$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369.cer File: e112354e-4ef2-4d4c-ae1d-c77a6f0dc369.cer (raw, json) Hash identifier: CvUVy2bBrKl91n8UyQe2Ib9eNJSTb2MhbykE9ZFdGzo= Subject key identifier: 8F:E4:AD:C7:90:7B:8D:B9:66:A9:58:8B:26:68:85:F5:74:3B:9B:81 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849AD2E5F5F0100370BA719C500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 13:42:06 +0000 Certificate not after: Sun 01 Aug 2027 13:42:06 +0000 Subordinate resources: AS: 396004 IP: 23.160.232.0/24 IP: 161.129.20.0/23 IP: 2607:6140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:2e:5f:5f:01:00:37:0b:a7:19:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 13:42:06 2025 GMT Not After : Aug 1 13:42:06 2027 GMT Subject: CN=e112354e-4ef2-4d4c-ae1d-c77a6f0dc369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:18:5f:2d:ba:ff:34:1b:74:93:52:e5:c5: 4a:8c:3f:a0:12:00:0b:4f:67:d1:5c:8b:a0:a6:50: 40:e0:f3:82:3b:90:17:4d:cc:21:bb:ef:03:c0:a9: cd:02:a2:08:38:71:f6:59:8c:84:cc:0d:aa:c3:0a: b9:13:87:60:6b:67:21:0c:12:96:ce:a5:11:73:cb: 05:f3:cb:00:8e:41:e8:01:ee:88:11:34:6e:d0:bf: 1d:ab:6a:64:76:cc:f2:1d:b7:d5:c8:fb:11:53:0a: 1f:64:08:50:4c:7f:2a:0b:e5:02:c3:5f:8b:3a:53: 60:68:c0:2e:b7:68:b0:68:ce:4a:90:82:ee:e6:e5: 5c:16:c9:7f:c4:30:0f:3c:c4:8c:19:5d:0e:5f:d2: a8:5b:39:ca:00:00:b4:79:5a:a5:52:fd:aa:d9:9a: 24:14:ad:e3:10:6a:83:df:b1:a3:58:7a:05:56:cd: b4:b0:fe:3e:25:1e:0b:d0:2a:81:aa:a9:3b:c8:3f: 86:fe:6c:cd:6d:c0:af:ab:fa:81:1c:a1:96:3e:d3: 63:2f:85:15:17:b0:db:53:b2:8b:d9:27:0e:bf:a1: 4e:fd:d4:37:d2:91:2e:0b:5b:ba:89:ea:13:82:55: e3:95:38:ab:3e:d6:35:d5:40:01:ac:09:3a:a8:9b: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:AD:C7:90:7B:8D:B9:66:A9:58:8B:26:68:85:F5:74:3B:9B:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369/e112354e-4ef2-4d4c-ae1d-c77a6f0dc369.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.160.232.0/24 161.129.20.0/23 IPv6: 2607:6140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396004 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:48:02:fb:09:4b:05:6a:a2:5f:00:c6:c5:f3:43:10:02:99: 7e:74:f8:e4:15:39:2a:36:49:e5:fd:be:be:88:48:8d:b6:71: 1b:b9:0e:c1:66:73:6f:d0:bf:a6:46:0b:d7:06:c4:f7:74:6a: 13:fb:35:6e:df:fe:27:af:ca:87:31:2b:9a:dd:78:0a:e0:41: 51:c3:ea:52:0b:d3:ad:89:ba:05:17:1d:8b:50:6e:0b:41:5c: 93:27:69:e4:50:1e:f5:c4:29:32:57:3e:5f:d8:e4:7e:32:1c: 1e:96:64:1c:42:a9:74:62:79:e6:e9:d9:5c:e7:5e:4d:f6:ec: ba:be:44:25:81:8d:0d:ae:b0:ce:75:55:92:13:e2:6e:3b:80: 45:56:1a:41:5a:0a:b4:89:9b:3a:6e:9e:d4:4a:18:22:3e:0f: b5:17:f4:61:2a:10:b1:1e:24:fc:08:e1:00:7f:c9:6b:59:fc: 9f:e2:1f:4a:34:35:f7:01:0d:e5:e0:8f:2e:c9:d3:ef:6e:09: 0b:41:68:ed:64:71:ba:08:41:6d:9e:02:09:49:0d:2b:d2:ef: 3e:25:0c:40:f9:c0:76:4a:95:1e:7f:31:68:e3:80:af:90:3d: 70:3f:71:06:d5:cc:9b:f1:b7:11:0b:3a:d9:d5:b9:17:f3:c0: de:38:93:0a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEmtLl9fAQA3C6cZxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODEzNDIwNloXDTI3MDgwMTEzNDIwNlowLzEtMCsGA1UEAxMk ZTExMjM1NGUtNGVmMi00ZDRjLWFlMWQtYzc3YTZmMGRjMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kYXy26/zQbdJNS5cVKjD+gEgALT2fRXIug plBA4POCO5AXTcwhu+8DwKnNAqIIOHH2WYyEzA2qwwq5E4dga2chDBKWzqURc8sF 88sAjkHoAe6IETRu0L8dq2pkdszyHbfVyPsRUwofZAhQTH8qC+UCw1+LOlNgaMAu t2iwaM5KkILu5uVcFsl/xDAPPMSMGV0OX9KoWznKAAC0eVqlUv2q2ZokFK3jEGqD 37GjWHoFVs20sP4+JR4L0CqBqqk7yD+G/mzNbcCvq/qBHKGWPtNjL4UVF7DbU7KL 2ScOv6FO/dQ30pEuC1u6ieoTglXjlTirPtY11UABrAk6qJsf6QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFI/krceQe425ZqlYiyZohfV0O5uBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MTEyMzU0ZS00ZWYyLTRkNGMtYWUxZC1jNzdhNmYwZGMzNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UxMTIzNTRlLTRlZjItNGQ0Yy1h ZTFkLWM3N2E2ZjBkYzM2OS9lMTEyMzU0ZS00ZWYyLTRkNGMtYWUxZC1jNzdhNmYw ZGMzNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXoOgDBAGhgRQwDQQCAAIwBwMFACYHYUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgrkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADlIAvsJSwVqol8AxsXz QxACmX50+OQVOSo2SeX9vr6ISI22cRu5DsFmc2/Qv6ZGC9cGxPd0ahP7NW7f/iev yocxK5rdeArgQVHD6lIL062JugUXHYtQbgtBXJMnaeRQHvXEKTJXPl/Y5H4yHB6W ZBxCqXRieebp2VznXk327Lq+RCWBjQ2usM51VZIT4m47gEVWGkFaCrSJmzpuntRK GCI+D7UX9GEqELEeJPwI4QB/yWtZ/J/iH0o0NfcBDeXgjy7J0+9uCQtBaO1kcboI QW2eAglJDSvS7z4lDED5wHZKlR5/MWjjgK+QPXA/cQbVzJvxtxELOtnVuRfzwN44 kwo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:08 2025 by rpki-client