$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer File: 7daddf1f-a775-44aa-b3ca-3520f73993ed.cer (raw, json) Hash identifier: w14oFBB5LKQOrnY8UG+tHT9t8mJh8IXsR3Atun958io= Subject key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285849C797D0D1B429C23646309000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 00:45:34 +0000 Certificate not after: Wed 11 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 22560 AS: 26380 IP: 113.30.208.0/21 IP: 204.124.235.0/24 IP: 205.233.71.0/24 IP: 209.178.240.0/22 IP: 216.119.208.0/20 IP: 2607:3c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:97:d0:d1:b4:29:c2:36:46:30:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 8 00:45:34 2025 GMT Not After : Aug 11 00:45:34 2027 GMT Subject: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:c1:25:60:44:e7:5c:12:2b:a8:59:98:9a: 63:0a:5e:7d:23:fa:c5:77:c6:c2:da:a5:81:e1:07: f8:57:42:3b:0c:b5:a5:48:9a:ae:92:63:dc:c4:f1: ef:a5:98:21:40:7e:bc:09:d0:eb:f6:7e:1d:6d:e3: 3a:96:65:9d:73:ca:bc:f0:cd:2d:cc:23:00:5e:57: e6:45:40:21:8e:ba:2f:d9:b1:6c:85:89:e8:91:b1: a2:e4:b6:b6:10:d6:a3:52:ec:89:5d:9d:ef:1d:c7: 06:02:f8:b5:24:a9:d0:62:c8:5d:24:57:43:26:4e: 87:73:67:56:da:94:5d:81:3c:92:20:80:3c:6c:e8: 17:40:d8:bf:0f:6c:0f:d1:00:6f:4e:04:33:4f:d4: 41:e1:2b:03:08:ac:bd:f2:ce:eb:5a:2a:cd:28:f5: 51:a6:94:c4:d5:78:1b:ce:61:8b:13:30:aa:0b:c5: e0:a0:90:ce:8c:74:62:28:fb:38:2a:65:fe:52:96: f9:07:07:b9:c3:e7:f8:34:a0:af:e1:08:41:38:88: 0a:79:d6:20:6c:37:5c:7b:da:38:b5:69:b5:d9:0d: 8a:5b:a7:6a:aa:8d:dd:3c:07:3c:d6:a1:db:f4:4d: b1:65:3b:e2:09:25:fa:e2:3c:16:72:56:03:cc:39: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 113.30.208.0/21 204.124.235.0/24 205.233.71.0/24 209.178.240.0/22 216.119.208.0/20 IPv6: 2607:3c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22560 26380 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9c:2b:3b:a2:a2:55:6a:3e:55:a9:69:ff:4c:a9:9f:d8:bb: 59:25:e6:fc:e7:fb:33:53:36:c8:af:a8:15:33:46:1e:2a:85: a5:92:b3:09:b6:03:cf:14:4a:4c:69:34:74:be:4f:d9:ec:21: 52:74:1e:97:36:c4:14:bd:16:22:f1:98:1e:16:1d:02:d3:f1: 8e:c9:36:c7:bb:08:4c:e4:99:4b:32:ee:81:25:e2:56:12:ed: 6a:e4:42:77:7f:c8:e1:22:03:8a:6c:1a:8b:ea:16:96:56:df: d0:47:6e:81:fd:cc:14:a8:b8:a9:d2:bc:49:75:60:c1:63:95: 3b:07:fc:c2:cf:df:03:30:f5:19:0d:5e:96:d2:8e:76:40:de: 5a:16:46:d5:2a:48:22:6f:9f:2f:43:7e:45:89:85:2a:2f:1e: 08:c7:bf:3e:64:e3:15:bc:8f:02:14:40:b1:fc:16:f3:ca:3d: 5e:78:62:f7:e6:d9:ec:9c:e4:1f:8c:9c:82:c0:c1:88:f4:67: 3e:27:64:2c:f0:76:4e:e9:f8:26:e4:06:f5:fb:88:90:47:fc: 59:ed:42:86:5c:fd:b2:68:16:89:cb:a2:35:e5:b4:f2:85:9e: c1:ca:2b:3a:3b:c4:e9:d1:84:b5:eb:6a:67:e9:01:00:5c:9b: bc:0d:5a:f3 -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEnHl9DRtCnCNkYwkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDUwODAwNDUzNFoXDTI3MDgxMTAwNDUzNFowLzEtMCsGA1UEAxMk N2RhZGRmMWYtYTc3NS00NGFhLWIzY2EtMzUyMGY3Mzk5M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPHBJWBE51wSK6hZmJpjCl59I/rFd8bC2qWB 4Qf4V0I7DLWlSJqukmPcxPHvpZghQH68CdDr9n4dbeM6lmWdc8q88M0tzCMAXlfm RUAhjrov2bFshYnokbGi5La2ENajUuyJXZ3vHccGAvi1JKnQYshdJFdDJk6Hc2dW 2pRdgTySIIA8bOgXQNi/D2wP0QBvTgQzT9RB4SsDCKy98s7rWirNKPVRppTE1Xgb zmGLEzCqC8XgoJDOjHRiKPs4KmX+Upb5Bwe5w+f4NKCv4QhBOIgKedYgbDdce9o4 tWm12Q2KW6dqqo3dPAc81qHb9E2xZTviCSX64jwWclYDzDm7MwIDAQABo4IERTCC BEEwHQYDVR0OBBYEFDJQSJnQ2CF5ASNQ3i+iPFpbGtmWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 ZGFkZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIwZjczOTkzZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdkYWRkZjFmLWE3NzUtNDRhYS1i M2NhLTM1MjBmNzM5OTNlZC83ZGFkZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIwZjcz OTkzZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBANxHtADBADMfOsDBADN6UcDBALRsvADBATYd9Aw DQQCAAIwBwMFACYHPAAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICWCACAmcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGcKzuiolVqPlWpaf9MqZ/Yu1kl5vzn+zNTNsivqBUzRh4qhaWSswm2 A88USkxpNHS+T9nsIVJ0Hpc2xBS9FiLxmB4WHQLT8Y7JNse7CEzkmUsy7oEl4lYS 7WrkQnd/yOEiA4psGovqFpZW39BHboH9zBSouKnSvEl1YMFjlTsH/MLP3wMw9RkN XpbSjnZA3loWRtUqSCJvny9DfkWJhSovHgjHvz5k4xW8jwIUQLH8FvPKPV54Yvfm 2eyc5B+MnILAwYj0Zz4nZCzwdk7p+CbkBvX7iJBH/FntQoZc/bJoFonLojXltPKF nsHKKzo7xOnRhLXramfpAQBcm7wNWvM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:33 2025 by rpki-client