$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer File: 1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer (raw, json) Hash identifier: wEELJs/u/3RcJ1hGcWfSsq2urlCkBD0URUbzt15UNYs= Subject key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A23B8681A7E6D8658465094C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Jun 2025 00:45:36 +0000 Certificate not after: Mon 13 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 394854 IP: 162.120.94.0/24 IP: 209.188.101.0/24 IP: 2607:21c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:b8:68:1a:7e:6d:86:58:46:50:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 10 00:45:36 2025 GMT Not After : Sep 13 00:45:36 2027 GMT Subject: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:31:32:6a:4b:40:78:cd:69:49:1a:b5:c2: 8d:b9:77:6c:4c:17:bf:68:46:fa:4e:65:b8:a3:e6: e2:7d:6a:a4:75:5c:0e:13:9b:07:53:f3:fe:8b:8c: 52:1d:f7:2d:e8:4d:9a:b1:c0:d6:a8:03:2c:4a:dd: fb:39:0e:d9:b5:9f:de:b3:79:a4:47:b7:e2:a0:ff: 78:be:46:65:a9:1b:5d:6e:99:3f:e9:4e:5d:9b:87: ed:13:5f:bd:f1:f5:ac:66:0d:e6:c0:a1:98:00:a9: 78:71:5a:4a:9b:c1:c8:d2:1c:db:13:5e:c5:84:f7: 84:cb:4a:cc:af:e9:35:6e:90:91:03:e8:e2:8b:e9: 8d:b4:d4:8e:00:2d:59:88:87:75:d3:b4:01:45:1f: c7:b0:26:ec:54:ce:f9:28:fc:d3:40:53:c8:c0:c3: ae:28:aa:92:07:3c:9d:c8:57:9b:6d:93:4f:44:59: 39:06:53:aa:83:fa:5c:28:b2:e9:9c:12:d4:43:ef: 76:28:4c:98:f1:57:30:a2:86:17:60:46:bb:54:01: bc:48:a3:b9:4f:75:1b:58:07:d1:cc:4d:28:58:ff: ce:e9:40:0a:04:d9:96:da:59:76:30:db:a4:90:bc: 04:a7:a6:6e:72:bf:18:e6:88:36:f9:db:e6:d0:89: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 162.120.94.0/24 209.188.101.0/24 IPv6: 2607:21c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a9:92:74:46:49:89:e7:b2:7c:8c:f8:c2:fb:f0:29:81:78: 51:e8:21:9b:e1:41:f7:8b:21:41:8c:c6:87:5e:7f:32:49:41: 42:c2:3b:81:73:7a:53:eb:56:eb:52:9a:fb:53:b0:8b:fb:66: e2:48:e7:af:c9:61:81:24:3d:df:2d:bd:fb:89:2d:9e:d7:18: db:1a:42:ac:d6:7a:09:a6:86:a5:b5:b6:3f:ed:ee:b5:9c:03: 28:81:ac:50:1a:ce:59:40:d4:bc:7f:d6:c3:b3:7f:44:e5:dc: 55:5c:61:c1:37:0d:28:24:66:db:a4:8b:45:0c:eb:ad:87:52: 2a:0a:4a:93:e7:4f:0d:cd:e7:cd:e4:9f:3f:83:a5:3f:7d:2c: 7a:26:07:0a:ad:22:ce:6e:57:00:0d:4a:33:fe:5b:96:6d:3d: f9:22:cb:33:5b:60:d7:60:71:ae:53:31:72:84:4e:82:c2:c1: bb:10:f7:78:32:5a:a6:c1:33:7c:d3:e7:5d:9d:77:01:ae:76: 19:cb:88:c1:b7:c4:6e:f3:76:65:3e:2e:b8:da:78:69:83:59: d2:2a:19:08:f4:2d:65:fc:06:41:12:5a:6f:05:a8:0a:59:b9: 77:57:7b:37:b6:0b:63:62:6a:96:15:21:15:44:9e:98:6e:f4: 79:17:9e:ed -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEojuGgafm2GWEZQlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxMDAwNDUzNloXDTI3MDkxMzAwNDUzNlowLzEtMCsGA1UEAxMk MWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRiYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicsxMmpLQHjNaUkatcKNuXdsTBe/aEb6TmW4 o+bifWqkdVwOE5sHU/P+i4xSHfct6E2ascDWqAMsSt37OQ7ZtZ/es3mkR7fioP94 vkZlqRtdbpk/6U5dm4ftE1+98fWsZg3mwKGYAKl4cVpKm8HI0hzbE17FhPeEy0rM r+k1bpCRA+jii+mNtNSOAC1ZiId107QBRR/HsCbsVM75KPzTQFPIwMOuKKqSBzyd yFebbZNPRFk5BlOqg/pcKLLpnBLUQ+92KEyY8VcwooYXYEa7VAG8SKO5T3UbWAfR zE0oWP/O6UAKBNmW2ll2MNukkLwEp6Zucr8Y5og2+dvm0ImGGwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFK3W/PjZ8DHUUuCpbY/7sbNge49eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFjMTdjMWQxLTc1OTUtNDc3ZS1h YWNiLWY4ZWY0MmM0YmE4ZS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJj NGJhOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACieF4DBADRvGUwDQQCAAIwBwMFACYHIcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgZmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGipknRGSYnnsnyM+ML7 8CmBeFHoIZvhQfeLIUGMxodefzJJQULCO4FzelPrVutSmvtTsIv7ZuJI56/JYYEk Pd8tvfuJLZ7XGNsaQqzWegmmhqW1tj/t7rWcAyiBrFAazllA1Lx/1sOzf0Tl3FVc YcE3DSgkZtuki0UM662HUioKSpPnTw3N583knz+DpT99LHomBwqtIs5uVwANSjP+ W5ZtPfkiyzNbYNdgca5TMXKEToLCwbsQ93gyWqbBM3zT512ddwGudhnLiMG3xG7z dmU+LrjaeGmDWdIqGQj0LWX8BkESWm8FqApZuXdXeze2C2NiapYVIRVEnphu9HkX nu0= -----END CERTIFICATE-----Generated at Sat Jun 14 18:39:32 2025 by rpki-client