$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer File: e751f735-1712-4284-af50-5bd135a0234b.cer (raw, json) Hash identifier: toJAF+/2c5+cLSGvb/P2hw1q2UA3g0NvbsDVSDMbkuw= Subject key identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AAADD033D9EEE4E711B958FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 10:33:30 +0000 Certificate not after: Thu 23 Sep 2027 19:19:36 +0000 Subordinate resources: IP: 70.35.156.0/24 IP: 104.204.254.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:aa:dd:03:3d:9e:ee:4e:71:1b:95:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 28 10:33:30 2025 GMT Not After : Sep 23 19:19:36 2027 GMT Subject: CN=e751f735-1712-4284-af50-5bd135a0234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:dc:a2:de:96:7c:32:1a:84:9f:e1:46:99: bb:40:7f:e1:fb:77:fc:69:ef:fc:b1:40:04:58:d9: b2:13:8a:4c:da:aa:36:ba:68:5f:80:a7:12:b9:30: f9:6a:13:19:34:c3:96:1e:56:a0:11:d7:35:5f:62: 81:57:3f:f7:4b:20:cc:9b:dc:f5:02:7c:52:7c:f7: 33:1d:71:7e:1e:d0:32:f1:a4:5d:75:3a:43:99:29: e6:5d:1a:38:47:d3:8b:66:87:58:c4:6c:c3:66:fb: 5c:89:07:06:f9:a5:13:41:ff:52:80:25:26:2d:cb: df:17:22:27:17:fb:7b:33:71:53:9f:42:6a:6b:b6: c1:13:18:b3:e6:b1:66:16:90:5f:b0:60:1b:0e:6a: b6:d0:12:c5:76:9f:f9:14:57:1f:d8:3b:1c:be:d8: d3:f0:95:66:76:4c:66:5c:9f:33:40:ab:a8:d8:d3: f0:93:e6:77:be:68:1f:62:d8:97:d7:83:0b:a1:22: 17:25:95:41:6c:5b:93:8b:13:66:66:dd:f6:c5:d1: 2b:0e:ee:24:e0:f7:fb:55:d0:c0:ed:cd:97:61:a3: 43:ad:ad:e8:ae:55:6a:28:fc:9d:00:38:5e:de:0d: 47:e8:a5:76:51:46:63:0f:49:6b:6e:5a:57:5f:e8: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 70.35.156.0/24 104.204.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d2:c3:4f:12:be:0b:1a:1c:7f:36:3c:b3:de:d3:4e:3c:ae: 89:35:d4:5b:16:b8:bf:e2:a4:4f:82:b4:cb:d1:ce:56:45:e7: 78:76:11:ea:8d:64:ae:76:13:95:1e:a2:29:4b:ea:63:a1:c9: 85:18:20:6c:18:65:f0:73:a3:c4:58:f9:ab:e7:b9:12:e1:a8: eb:1a:c9:51:50:f8:7c:84:dc:11:a4:d4:55:9f:5e:d1:ee:6e: 23:01:9c:5d:4c:7a:86:79:e2:96:f4:1e:40:65:66:73:59:18: 17:c3:42:0e:1c:74:77:22:81:98:19:81:0f:f4:41:d0:2a:96: 86:b7:6e:de:06:3b:ac:9f:97:fb:54:3e:fd:51:84:43:33:f2: b4:be:2c:9a:33:cb:a1:c2:2c:b9:5d:02:42:4a:dc:28:73:5c: f6:66:3b:32:4b:f6:e6:28:bd:0e:9f:fe:dd:b9:d9:11:ea:7b: 22:bc:66:da:16:b6:e4:9d:8e:b3:fc:a5:9f:b6:a6:54:3d:73: 76:16:1a:d7:2e:a4:b2:bd:38:bf:b0:4f:83:ce:6a:4c:de:15: 76:04:79:81:0a:86:ca:23:25:c2:0a:e5:c5:6d:47:c6:d4:26: f5:12:f0:53:9f:d1:8b:10:87:33:3c:77:c6:57:ab:52:5f:54: e9:26:e6:ad -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEqq3QM9nu5OcRuVj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcyODEwMzMzMFoXDTI3MDkyMzE5MTkzNlowLzEtMCsGA1UEAxMk ZTc1MWY3MzUtMTcxMi00Mjg0LWFmNTAtNWJkMTM1YTAyMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Pcot6WfDIahJ/hRpm7QH/h+3f8ae/8sUAE WNmyE4pM2qo2umhfgKcSuTD5ahMZNMOWHlagEdc1X2KBVz/3SyDMm9z1AnxSfPcz HXF+HtAy8aRddTpDmSnmXRo4R9OLZodYxGzDZvtciQcG+aUTQf9SgCUmLcvfFyIn F/t7M3FTn0Jqa7bBExiz5rFmFpBfsGAbDmq20BLFdp/5FFcf2DscvtjT8JVmdkxm XJ8zQKuo2NPwk+Z3vmgfYtiX14MLoSIXJZVBbFuTixNmZt32xdErDu4k4Pf7VdDA 7c2XYaNDra3orlVqKPydADhe3g1H6KV2UUZjD0lrblpXX+h8tQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFMZciti4sk5MHMNUXC/RY89AaLkkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l NzUxZjczNS0xNzEyLTQyODQtYWY1MC01YmQxMzVhMDIzNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2U3NTFmNzM1LTE3MTItNDI4NC1h ZjUwLTViZDEzNWEwMjM0Yi9lNzUxZjczNS0xNzEyLTQyODQtYWY1MC01YmQxMzVh MDIzNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABGI5wDBABozP4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVtLDTxK+Cxoc fzY8s97TTjyuiTXUWxa4v+KkT4K0y9HOVkXneHYR6o1krnYTlR6iKUvqY6HJhRgg bBhl8HOjxFj5q+e5EuGo6xrJUVD4fITcEaTUVZ9e0e5uIwGcXUx6hnnilvQeQGVm c1kYF8NCDhx0dyKBmBmBD/RB0CqWhrdu3gY7rJ+X+1Q+/VGEQzPytL4smjPLocIs uV0CQkrcKHNc9mY7Mkv25ii9Dp/+3bnZEep7Irxm2ha25J2Os/yln7amVD1zdhYa 1y6ksr04v7BPg85qTN4VdgR5gQqGyiMlwgrlxW1HxtQm9RLwU5/RixCHMzx3xler Ul9U6SbmrQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:21 2025 by rpki-client