$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer File: 348d3713-8fd7-4568-b353-ff9d07414f1a.cer (raw, json) Hash identifier: FXcCSyreOsKXOx1s2YpcuEbMkr6V/lbiImS0czw1WlE= Subject key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AA423DF3836B8D80F748E6950 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Jul 2025 00:45:36 +0000 Certificate not after: Fri 29 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 400025 IP: 2620:12b:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:23:df:38:36:b8:d8:0f:74:8e:69:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 26 00:45:36 2025 GMT Not After : Oct 29 00:45:36 2027 GMT Subject: CN=348d3713-8fd7-4568-b353-ff9d07414f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:04:f7:dc:cb:a5:f8:72:5d:ee:a8:11:c2: 12:88:7c:32:c0:60:12:6a:83:1c:3a:d8:3a:26:42: 11:bd:7d:52:11:49:58:a8:dd:02:19:89:6e:4a:f6: d5:8c:93:21:48:26:fb:5d:c8:de:be:42:51:ac:4f: 51:6e:6d:52:2c:9b:7c:e7:88:1e:6f:3b:95:07:d3: 60:a8:84:36:e2:16:86:e9:09:cf:69:dc:88:49:5a: 1b:7f:d4:0e:0b:81:55:1e:e2:9d:ed:73:2c:07:c6: c8:76:98:6d:77:54:89:eb:fb:df:5a:ed:99:1f:fe: c0:f0:d1:58:1f:19:e8:18:a8:41:3b:c9:00:35:cb: 7b:59:3d:91:58:4d:86:f0:12:22:ea:01:a4:aa:e5: 23:9c:ea:13:f7:c1:95:89:2e:38:38:59:b6:da:14: c2:48:3a:6a:dd:a3:e0:d9:67:86:48:fe:ba:ac:4f: cf:2f:5c:89:36:18:08:64:cc:9f:0a:35:e5:9e:04: 8d:65:c5:e1:02:c1:13:27:fb:b3:d3:0f:92:26:03: 70:12:be:5a:40:81:a4:bb:41:83:43:75:06:da:75: 35:3f:62:54:3a:68:55:e3:3e:7c:aa:95:a6:84:c6: 27:0d:5c:b2:f9:9e:d8:92:b9:40:db:c4:ec:2b:01: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:12b:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400025 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:40:0d:7f:12:58:0b:ba:31:82:d4:62:56:ce:34:5b:e1:75: 3e:e6:c6:9a:63:b2:72:fe:55:b0:e3:8b:07:51:5b:1d:28:d6: 9a:5a:00:78:bd:07:36:00:76:4d:c6:52:9e:ed:18:cc:16:84: 55:90:63:a9:46:ba:c4:72:7c:1b:d4:52:2a:70:61:c5:76:07: a8:db:cb:8f:d4:b0:9f:56:98:e9:5f:a1:8a:c0:e5:5f:31:22: be:14:b9:9b:32:61:c6:7a:5f:61:89:6e:0d:93:89:10:45:86: 16:f2:ee:09:bc:7b:f7:7a:19:a0:a7:6e:b3:b1:6c:fc:cd:d8: e6:e6:44:cb:e6:2b:b9:73:25:3f:2c:1b:91:b6:70:70:cf:61: a3:db:05:04:2c:99:27:2e:c2:5f:42:f2:70:e7:8a:44:65:53: f0:29:2a:1c:04:0f:ab:32:54:bf:55:fc:c7:65:42:88:4a:92: cb:57:a3:80:2e:ec:36:57:fb:a8:40:52:31:b9:2c:72:64:cd: 64:31:f8:3a:5c:dc:3e:66:4a:b3:2d:d7:cf:25:31:9c:a2:93: 1b:2f:ed:d1:45:d9:86:8f:07:74:3a:ce:d6:54:19:df:94:67: 4a:8f:c0:cb:e0:d2:5b:9e:b8:ca:53:0b:a9:e6:33:c4:22:eb: 36:73:02:94 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEqkI984NrjYD3SOaVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcyNjAwNDUzNloXDTI3MTAyOTAwNDUzNlowLzEtMCsGA1UEAxMk MzQ4ZDM3MTMtOGZkNy00NTY4LWIzNTMtZmY5ZDA3NDE0ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EkE99zLpfhyXe6oEcISiHwywGASaoMcOtg6 JkIRvX1SEUlYqN0CGYluSvbVjJMhSCb7XcjevkJRrE9Rbm1SLJt854gebzuVB9Ng qIQ24haG6QnPadyISVobf9QOC4FVHuKd7XMsB8bIdphtd1SJ6/vfWu2ZH/7A8NFY HxnoGKhBO8kANct7WT2RWE2G8BIi6gGkquUjnOoT98GViS44OFm22hTCSDpq3aPg 2WeGSP66rE/PL1yJNhgIZMyfCjXlngSNZcXhAsETJ/uz0w+SJgNwEr5aQIGku0GD Q3UG2nU1P2JUOmhV4z58qpWmhMYnDVyy+Z7YkrlA28TsKwF0ZwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIPQF5B7b+92GMPvA+zpqDReFI3kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NDhkMzcxMy04ZmQ3LTQ1NjgtYjM1My1mZjlkMDc0MTRmMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM0OGQzNzEzLThmZDctNDU2OC1i MzUzLWZmOWQwNzQxNGYxYS8zNDhkMzcxMy04ZmQ3LTQ1NjgtYjM1My1mZjlkMDc0 MTRmMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAEr4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGGpkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJkANfxJYC7oxgtRiVs40W+F1PubGmmOycv5VsOOLB1Fb HSjWmloAeL0HNgB2TcZSnu0YzBaEVZBjqUa6xHJ8G9RSKnBhxXYHqNvLj9Swn1aY 6V+hisDlXzEivhS5mzJhxnpfYYluDZOJEEWGFvLuCbx793oZoKdus7Fs/M3Y5uZE y+YruXMlPywbkbZwcM9ho9sFBCyZJy7CX0LycOeKRGVT8CkqHAQPqzJUv1X8x2VC iEqSy1ejgC7sNlf7qEBSMbkscmTNZDH4OlzcPmZKsy3XzyUxnKKTGy/t0UXZho8H dDrO1lQZ35RnSo/Ay+DSW564ylMLqeYzxCLrNnMClA== -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:10 2025 by rpki-client