$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer File: 137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer (raw, json) Hash identifier: eGQdy9ympdvgY2VWD0OkxX5vdNuKUgQGamFS2hvQEFQ= Subject key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Authority key identifier: DA:83:EE:B6:3B:31:16:4F:1C:34:A9:08:5B:79:88:53:07:63:B6:E9 Certificate issuer: /CN=35213db6-703a-4ad8-9450-0a0e1d371cff Certificate serial: 010D0C9F4328584A612375F563D2A84375A61480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 00:45:37 +0000 Certificate not after: Tue 05 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 11410 IP: 209.87.160.0 -- 209.87.170.255 IP: 209.87.172.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:23:75:f5:63:d2:a8:43:75:a6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35213db6-703a-4ad8-9450-0a0e1d371cff Validity Not Before: Jul 2 00:45:37 2025 GMT Not After : Oct 5 00:45:37 2027 GMT Subject: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:66:20:1b:4b:7a:29:7d:28:92:0d:8f:2d: 33:69:cf:76:e4:0d:58:0c:c9:18:40:6a:0b:2c:4e: 09:1c:2d:61:77:71:59:88:af:e1:ff:bb:cc:a4:5b: 81:cf:4e:b8:11:0a:eb:12:97:c9:67:64:1d:b8:04: dd:a8:ce:2f:f1:d0:92:e0:5e:f0:2f:c4:b0:0a:b6: 1f:24:58:26:20:50:1d:25:40:d7:b2:ea:2f:16:ea: 8d:d6:41:f8:31:39:3f:63:dc:32:f3:f1:24:5c:b7: d0:3f:4c:44:69:6a:d5:20:e3:52:cf:17:13:fa:04: fe:4a:c9:ba:f2:2c:08:ae:97:7d:ca:76:12:4c:35: 0c:4c:31:1f:a9:06:62:ef:49:35:34:80:e3:27:9e: b3:12:a2:ba:0b:43:81:e5:a8:f2:7b:d9:41:3c:71: 77:a4:c5:ba:c6:3d:eb:05:4c:9a:d8:e0:73:cb:90: 0a:5e:b4:78:af:ed:53:54:65:ba:f2:79:21:ee:79: d3:51:ce:59:25:fd:a1:8f:4a:0e:15:46:38:30:37: 02:a5:40:aa:a9:3e:ff:c2:f2:93:9e:ba:bd:61:02: eb:91:94:d3:f0:81:7e:f2:5d:0f:33:ee:83:10:64: 9d:fd:89:53:51:14:37:31:51:a9:6c:d4:22:12:4f: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl X509v3 Authority Key Identifier: keyid:DA:83:EE:B6:3B:31:16:4F:1C:34:A9:08:5B:79:88:53:07:63:B6:E9 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer sbgp-ipAddrBlock: critical IPv4: 209.87.160.0-209.87.170.255 209.87.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11410 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:15:95:a4:57:69:9b:b7:0d:37:c3:64:55:c4:f1:0d:91:65: 73:48:15:53:bf:47:fc:aa:f7:a2:b4:b4:0b:53:97:dc:f7:d4: 02:5a:09:78:d4:af:74:ea:bd:4f:85:57:91:ab:86:b9:c1:cc: 38:6e:db:72:63:ff:3f:27:e1:f0:c5:cc:34:3c:bc:fa:e7:79: f9:b4:04:fa:a4:0f:9f:d4:c7:c2:78:b8:02:28:2d:72:4f:7d: 53:fd:c0:82:a4:cb:84:34:c7:97:b5:dd:86:3b:5a:d9:76:33: