$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7d2a9ef3-f718-4e1e-b874-2ecc0077c063.cer File: 7d2a9ef3-f718-4e1e-b874-2ecc0077c063.cer (raw, json) Hash identifier: cQf2BM9sMMuGLM8HEkdSxSPiB55mRn/ll6fthIHkz1g= Subject key identifier: C8:33:92:B4:09:E6:BD:8F:98:B4:C3:9D:C9:8E:2A:2C:B6:FB:B2:7E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A527CC737F170D1DBC8B0A100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7d2a9ef3-f718-4e1e-b874-2ecc0077c063/7d2a9ef3-f718-4e1e-b874-2ecc0077c063.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7d2a9ef3-f718-4e1e-b874-2ecc0077c063/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Jun 2025 18:48:28 +0000 Certificate not after: Sat 05 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 25851 AS: 46393 AS: 63060 IP: 104.37.96.0/21 IP: 104.218.152.0/22 IP: 162.252.144.0/21 IP: 172.97.116.0/22 IP: 192.156.235.0/24 IP: 205.207.100.0/22 IP: 208.85.12.0/22 IP: 208.95.20.0/22 IP: 2602:ffdf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:7c:c7:37:f1:70:d1:db:c8:b0:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 26 18:48:28 2025 GMT Not After : Dec 5 01:45:27 2026 GMT Subject: CN=7d2a9ef3-f718-4e1e-b874-2ecc0077c063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:d3:1c:5d:16:fa:40:11:69:b0:41:71:bb: be:22:70:23:de:03:1e:c2:54:34:65:e7:8f:f9:0f: cb:6c:25:57:dc:d3:52:05:87:44:84:a9:79:84:69: 01:80:e4:5e:ff:1c:5d:26:de:a9:3b:6c:9c:73:29: b9:28:f8:b8:a5:2a:83:37:8c:6e:74:b9:37:07:84: 1e:8d:e4:12:9c:b2:9b:f2:ce:34:6a:77:28:d1:fe: da:f3:13:eb:13:b0:9c:17:cc:d6:cb:51:62:e4:94: 70:64:51:a1:24:3e:3e:82:b3:c2:e0:2b:b2:e9:34: 76:ee:1f:61:0a:fd:5b:11:09:70:20:ae:d9:dc:79: c6:5e:29:a1:d4:a1:99:f6:64:cc:a6:a2:d6:1c:69: 8e:5e:8c:ff:1d:56:df:59:02:2a:d3:49:84:c3:35: 6e:ca:89:73:76:77:1e:0a:ef:5a:8f:50:dc:1a:d3: 94:9f:29:73:6d:15:08:1d:7b:b3:ca:89:de:d7:64: c5:98:02:38:48:75:a2:d5:f9:a2:cd:79:20:48:19: 8c:10:e9:da:2f:a1:73:0b:d7:66:a1:19:cf:da:c0: 07:2c:98:10:e2:a6:70:d9:86:93:10:70:2d:c2:7a: 10:cc:bc:01:4a:a7:be:88:80:ca:7d:b7:1b:50:9e: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:92:B4:09:E6:BD:8F:98:B4:C3:9D:C9:8E:2A:2C:B6:FB:B2:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7d2a9ef3-f718-4e1e-b874-2ecc0077c063/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7d2a9ef3-f718-4e1e-b874-2ecc0077c063/7d2a9ef3-f718-4e1e-b874-2ecc0077c063.