$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer File: a29a724c-0ef8-416c-bb2c-359a0122375e.cer (raw, json) Hash identifier: laOzF5ttQVfemIqAKcdPxciuZjC2GBkNYLLoUbUPdCQ= Subject key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC5A3FB19086748EFA12A8C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Aug 2025 00:45:24 +0000 Certificate not after: Wed 10 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 398562 IP: 170.39.52.0/22 IP: 206.168.252.0/22 IP: 2602:fcb3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:a3:fb:19:08:67:48:ef:a1:2a:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 7 00:45:24 2025 GMT Not After : Nov 10 01:45:24 2027 GMT Subject: CN=a29a724c-0ef8-416c-bb2c-359a0122375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:3a:da:c1:85:ff:4d:fa:97:4f:df:5b:c4: c2:6d:db:0b:79:96:58:ef:4f:de:12:e0:6b:b7:e4: 8e:0f:64:28:09:e4:09:f4:c0:68:c7:c8:83:e0:be: 4e:77:35:a9:e9:ee:fc:b9:40:f7:62:6f:cd:41:52: ae:74:78:bf:29:0f:95:9a:11:cd:65:c1:0f:8c:ca: ad:99:41:47:fb:41:9c:0b:15:65:44:cd:42:92:a6: 5f:87:63:a1:b8:1d:c8:0a:c9:76:e2:41:9b:69:4a: e9:4c:4c:41:78:3e:f8:fc:59:c3:b4:2d:41:0f:39: f5:7e:9d:b9:4d:66:41:72:ec:e2:12:86:b1:ed:46: 71:87:d7:ce:28:c7:0e:21:1f:0d:3a:dd:6f:5e:ae: c2:d7:50:64:32:75:d9:ab:c9:e2:96:42:6f:3f:9c: 0c:f5:fe:0a:10:2b:4d:b4:72:5f:e5:41:db:3d:a4: 81:00:c4:b0:30:cf:ef:ca:7a:23:86:2f:07:55:30: 4e:01:7e:b5:fc:5f:14:b1:0a:b0:89:e5:c7:5a:0a: 86:4b:80:08:7d:b3:a7:06:d6:5e:16:1c:da:59:b1: b6:e0:84:f7:b8:e5:92:05:64:93:f2:80:cc:f1:8d: db:5a:69:c8:56:35:60:81:c4:d9:26:c1:72:d3:ed: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 170.39.52.0/22 206.168.252.0/22 IPv6: 2602:fcb3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f2:9f:1a:48:9d:e5:98:cd:b3:30:56:94:24:a9:67:b0:f6: ed:ee:cd:c8:95:08:bf:90:66:79:82:e6:9d:11:7e:27:c3:1e: ac:a7:f6:d2:44:d1:0e:bb:43:62:74:67:ed:c8:63:ad:24:60: d4:fd:96:d2:20:2f:41:5a:45:f8:44:3d:69:91:72:cf:03:45: b5:94:65:e7:6e:49:b2:da:e0:ad:8c:f2:53:f2:ae:9a:45:0a: ed:39:84:06:2a:6b:2a:30:e5:81:b3:eb:92:0f:fa:b3:d2:df: af:55:b7:7e:d6:5b:4a:8e:0c:18:3b:63:b6:6e:c9:0d:da:e1: 71:63:12:05:96:b9:69:a9:82:37:cc:4c:74:bb:d1:5f:a5:01: 41:26:fd:d0:f4:05:76:29:6d:ba:0e:99:55:86:82:a9:88:ef: 38:8f:82:b4:78:49:ef:99:99:6e:94:09:21:2e:13:2d:ae:e4: c6:ec:53:8f:38:17:de:3c:f0:1e:e7:c6:c2:60:46:ba:a4:2f: d2:e9:5d:d3:3d:fd:f2:fc:3d:8b:5a:7c:ac:47:27:95:0c:80: ff:54:72:9c:2a:4f:37:73:95:5f:70:01:8e:09:7e:e6:51:d9: 34:f0:d1:e1:3f:12:03:28:9d:98:23:28:fa:1d:ee:3c:06:27: 13:0c:41:95 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWErFo/sZCGdI76EqjHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNzAwNDUyNFoXDTI3MTExMDAxNDUyNFowLzEtMCsGA1UEAxMk YTI5YTcyNGMtMGVmOC00MTZjLWJiMmMtMzU5YTAxMjIzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcw62sGF/036l0/fW8TCbdsLeZZY70/eEuBr t+SOD2QoCeQJ9MBox8iD4L5OdzWp6e78uUD3Ym/NQVKudHi/KQ+VmhHNZcEPjMqt mUFH+0GcCxVlRM1CkqZfh2OhuB3ICsl24kGbaUrpTExBeD74/FnDtC1BDzn1fp25 TWZBcuziEoax7UZxh9fOKMcOIR8NOt1vXq7C11BkMnXZq8nilkJvP5wM9f4KECtN tHJf5UHbPaSBAMSwMM/vynojhi8HVTBOAX61/F8UsQqwieXHWgqGS4AIfbOnBtZe FhzaWbG24IT3uOWSBWST8oDM8Y3bWmnIVjVggcTZJsFy0+1yRwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOLRsRwckhAKSV7moJrtJKLccFi3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h MjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEyMjM3NWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2EyOWE3MjRjLTBlZjgtNDE2Yy1i YjJjLTM1OWEwMTIyMzc1ZS9hMjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEy MjM3NWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKqJzQDBALOqPwwDgQCAAIwCAMGBCYC/LMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYU4jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN8p8aSJ3lmM2zMFaU JKlnsPbt7s3IlQi/kGZ5guadEX4nwx6sp/bSRNEOu0NidGftyGOtJGDU/ZbSIC9B WkX4RD1pkXLPA0W1lGXnbkmy2uCtjPJT8q6aRQrtOYQGKmsqMOWBs+uSD/qz0t+v Vbd+1ltKjgwYO2O2bskN2uFxYxIFlrlpqYI3zEx0u9FfpQFBJv3Q9AV2KW26DplV hoKpiO84j4K0eEnvmZlulAkhLhMtruTG7FOPOBfePPAe58bCYEa6pC/S6V3TPf3y /D2LWnysRyeVDID/VHKcKk83c5VfcAGOCX7mUdk08NHhPxIDKJ2YIyj6He48BicT DEGV -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:16 2025 by rpki-client