$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer File: 9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer (raw, json) Hash identifier: Dx4tu0iczLsUek+tuizEzYNhQq60MAWMXPIKxdU4LpI= Subject key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584A601F4A0237E9BD76B8C23B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 16:01:24 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 36527 IP: 23.160.136.0/24 IP: 198.153.58.0/23 IP: 2602:fa41::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:1f:4a:02:37:e9:bd:76:b8:c2:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 1 16:01:24 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:0c:59:8a:cc:b8:c9:28:a9:7b:c2:de:e7: 52:9a:f4:c3:6b:ac:95:5f:1f:4b:8c:03:bb:c3:bf: 93:ed:46:15:a5:82:36:c0:e7:19:f4:cf:1e:d7:03: fb:a8:b0:53:fd:0a:40:85:14:53:d5:cd:22:6b:9f: b8:a1:8b:ae:11:c5:16:36:e3:33:b5:81:dc:4b:05: 61:79:f5:5a:b6:25:95:82:ad:20:cd:a2:e5:8a:12: b6:b2:dc:89:c7:0e:8e:38:52:8e:2d:09:06:c5:12: e4:ec:03:4a:2e:3b:62:a0:80:4c:1c:7a:73:5b:78: e3:cf:d3:68:8e:55:1d:b1:9d:5b:cb:9d:ab:ec:a9: 3b:2f:77:38:bf:20:29:b8:8e:1b:7d:af:0f:fe:f5: ec:17:23:ac:a9:0b:84:3b:f4:ca:ed:eb:89:a5:4c: 9c:dc:81:77:a4:b2:b7:33:ec:33:eb:c0:d1:ca:ac: 6f:2c:a0:6e:a0:e6:36:13:0e:c8:0f:fa:2f:c6:b3: 29:67:10:1d:cf:d6:a8:d9:8c:d0:dd:0f:98:6f:0a: 36:5b:c0:0c:63:a7:37:fc:a8:63:14:59:d4:18:b1: 73:89:9b:f3:70:fb:dc:b1:99:ca:e1:06:fa:bf:7b: 23:ed:95:99:64:e3:39:a3:0c:40:5c:08:ba:de:2c: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.160.136.0/24 198.153.58.0/23 IPv6: 2602:fa41::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36527 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f8:a6:a0:29:68:e8:ef:7e:e7:ed:f1:b4:c0:ed:7f:0a:81: c0:4a:84:a9:1d:7c:ac:8a:84:df:63:92:13:cb:d7:c4:80:2e: ee:bb:57:1b:c2:f8:75:25:fa:97:f4:f6:fa:02:78:b8:d3:27: 5c:90:65:6c:29:d5:03:5a:8a:7f:67:ae:6b:bb:db:41:57:36: 07:c3:f7:51:b7:c1:51:c8:54:39:c2:ae:79:c8:27:d2:7d:40: 50:c6:6e:de:96:69:e3:b7:9e:ed:aa:13:33:4a:da:cc:0d:55: ba:12:6e:57:1e:3a:a5:1a:a0:83:73:25:49:5c:56:41:e0:3c: b9:17:c7:3e:bd:67:db:ff:72:c0:39:73:e0:2c:a4:4a:c0:af: 81:5b:2d:6b:b9:fa:c9:9e:f8:e2:7c:2c:c7:00:dd:06:0a:3d: af:03:0a:ac:26:4c:e4:b2:2e:53:b0:81:d3:1d:44:28:c8:84: d0:4c:11:7b:2a:46:25:f9:55:50:2c:cf:79:e5:c7:88:e2:7f: 58:8c:78:9f:4c:c4:be:98:21:eb:be:2c:51:32:62:09:11:3a: f0:9f:f5:5e:7d:a2:44:4d:b6:f2:f5:75:95:7b:e2:47:95:29: db:fa:70:ed:6f:c0:cd:c9:e9:89:a2:f5:75:64:fe:00:5e:ab: eb:9b:62:97 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEpgH0oCN+m9drjCO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDcwMTE2MDEyNFoXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk OWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMwOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZkMWYrMuMkoqXvC3udSmvTDa6yVXx9LjAO7 w7+T7UYVpYI2wOcZ9M8e1wP7qLBT/QpAhRRT1c0ia5+4oYuuEcUWNuMztYHcSwVh efVatiWVgq0gzaLlihK2styJxw6OOFKOLQkGxRLk7ANKLjtioIBMHHpzW3jjz9No jlUdsZ1by52r7Kk7L3c4vyApuI4bfa8P/vXsFyOsqQuEO/TK7euJpUyc3IF3pLK3 M+wz68DRyqxvLKBuoOY2Ew7ID/ovxrMpZxAdz9ao2YzQ3Q+Ybwo2W8AMY6c3/Khj FFnUGLFziZvzcPvcsZnK4Qb6v3sj7ZWZZOM5owxAXAi63iwjXwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEwC2kgivo70s+gX8kdkc4rthth2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzliZjdlOGYxLTg5YmUtNGY1Ny1h MmNiLTkxMmI0NWIzMDhmYy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDVi MzA4ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoIgDBAHGmTowDgQCAAIwCAMGBCYC+kEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCOrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5+KagKWjo737n7fG0 wO1/CoHASoSpHXysioTfY5ITy9fEgC7uu1cbwvh1JfqX9Pb6Ani40ydckGVsKdUD Wop/Z65ru9tBVzYHw/dRt8FRyFQ5wq55yCfSfUBQxm7elmnjt57tqhMzStrMDVW6 Em5XHjqlGqCDcyVJXFZB4Dy5F8c+vWfb/3LAOXPgLKRKwK+BWy1rufrJnvjifCzH AN0GCj2vAwqsJkzksi5TsIHTHUQoyITQTBF7KkYl+VVQLM955ceI4n9YjHifTMS+ mCHrvixRMmIJETrwn/VefaJETbby9XWVe+JHlSnb+nDtb8DNyemJovV1ZP4AXqvr m2KX -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:33 2025 by rpki-client