$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer File: f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer (raw, json) Hash identifier: YIKrW0fij81gnCoLsTqO8UoYlDAJYTF4KHK56OAiEHg= Subject key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A962E73D700409217912801D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 00:45:37 +0000 Certificate not after: Sun 24 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 399240 IP: 206.168.160.0/22 IP: 2607:30c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:2e:73:d7:00:40:92:17:91:28:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 21 00:45:37 2025 GMT Not After : Oct 24 00:45:37 2027 GMT Subject: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:97:60:06:a0:55:76:fb:3c:0b:2c:a2:45: dd:c1:9a:a8:00:f2:9a:d0:4b:d9:68:a2:b2:fa:c7: 83:67:fa:04:8f:e1:11:06:95:b3:c7:9f:dc:87:3d: 32:73:5b:85:ca:46:3c:36:07:d3:e5:7d:e7:70:f6: a7:4d:49:15:be:a9:5e:a0:37:8f:d3:f9:ff:55:a6: 01:3e:53:fa:f5:2a:1e:63:c4:0e:7c:6d:37:d3:6b: a5:cb:a2:48:86:30:3b:0d:cb:f7:dd:cd:1e:29:ad: 80:c6:35:0d:60:04:7f:61:38:60:2e:89:73:19:d9: 3d:72:11:d5:69:b2:a2:89:50:ea:fd:4d:80:a9:4a: f9:d6:2e:fc:de:05:e3:2d:77:3c:15:7b:d9:c8:8f: 59:29:81:c5:e3:a2:45:cc:86:28:0e:ff:7f:5c:8c: 7a:47:bf:02:32:f7:76:9a:19:26:63:11:ac:2c:61: 87:e5:8c:d1:69:9e:98:67:87:70:39:60:d8:01:fb: 44:f5:a3:04:b6:6e:0f:89:97:0f:71:7a:3a:ee:97: 09:d7:29:8a:87:61:1c:54:f2:b7:7d:50:7b:63:76: 65:c5:a0:c7:3e:d5:61:2b:c9:2d:6f:aa:ed:e1:5d: 9f:e9:17:05:7e:f5:81:c0:df:f6:9c:2f:a6:77:e4: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.160.0/22 IPv6: 2607:30c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399240 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0b:56:02:da:53:50:ad:a2:2c:76:13:ee:01:97:b8:c0:fa: 41:95:78:74:f2:44:5c:55:2d:e7:f7:ea:77:fe:7d:3a:67:4d: 84:90:70:cd:ee:83:db:16:74:db:78:f7:6e:70:d0:d4:64:31: d7:06:e0:7f:43:cf:52:99:6e:be:d6:d7:98:6d:0e:15:02:47: 09:55:8f:f3:8b:01:70:fa:cc:e7:76:53:c8:12:9f:d0:97:dd: f9:d7:7d:b2:43:ca:b4:58:e7:8b:1d:a8:64:67:78:d1:89:9f: f1:e9:35:01:14:89:20:90:8b:9d:d7:41:3a:02:8f:83:23:75: 3b:cf:de:a5:d2:fc:6a:a1:6b:cb:9c:b7:09:1c:93:16:48:9c: 4d:c8:a2:55:1e:cb:84:24:a5:32:58:1b:21:41:6c:ea:b8:7f: ff:16:18:d5:46:90:7c:1c:ff:c3:ad:56:62:a3:70:dc:4d:d4: 95:f4:aa:bc:82:b3:d5:0f:49:a1:12:99:a3:44:29:53:5c:5c: 51:a6:72:6d:c8:86:a5:f2:46:e6:91:b6:9f:3f:e7:4a:1b:c0: 83:1b:11:28:b9:b8:64:8f:e7:08:6a:d1:8a:e1:66:fd:0b:47: 5b:72:d9:02:df:03:17:dd:84:1b:8e:89:b8:6b:90:33:08:48: bd:5d:89:71 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEqWLnPXAECSF5EoAdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcyMTAwNDUzN1oXDTI3MTAyNDAwNDUzN1owLzEtMCsGA1UEAxMk ZjI2MzZhMWMtYzE0Mi00MWVlLTlmNDMtOTlmNDVjYTJkYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK+XYAagVXb7PAssokXdwZqoAPKa0EvZaKKy +seDZ/oEj+ERBpWzx5/chz0yc1uFykY8NgfT5X3ncPanTUkVvqleoDeP0/n/VaYB PlP69SoeY8QOfG0302uly6JIhjA7Dcv33c0eKa2AxjUNYAR/YThgLolzGdk9chHV abKiiVDq/U2AqUr51i783gXjLXc8FXvZyI9ZKYHF46JFzIYoDv9/XIx6R78CMvd2 mhkmYxGsLGGH5YzRaZ6YZ4dwOWDYAftE9aMEtm4PiZcPcXo67pcJ1ymKh2EcVPK3 fVB7Y3ZlxaDHPtVhK8ktb6rt4V2f6RcFfvWBwN/2nC+md+QPRQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGpz7dF9d7zBgIpGSf/O1rZo9dVwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m MjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNhMmRjMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YyNjM2YTFjLWMxNDItNDFlZS05 ZjQzLTk5ZjQ1Y2EyZGMxZC9mMjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNh MmRjMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALOqKAwDQQCAAIwBwMFACYHMMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBheIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADsLVgLaU1Ctoix2E+4Bl7jA+kGV eHTyRFxVLef36nf+fTpnTYSQcM3ug9sWdNt4925w0NRkMdcG4H9Dz1KZbr7W15ht DhUCRwlVj/OLAXD6zOd2U8gSn9CX3fnXfbJDyrRY54sdqGRneNGJn/HpNQEUiSCQ i53XQToCj4MjdTvP3qXS/Gqha8uctwkckxZInE3IolUey4QkpTJYGyFBbOq4f/8W GNVGkHwc/8OtVmKjcNxN1JX0qryCs9UPSaESmaNEKVNcXFGmcm3IhqXyRuaRtp8/ 50obwIMbESi5uGSP5whq0YrhZv0LR1ty2QLfAxfdhBuOibhrkDMISL1diXE= -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:45 2025 by rpki-client