3f:3d:84:50:ca: df:32:e2:a1:61:02:c9:14:d0:d2:40:34:23:b7:d1:12:45:10: 5e:dd:c6:37:13:6e:52:2b:0e:a3:32:64:ff:c3:b7:57:a8:73: 5d:05:c5:da:da:fd:a9:6e:08:88:ff:86:65:3a:4e:1e:1c:af: 4e:29:39:fe:f3:a9:d7:4e:73:09:38:57:d5:9b:5b:c3:be:12: c4:49:0f:53:6e:e0:d2:81:e2:5a:5c:4a:7f:3b:ce:46:93:1b: 17:33:08:c2:35:3a:66:02:db:8b:f5:49:a1:ff:b6:ca:3e:a6: 6c:8d:e6:7e:ba:ef:15:2d:bb:f0:65:b9:18:d1:79:3f:63:fa: 3d:74:b7:98 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEp3eO6F3v/Dq0vHmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcxMDAwNDUzNloXDTI3MTAxMzAwNDUzNlowLzEtMCsGA1UEAxMk ZjM5NzcwMGMtYWM4ZC00ZTNmLWEwNmQtY2IzMzBkYmIxZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHi7CbfbN/n5XPkCdIFtUGIn/SCE8mQ1PwjG ajI4di+BH3MPYAn2hcbj9T1BSgoOYFBK24o14keA0yuZuHeVLx6C+Lh1JET4At9h BgJTJlufFu1fx1wok3U4mb6CjFU7NLopOklNUFY+mwOlngzPkmQhwXK95/mNYqrh SllJBx8NgdLXt70GRod3SWJH8I6brqWdw8WaZwax4Z/jZ/M4YS7co5WKJtm9Wc/t FayVvk0H5bGgqWxCthKf/rjrpocJ26/ZKyL9GiKo0lgq7YlkgQ3bP0HwtbzLE+58 SSmGcXgo2lt9sOr0A8fVtEob9VKzx/RBRZOrSnIpIMhFUJmERQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJMquAknczlH4JWAewVztBoI8IwKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m Mzk3NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMzMGRiYjFlNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YzOTc3MDBjLWFjOGQtNGUzZi1h MDZkLWNiMzMwZGJiMWU0Ny9mMzk3NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMzMGRi YjFlNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXgcAwDQQCAAIwBwMFACYEVcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICECowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYTQnZuTdGKZYhunH/tcR5Dk0Vn+C WLqkDaIxVI8Ldxxep2TU6H/6T6MFi2E7IQ2x7gy8dtAGwR1dL+1iU6Z+3KHyyj2G ORU+Mx3WYa+wLwxMlSJO1sHInv/FVwFr1CVxpTDkwhoCCev/D0vAW05X7m/12IbP BXAf9z89hFDK3zLioWECyRTQ0kA0I7fREkUQXt3GNxNuUisOozJk/8O3V6hzXQXF 2tr9qW4IiP+GZTpOHhyvTik5/vOp105zCThX1Ztbw74SxEkPU27g0oHiWlxKfzvO RpMbFzMIwjU6ZgLbi/VJof+2yj6mbI3mfrrvFS278GW5GNF5P2P6PXS3mA== -----END CERTIFICATE-----Generated at Mon Aug 4 07:48:36 2025 by rpki-client