$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.cer File: 6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.cer (raw, json) Hash identifier: +KWRXFw5hHQHhqxVMxRRtIRHUL4JGyIEIEPlLWuSvyg= Subject key identifier: 3A:7D:6E:94:22:BE:7D:5F:01:25:C2:7C:EA:76:02:93:AF:E6:62:B0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858494F8C65F17280DECEF8911420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 00:45:34 +0000 Certificate not after: Tue 29 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 397911 IP: 23.144.144.0/24 IP: 23.164.16.0/23 IP: 104.160.244.0/23 IP: 2605:67c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:8c:65:f1:72:80:de:ce:f8:91:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 26 00:45:34 2025 GMT Not After : Jun 29 00:45:34 2027 GMT Subject: CN=6dc946cf-a3d1-4e7f-9e58-7052b2deac6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:f8:5e:f0:a6:75:62:90:ef:7d:00:d1:70: 90:ab:d4:7e:0d:d3:74:1e:82:e2:c0:a8:1d:f9:2f: 20:64:6c:34:72:aa:8c:0c:53:f6:21:a4:c5:dd:0e: fc:08:01:ec:ae:5f:6c:9a:61:b1:76:cb:89:fa:87: 89:c7:cf:4d:d5:10:a9:5c:36:e1:08:17:8f:b7:b8: 0c:5a:51:dc:f3:64:cd:0c:58:15:37:08:72:71:d1: 88:48:46:e0:f5:32:58:c0:d9:31:e0:cf:8e:3e:84: 06:9b:5d:9b:40:31:f8:8e:07:4b:72:ba:5c:34:63: b6:b7:2d:00:c9:6c:23:ac:e5:68:b0:d7:3a:cc:51: 86:1d:34:b9:cb:a3:fe:cb:47:47:4f:a2:24:84:63: 0e:b1:e2:93:8c:32:1d:ff:87:90:0b:24:fe:24:60: 56:2f:70:f2:c9:99:90:df:63:4c:e5:7a:ea:35:16: 34:b2:61:91:42:fb:18:68:0f:3f:df:d0:5e:71:3e: ac:d5:0e:63:01:5a:62:fc:d8:f3:c7:f3:8f:5f:62: ba:a1:94:c9:73:52:ef:7d:c7:f3:42:7f:92:68:f4: e6:32:45:75:cc:4c:ae:e0:82:f7:bc:21:09:ac:e4: 54:51:be:e6:07:5c:8a:c8:42:3c:23:c7:2e:0a:1b: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:6E:94:22:BE:7D:5F:01:25:C2:7C:EA:76:02:93:AF:E6:62:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.144.144.0/24 23.164.16.0/23 104.160.244.0/23 IPv6: 2605:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397911 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b2:5c:01:d6:19:31:d9:e1:61:80:66:bd:cb:c0:b3:a2:a0: 1e:4d:00:08:e1:50:26:02:dc:f8:bf:a4:c7:f7:6f:5d:90:3b: f5:4b:c4:1d:68:c6:4a:38:8f:44:42:bd:4c:ed:7e:4c:99:88: b8:af:3f:c5:3a:13:36:4d:ec:14:80:4c:97:db:6d:1b:3f:1e: 6f:da:19:35:6c:78:6d:a4:f8:96:25:f2:32:32:24:1d:73:19: c0:c1:76:5a:e7:e0:65:a0:91:3a:97:3f:30:52:91:01:16:bd: 9d:bf:02:d5:a4:b6:8d:27:35:86:9a:01:12:78:de:25:67:8c: 29:b0:93:a2:55:7d:5b:80:b9:78:c5:39:c2:76:7f:72:c0:93: 19:ed:8c:d0:50:89:3d:21:38:32:50:97:f5:a3:69:e6:18:d4: 01:6c:9f:e1:d5:99:e0:74:37:b8:61:40:f1:1c:66:fe:8c:a3: d8:f9:48:84:a4:8e:92:f1:20:75:1a:cd:73:22:06:e9:6f:07: b9:6a:83:dc:48:9d:13:80:41:88:82:92:37:ed:c4:e8:42:07: 7c:76:dd:22:ed:e2:53:29:67:d7:7c:66:d4:44:fb:0b:da:93: dd:5a:8e:fc:f4:43:b7:44:e3:aa:0d:b3:b2:86:2f:31:06:36: f5:8d:08:66 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWElPjGXxcoDezviRFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMyNjAwNDUzNFoXDTI3MDYyOTAwNDUzNFowLzEtMCsGA1UEAxMk NmRjOTQ2Y2YtYTNkMS00ZTdmLTllNTgtNzA1MmIyZGVhYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9n4XvCmdWKQ730A0XCQq9R+DdN0HoLiwKgd +S8gZGw0cqqMDFP2IaTF3Q78CAHsrl9smmGxdsuJ+oeJx89N1RCpXDbhCBePt7gM WlHc82TNDFgVNwhycdGISEbg9TJYwNkx4M+OPoQGm12bQDH4jgdLcrpcNGO2ty0A yWwjrOVosNc6zFGGHTS5y6P+y0dHT6IkhGMOseKTjDId/4eQCyT+JGBWL3DyyZmQ 32NM5XrqNRY0smGRQvsYaA8/39BecT6s1Q5jAVpi/Njzx/OPX2K6oZTJc1Lvfcfz Qn+SaPTmMkV1zEyu4IL3vCEJrORUUb7mB1yKyEI8I8cuChv61QIDAQABo4IENjCC BDIwHQYDVR0OBBYEFDp9bpQivn1fASXCfOp2ApOv5mKwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 ZGM5NDZjZi1hM2QxLTRlN2YtOWU1OC03MDUyYjJkZWFjNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZkYzk0NmNmLWEzZDEtNGU3Zi05 ZTU4LTcwNTJiMmRlYWM2Yi82ZGM5NDZjZi1hM2QxLTRlN2YtOWU1OC03MDUyYjJk ZWFjNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXkJADBAEXpBADBAFooPQwDQQCAAIwBwMFACYF Z8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhJXMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGyyXAHWGTHZ 4WGAZr3LwLOioB5NAAjhUCYC3Pi/pMf3b12QO/VLxB1oxko4j0RCvUztfkyZiLiv P8U6EzZN7BSATJfbbRs/Hm/aGTVseG2k+JYl8jIyJB1zGcDBdlrn4GWgkTqXPzBS kQEWvZ2/AtWkto0nNYaaARJ43iVnjCmwk6JVfVuAuXjFOcJ2f3LAkxntjNBQiT0h ODJQl/WjaeYY1AFsn+HVmeB0N7hhQPEcZv6Mo9j5SISkjpLxIHUazXMiBulvB7lq g9xInROAQYiCkjftxOhCB3x23SLt4lMpZ9d8ZtRE+wvak91ajvz0Q7dE46oNs7KG LzEGNvWNCGY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:39 2025 by rpki-client