$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer File: ac0c72ee-a963-4924-8dd0-a48579578b1b.cer (raw, json) Hash identifier: b8rEKbgzpAET3d3/kyJyrb8LSr+rH6V9Ec2lmoJK82I= Subject key identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584A974C4127957715316CD631C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 10:21:28 +0000 Certificate not after: Sun 24 Jan 2027 17:11:02 +0000 Subordinate resources: AS: 400042 IP: 70.35.152.0/24 IP: 76.164.205.0/24 IP: 2602:f7ca::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:4c:41:27:95:77:15:31:6c:d6:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 21 10:21:28 2025 GMT Not After : Jan 24 17:11:02 2027 GMT Subject: CN=ac0c72ee-a963-4924-8dd0-a48579578b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3d:0d:55:9a:69:08:df:ee:9b:43:90:7f:06: 60:69:fb:12:45:ce:d3:a9:e9:34:d7:89:8d:08:72: ef:6f:06:0d:04:8d:aa:b5:5e:8b:20:74:09:58:d2: 68:f5:7c:10:06:4b:25:9f:0b:ed:7f:fe:5e:4a:ce: 09:d8:22:e0:18:ea:2a:7b:ad:05:70:8d:e4:b2:8e: fc:49:3c:13:e1:3d:73:96:6d:0d:01:46:af:13:a3: 89:ed:22:fc:7d:37:e4:16:ac:46:ba:89:8e:f7:b2: 7e:f7:3a:3d:41:d4:be:17:74:bb:e5:a9:ae:c4:92: 85:af:17:c0:0d:ba:55:52:f6:55:1f:b0:fc:3e:c5: 50:59:90:fd:26:b5:c4:36:a2:ac:81:d1:4d:19:34: 89:81:a3:9f:1f:ed:4d:80:d8:a9:f8:2d:c2:3f:7c: 17:3d:fd:3b:27:2d:9e:1f:b1:6d:e9:c4:51:aa:a6: db:38:b7:b2:fc:89:5a:da:96:6f:aa:4b:8d:91:7a: bb:e9:a7:7d:f7:93:2f:dd:b6:0b:b6:1b:d2:dd:f4: 39:45:54:71:c6:45:ba:e4:22:43:0d:1c:47:e8:d7: da:80:b5:0d:c8:47:9e:25:53:6f:be:4b:e4:c4:16: 7a:f3:cf:76:91:f1:b3:1d:c5:e6:1b:3f:98:c2:7a: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 70.35.152.0/24 76.164.205.0/24 IPv6: 2602:f7ca::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b9:0f:29:76:a4:83:00:1f:7f:21:9c:e5:04:ce:44:f7:83: 71:e7:be:82:a8:44:58:f2:d4:ec:21:10:ba:76:f8:db:7a:8b: 86:35:41:0b:5f:2a:6c:f8:1b:fe:cf:af:96:21:9c:af:38:cd: bf:33:a0:be:06:66:b2:6b:01:d3:20:50:a4:69:c3:86:e2:75: b4:e2:36:b5:c1:a2:91:7c:65:a0:93:58:49:1f:2c:4a:ca:f9: e1:ad:6b:b5:ad:36:f3:0f:80:2a:b6:c4:a6:ae:8e:7f:0e:b8: 57:2d:a7:bf:b7:f3:e7:3c:ee:3f:28:91:eb:a9:a3:13:32:ad: 00:c3:45:fb:31:d0:5d:2c:e4:8d:18:b2:97:b6:9f:f5:95:51: 87:35:41:95:d2:52:ea:85:ae:03:88:23:9c:7f:01:2d:4a:40: 9f:1a:69:6c:18:f3:db:90:a8:7c:bb:3a:5d:67:d8:f7:7a:a2: 3b:ac:e4:ee:9d:7b:ef:b3:9f:50:e3:78:df:f6:2a:95:37:e6: 8b:4c:fe:f9:97:0c:36:8e:ce:b6:70:42:d1:52:6a:f3:8d:4d: a8:0b:0f:f1:e6:fd:3f:f8:fe:ca:60:3c:29:bb:aa:9c:75:ef: a5:9f:96:17:82:13:cd:00:96:40:ed:df:42:35:0b:e3:64:4f: 59:41:66:14 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEqXTEEnlXcVMWzWMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyMTEwMjEyOFoXDTI3MDEyNDE3MTEwMlowLzEtMCsGA1UEAxMk YWMwYzcyZWUtYTk2My00OTI0LThkZDAtYTQ4NTc5NTc4YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz0NVZppCN/um0OQfwZgafsSRc7Tqek014mN CHLvbwYNBI2qtV6LIHQJWNJo9XwQBkslnwvtf/5eSs4J2CLgGOoqe60FcI3kso78 STwT4T1zlm0NAUavE6OJ7SL8fTfkFqxGuomO97J+9zo9QdS+F3S75amuxJKFrxfA DbpVUvZVH7D8PsVQWZD9JrXENqKsgdFNGTSJgaOfH+1NgNip+C3CP3wXPf07Jy2e H7Ft6cRRqqbbOLey/Ila2pZvqkuNkXq76ad995Mv3bYLthvS3fQ5RVRxxkW65CJD DRxH6NfagLUNyEeeJVNvvkvkxBZ68892kfGzHcXmGz+YwnqmpQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFI81SGpvLOLlEZvTTsP78gAf7KjvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h YzBjNzJlZS1hOTYzLTQ5MjQtOGRkMC1hNDg1Nzk1NzhiMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2FjMGM3MmVlLWE5NjMtNDkyNC04 ZGQwLWE0ODU3OTU3OGIxYi9hYzBjNzJlZS1hOTYzLTQ5MjQtOGRkMC1hNDg1Nzk1 NzhiMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABGI5gDBABMpM0wDgQCAAIwCAMGBCYC98oAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYaqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUuQ8pdqSDAB9/IZzl BM5E94Nx576CqERY8tTsIRC6dvjbeouGNUELXyps+Bv+z6+WIZyvOM2/M6C+Bmay awHTIFCkacOG4nW04ja1waKRfGWgk1hJHyxKyvnhrWu1rTbzD4AqtsSmro5/DrhX Lae/t/PnPO4/KJHrqaMTMq0Aw0X7MdBdLOSNGLKXtp/1lVGHNUGV0lLqha4DiCOc fwEtSkCfGmlsGPPbkKh8uzpdZ9j3eqI7rOTunXvvs59Q43jf9iqVN+aLTP75lww2 js62cELRUmrzjU2oCw/x5v0/+P7KYDwpu6qcde+ln5YXghPNAJZA7d9CNQvjZE9Z QWYU -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:22 2025 by rpki-client