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.37.96.0/21 104.218.152.0/22 162.252.144.0/21 172.97.116.0/22 192.156.235.0/24 205.207.100.0/22 208.85.12.0/22 208.95.20.0/22 IPv6: 2602:ffdf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25851 46393 63060 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:20:cc:74:90:03:49:41:bd:75:df:26:a7:9b:3b:9a:f8:d8: 0c:a0:9f:74:5c:82:ca:10:83:da:eb:e8:f2:a7:44:96:e9:20: bd:a5:91:db:09:26:aa:2a:67:c5:9c:bf:b5:e2:ba:cf:3b:7c: c2:91:eb:3b:36:c4:bc:f8:bb:a7:ef:40:a0:2b:9b:e1:6e:bf: 5f:f8:a1:bf:54:fe:75:0e:a3:80:91:6d:7e:17:cd:8e:12:d3: 82:a5:fc:e9:b3:33:12:81:44:c7:06:03:aa:52:99:3f:65:04: 36:ed:c1:ac:69:3f:15:31:ac:26:db:ad:d5:8c:c1:4b:c7:bc: 3a:55:24:aa:21:24:a1:00:da:05:fe:f3:d7:6e:ed:8b:28:aa: 2b:60:7b:91:ac:75:be:5f:c7:a8:4c:95:31:c3:df:b7:af:db: 4a:90:a2:1e:57:19:65:b9:9c:2a:24:f3:74:19:17:83:4b:ff: 2a:d6:a1:4a:da:09:5d:b8:93:e7:03:06:f0:a0:6d:b0:d9:82: 33:12:a8:13:99:e0:51:52:9d:2e:18:6c:60:5b:11:16:dc:5f: 44:2d:10:81:80:a8:4d:f2:fa:d6:2a:8a:f9:8a:97:bd:77:47: 7b:45:e1:b5:8b:5e:08:12:3e:f2:f5:69:64:fd:f4:fd:f6:e2: f2:36:84:41 -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWEpSfMc38XDR28iwoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYyNjE4NDgyOFoXDTI2MTIwNTAxNDUyN1owLzEtMCsGA1UEAxMk N2QyYTllZjMtZjcxOC00ZTFlLWI4NzQtMmVjYzAwNzdjMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/THF0W+kARabBBcbu+InAj3gMewlQ0ZeeP +Q/LbCVX3NNSBYdEhKl5hGkBgORe/xxdJt6pO2yccym5KPi4pSqDN4xudLk3B4Qe jeQSnLKb8s40anco0f7a8xPrE7CcF8zWy1Fi5JRwZFGhJD4+grPC4Cuy6TR27h9h Cv1bEQlwIK7Z3HnGXimh1KGZ9mTMpqLWHGmOXoz/HVbfWQIq00mEwzVuyolzdnce Cu9aj1DcGtOUnylzbRUIHXuzyone12TFmAI4SHWi1fmizXkgSBmMEOnaL6FzC9dm oRnP2sAHLJgQ4qZw2YaTEHAtwnoQzLwBSqe+iIDKfbcbUJ7CnwIDAQABo4IEXjCC BFowHQYDVR0OBBYEFMgzkrQJ5r2PmLTDncmOKiy2+7J+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 ZDJhOWVmMy1mNzE4LTRlMWUtYjg3NC0yZWNjMDA3N2MwNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzdkMmE5ZWYzLWY3MTgtNGUxZS1i ODc0LTJlY2MwMDc3YzA2My83ZDJhOWVmMy1mNzE4LTRlMWUtYjg3NC0yZWNjMDA3 N2MwNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwWQYIKwYBBQUH AQcBAf8ESjBIMDYEAgABMDADBANoJWADBAJo2pgDBAOi/JADBAKsYXQDBADAnOsD BALNz2QDBALQVQwDBALQXxQwDgQCAAIwCAMGBCYC/98AMCMGCCsGAQUFBwEIAQH/ BBQwEqAQMA4CAmT7AgMAtTkCAwD2VDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbIMx0kANJQb113yanmzua +NgMoJ90XILKEIPa6+jyp0SW6SC9pZHbCSaqKmfFnL+14rrPO3zCkes7NsS8+Lun 70CgK5vhbr9f+KG/VP51DqOAkW1+F82OEtOCpfzpszMSgUTHBgOqUpk/ZQQ27cGs aT8VMawm263VjMFLx7w6VSSqISShANoF/vPXbu2LKKorYHuRrHW+X8eoTJUxw9+3 r9tKkKIeVxlluZwqJPN0GReDS/8q1qFK2glduJPnAwbwoG2w2YIzEqgTmeBRUp0u GGxgWxEW3F9ELRCBgKhN8vrWKor5ipe9d0d7ReG1i14IEj7y9Wlk/fT99uLyNoRB -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:56 2025 by rpki-client