$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5.cer File: 247878e6-bf13-46a9-bbca-d4574efc3fb5.cer (raw, json) Hash identifier: YaH6pJbPOovbnZX9KFTu3PQdjeEJxpUh1SLuq7w4z34= Subject key identifier: FD:15:60:46:05:23:A5:89:5F:EC:83:AD:3C:A8:CF:3E:03:89:04:40 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EB9C3A35662B4BF20200A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/247878e6-bf13-46a9-bbca-d4574efc3fb5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 05:36:38 +0000 Certificate not after: Mon 24 May 2027 04:36:38 +0000 Subordinate resources: IP: 23.134.4.0/24 IP: 2602:f6fd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:9c:3a:35:66:2b:4b:f2:02:00:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 05:36:38 2025 GMT Not After : May 24 04:36:38 2027 GMT Subject: CN=247878e6-bf13-46a9-bbca-d4574efc3fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:a3:c2:e5:d7:be:00:cd:0d:03:43:2b:37: 31:fb:18:d2:22:ba:f1:da:0e:b4:90:08:42:7e:25: 82:51:d7:85:f1:ec:51:39:02:fd:f4:f6:65:1c:dc: d6:9c:9f:40:ff:03:e0:56:97:3a:04:bf:1e:84:b1: 6c:81:dc:1b:45:13:bd:7c:99:d4:69:44:06:83:82: 83:f1:40:c5:6f:64:2a:52:be:46:b2:9d:d5:59:4e: 07:7b:42:1c:22:d0:ec:a9:6f:de:2c:3e:a4:80:04: 88:8e:e8:e9:52:d6:92:9e:68:06:36:df:fc:3d:05: bb:2a:e7:ac:f3:68:0f:9e:47:79:10:e6:34:b8:81: 11:f9:52:08:b1:0b:8f:c7:c0:df:55:ca:05:49:62: 4d:0e:d4:a2:79:74:f1:43:52:b4:55:0a:ea:46:b6: 84:23:dd:11:11:ce:ff:a9:56:22:31:d1:57:81:7e: b2:26:7c:ee:5a:c8:87:be:a5:c1:e6:a0:77:38:9a: 0c:d7:cf:96:1c:84:d5:15:82:10:41:33:3f:1a:22: fd:f9:0c:3d:9e:b3:da:b5:bf:74:f3:90:e3:5e:8e: 25:97:cf:6e:1e:46:db:5f:1c:83:dd:99:68:d6:dc: a1:c1:21:b0:05:7f:3b:f0:24:5a:09:12:b6:c4:df: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:15:60:46:05:23:A5:89:5F:EC:83:AD:3C:A8:CF:3E:03:89:04:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/247878e6-bf13-46a9-bbca-d4574efc3fb5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.4.0/24 IPv6: 2602:f6fd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:80:81:7a:01:46:18:ac:9b:74:34:e0:d9:9b:e9:92:5d:b7: 99:d8:32:38:44:38:30:a3:ab:b7:6a:a5:da:38:4b:ae:6a:d4: 1e:e9:24:0e:9e:16:88:be:fc:22:00:d5:c7:9f:73:4c:c1:79: 29:bb:92:b5:3a:96:e0:34:ab:80:9b:58:bb:ca:b3:b0:fb:b3: 7d:80:9d:64:c5:d9:6f:4a:93:a4:ee:1e:b3:93:d3:63:6b:21: f7:fb:4f:b3:90:fa:df:75:88:7e:f8:bb:b3:c4:91:94:48:7c: 3d:44:df:5e:d9:88:8c:86:f1:4f:90:65:17:a2:db:ad:a2:be: 36:6c:18:d2:f6:f3:a7:41:2c:ce:f6:26:38:57:c5:8a:ff:25: e3:39:44:91:60:5f:00:7b:6b:1f:d5:8e:6c:19:9f:35:9c:61: 67:7f:9f:4a:95:be:f5:d9:91:ed:b6:f7:3f:75:39:b3:8d:dc: ff:b5:98:cf:46:6b:e2:01:b3:4e:14:23:2c:55:7d:77:26:02: 87:49:da:f0:03:b3:f5:78:86:b2:69:20:44:dd:4e:03:e0:89: 90:f9:99:7a:ad:06:22:77:84:04:12:32:05:1d:13:ba:4f:96: 10:50:ef:8b:5d:b7:8a:66:d2:55:4d:b9:80:5d:c5:75:7e:09: 91:b7:4c:c9 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjrnDo1ZitL8gIAqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODA1MzYzOFoXDTI3MDUyNDA0MzYzOFowLzEtMCsGA1UEAxMk MjQ3ODc4ZTYtYmYxMy00NmE5LWJiY2EtZDQ1NzRlZmMzZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVWjwuXXvgDNDQNDKzcx+xjSIrrx2g60kAhC fiWCUdeF8exROQL99PZlHNzWnJ9A/wPgVpc6BL8ehLFsgdwbRRO9fJnUaUQGg4KD 8UDFb2QqUr5Gsp3VWU4He0IcItDsqW/eLD6kgASIjujpUtaSnmgGNt/8PQW7Kues 82gPnkd5EOY0uIER+VIIsQuPx8DfVcoFSWJNDtSieXTxQ1K0VQrqRraEI90REc7/ qVYiMdFXgX6yJnzuWsiHvqXB5qB3OJoM18+WHITVFYIQQTM/GiL9+Qw9nrPatb90 85DjXo4ll89uHkbbXxyD3Zlo1tyhwSGwBX878CRaCRK2xN8IswIDAQABo4IEDzCC BAswHQYDVR0OBBYEFP0VYEYFI6WJX+yDrTyozz4DiQRAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NDc4NzhlNi1iZjEzLTQ2YTktYmJjYS1kNDU3NGVmYzNmYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI0Nzg3OGU2LWJmMTMtNDZhOS1i YmNhLWQ0NTc0ZWZjM2ZiNS8yNDc4NzhlNi1iZjEzLTQ2YTktYmJjYS1kNDU3NGVm YzNmYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhgQwDgQCAAIwCAMGACYC9v0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKiAgXoBRhism3Q04Nmb6ZJdt5nYMjhEODCjq7dqpdo4S65q1B7pJA6eFoi+/CIA 1cefc0zBeSm7krU6luA0q4CbWLvKs7D7s32AnWTF2W9Kk6TuHrOT02NrIff7T7OQ +t91iH74u7PEkZRIfD1E317ZiIyG8U+QZRei262ivjZsGNL286dBLM72JjhXxYr/ JeM5RJFgXwB7ax/VjmwZnzWcYWd/n0qVvvXZke229z91ObON3P+1mM9Ga+IBs04U IyxVfXcmAodJ2vADs/V4hrJpIETdTgPgiZD5mXqtBiJ3hAQSMgUdE7pPlhBQ74td t4pm0lVNuYBdxXV+CZG3TMk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:23:10 2025 by rpki-client