$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer File: aed01dad-662c-4720-aaa5-ea3d024bad07.cer (raw, json) Hash identifier: OBWeni+HZkZy35fx4pQyPD2iYODHApv29RlFsduY3Cc= Subject key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AB2192F1F284E08AE3EB95380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 00:45:23 +0000 Certificate not after: Wed 03 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 400583 IP: 207.174.124.0/22 IP: 2602:fb86::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:19:2f:1f:28:4e:08:ae:3e:b9:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 31 00:45:23 2025 GMT Not After : Nov 3 00:45:23 2027 GMT Subject: CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:a5:40:1e:b6:d8:1a:46:49:c1:69:bf:8e: bf:f1:33:4e:e0:f9:d7:ba:f1:3d:31:76:c9:27:5d: 73:d5:34:8e:8c:5f:56:bf:79:31:cd:cd:2e:db:c3: 88:08:4d:68:72:21:ea:4e:dc:f0:79:18:53:af:48: 57:01:45:ef:70:95:49:7d:da:e4:e9:83:b1:d4:09: cd:de:85:d3:4f:aa:8a:93:62:c9:6f:d0:ba:4b:8d: cf:2b:99:64:86:76:7f:ec:5f:34:37:d7:ff:d9:99: f6:39:8b:63:9c:28:7f:f0:f0:a1:59:99:b5:40:dd: 11:72:2f:1b:42:b0:e4:a8:4f:4b:88:22:11:5b:c5: d2:c1:03:6e:58:0d:cd:6c:a6:84:75:b7:c0:a8:83: 44:f5:a2:38:96:71:2c:85:fd:c4:3f:f2:1c:d2:c4: c6:75:ad:99:d3:50:71:c1:74:93:ef:00:9f:e0:6c: 52:d0:a4:da:42:82:ae:eb:34:a3:83:24:35:71:89: fa:be:a2:31:c9:d6:da:4f:e0:26:91:9e:3e:ae:4d: 5b:18:d1:10:f2:fb:e2:70:f3:df:68:19:bb:d4:37: 74:a7:d0:ca:32:1b:d9:ae:17:78:10:67:c9:40:8c: 60:00:be:c3:bf:a4:f3:42:18:c0:aa:74:e8:ff:9f: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 207.174.124.0/22 IPv6: 2602:fb86::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400583 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7c:97:b7:12:42:b1:61:a3:57:d9:20:16:3b:68:3b:bb:75: 2a:1b:a5:8e:b2:f8:08:b4:d3:e8:11:d2:b9:b0:59:b0:d9:e5: 85:d0:b8:df:4a:db:6d:f4:f5:4d:f9:1b:a8:2c:39:be:a6:a6: 60:04:4f:7f:37:44:b4:93:8b:22:1a:e8:32:60:77:70:96:e7: 86:0f:75:58:55:a8:54:fd:2d:b6:42:6c:f8:cc:ac:42:cd:f2: 44:ce:36:eb:78:d9:44:1f:47:b1:4a:d2:e5:9c:cf:e7:c4:03: c0:00:e1:21:c3:65:47:59:ca:a9:60:af:a8:3f:f9:4a:eb:2f: b8:e8:ad:20:1d:eb:dc:d2:76:f1:69:ae:cc:fd:d2:83:66:fa: 61:d7:23:90:2e:e9:d6:e3:d4:47:10:67:16:65:72:e4:c4:bf: ed:3f:48:d2:f9:39:ca:64:0c:56:80:65:7a:51:74:d2:d6:9c: 7c:f6:8a:ea:1f:af:76:0a:57:1f:52:d4:eb:fa:4f:1b:48:5e: 35:82:a2:11:15:22:3c:3b:6c:ef:56:82:5f:54:8a:87:a3:68: 1a:bc:48:98:b9:d0:b1:7f:11:cf:c3:08:95:37:a6:24:81:20: f8:ea:40:2c:3b:72:e6:d6:dc:83:a9:e7:ac:9a:3e:5e:1c:55: b2:82:d5:5b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqyGS8fKE4Irj65U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDczMTAwNDUyM1oXDTI3MTEwMzAwNDUyM1owLzEtMCsGA1UEAxMk YWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJhZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWSlQB622BpGScFpv46/8TNO4PnXuvE9MXbJ J11z1TSOjF9Wv3kxzc0u28OICE1ociHqTtzweRhTr0hXAUXvcJVJfdrk6YOx1AnN 3oXTT6qKk2LJb9C6S43PK5lkhnZ/7F80N9f/2Zn2OYtjnCh/8PChWZm1QN0Rci8b QrDkqE9LiCIRW8XSwQNuWA3NbKaEdbfAqINE9aI4lnEshf3EP/Ic0sTGda2Z01Bx wXST7wCf4GxS0KTaQoKu6zSjgyQ1cYn6vqIxydbaT+AmkZ4+rk1bGNEQ8vvicPPf aBm71Dd0p9DKMhvZrhd4EGfJQIxgAL7Dv6TzQhjAqnTo/59bCwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK8o5fWCzOGV4wY5VFx57cd4pcVOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlZDAxZGFkLTY2MmMtNDcyMC1h YWE1LWVhM2QwMjRiYWQwNy9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0 YmFkMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALPrnwwDgQCAAIwCAMGBCYC+4YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAfJe3EkKxYaNX2SAWO2g7u3Uq G6WOsvgItNPoEdK5sFmw2eWF0LjfSttt9PVN+RuoLDm+pqZgBE9/N0S0k4siGugy YHdwlueGD3VYVahU/S22Qmz4zKxCzfJEzjbreNlEH0exStLlnM/nxAPAAOEhw2VH WcqpYK+oP/lK6y+46K0gHevc0nbxaa7M/dKDZvph1yOQLunW49RHEGcWZXLkxL/t P0jS+TnKZAxWgGV6UXTS1px89orqH692ClcfUtTr+k8bSF41gqIRFSI8O2zvVoJf VIqHo2gavEiYudCxfxHPwwiVN6YkgSD46kAsO3Lm1tyDqeesmj5eHFWygtVb -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:44 2025 by rpki-client