e0:cf:da:6c:a8:67:8e:04:3f:c9:60:c1:fd:f7:07:30:8d:29: 61:89:94:92:1b:75:a7:83:d2:3e:1d:92:03:fa:e1:04:e6:24: b1:0e:a7:14:a2:70:f0:04:8c:c8:c8:0f:e0:32:54:a4:c7:cc: 58:23:ee:85:7a:5b:3e:e7:37:81:39:0f:76:67:3c:4c:7f:03: 39:d8:12:98:1e:bd:c0:ea:88:04:c8:fc:37:0a:1f:5b:86:b3: 34:09:87:54:c6:af:ce:b3:a2:a8:35:d8:19:26:b6:b4:e9:01: 5b:a1:88:f6:84:fc:a6:01:93:15:5b:a8:17:52:de:96:82:91: 4c:20:fe:ae:b8:76:f7:90:ff:36:95:c3:bb:51:4f:e8:43:14: b9:21:63:c4 -----BEGIN CERTIFICATE----- MIIGyjCCBbKgAwIBAgIUAQ0Mn0MoWEphI3X1Y9KoQ3WmFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUyMTNkYjYtNzAzYS00YWQ4LTk0NTAtMGEwZTFkMzcx Y2ZmMB4XDTI1MDcwMjAwNDUzN1oXDTI3MTAwNTAwNDUzN1owPTE7MDkGA1UEAxMy MTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhjYzRmZDYyOTY2MjkyNTMw NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDGYgG0t6KX0okg2P LTNpz3bkDVgMyRhAagssTgkcLWF3cVmIr+H/u8ykW4HPTrgRCusSl8lnZB24BN2o zi/x0JLgXvAvxLAKth8kWCYgUB0lQNey6i8W6o3WQfgxOT9j3DLz8SRct9A/TERp atUg41LPFxP6BP5KybryLAiul33KdhJMNQxMMR+pBmLvSTU0gOMnnrMSoroLQ4Hl qPJ72UE8cXekxbrGPesFTJrY4HPLkApetHiv7VNUZbryeSHuedNRzlkl/aGPSg4V RjgwNwKlQKqpPv/C8pOeur1hAuuRlNPwgX7yXQ8z7oMQZJ39iVNRFDcxUals1CIS T1ypAgMBAAGjggPOMIIDyjAdBgNVHQ4EFgQUT0SfDMs3jsbT/Ndqp+7VmvEVk7sw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZTUyMzgxZDAxOGU4NTkz ODg0ZDJhMzAvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZTUyMzgxZDAxOGU4NTkzODg0ZDJhMzAv MC80RjQ0OUYwQ0NCMzc4RUM2RDNGQ0Q3NkFBN0VFRDU5QUYxMTU5M0JCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3 Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUw LTBhMGUxZDM3MWNmZi8zNTIxM2RiNi03MDNhLTRhZDgtOTQ1MC0wYTBlMWQzNzFj ZmYuY3JsMB8GA1UdIwQYMBaAFNqD7rY7MRZPHDSpCFt5iFMHY7bpMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRiMzMt OWE4OC01YjIyZDJhODMzN2QvMzUyMTNkYjYtNzAzYS00YWQ4LTk0NTAtMGEwZTFk MzcxY2ZmLmNlcjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQF0VegAwQA 0VeqAwQC0VesMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiySMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMEV laRXaZu3DTfDZFXE8Q2RZXNIFVO/R/yq96K0tAtTl9z31AJaCXjUr3TqvU+FV5Gr hrnBzDhu23Jj/z8n4fDFzDQ8vPrnefm0BPqkD5/Ux8J4uAIoLXJPfVP9wIKky4Q0 x5e13YY7Wtl2M+DP2myoZ44EP8lgwf33BzCNKWGJlJIbdaeD0j4dkgP64QTmJLEO pxSicPAEjMjID+AyVKTHzFgj7oV6Wz7nN4E5D3ZnPEx/AznYEpgevcDqiATI/DcK H1uGszQJh1TGr86zoqg12BkmtrTpAVuhiPaE/KYBkxVbqBdS3paCkUwg/q64dveQ /zaVw7tRT+hDFLkhY8Q= -----END CERTIFICATE-----Generated at Tue Nov 4 16:52:36 2025 by rpki-client