$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer File: 641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer (raw, json) Hash identifier: 3we51XW1ey6ZjstX2A7StshtAYZquFUUqzDlyGj0zNk= Subject key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F46F82C874656D83D66373E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 09:28:48 +0000 Certificate not after: Thu 27 May 2027 08:28:48 +0000 Subordinate resources: AS: 14545 IP: 23.132.196.0/24 IP: 2602:f727::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:6f:82:c8:74:65:6d:83:d6:63:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 21 09:28:48 2025 GMT Not After : May 27 08:28:48 2027 GMT Subject: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:1b:d8:a5:ad:68:98:1d:4c:be:8f:6b:f8: 9e:0c:3d:68:64:aa:2a:73:b6:0c:21:d9:39:a9:eb: b8:28:c2:8b:f0:79:e8:ac:1a:64:d5:a2:c8:8b:a1: 93:ed:9c:fd:cd:16:fe:e5:ed:34:1d:9f:37:83:bd: 3b:2c:f5:c2:b9:a5:58:a4:e0:b1:38:b2:95:95:a9: 85:ee:65:ae:8a:8e:8a:2f:c7:c5:94:41:cb:13:21: 9e:40:62:5d:ff:44:89:f2:e0:0f:1f:ee:3e:1e:6d: 7f:aa:38:01:c6:e9:51:82:4f:66:a6:4a:8d:a9:7f: 59:7c:5c:56:19:0b:95:2d:bd:77:6c:30:13:11:10: a6:53:8a:77:2a:99:21:79:07:30:46:fd:2b:4a:ad: 42:83:34:b7:ee:c8:37:04:c7:77:45:c8:9f:bb:13: 4f:31:91:98:33:3d:42:fb:ec:a7:15:86:e0:8a:e3: ca:ba:c1:e4:46:8b:a9:52:dd:af:10:5a:15:ea:a8: 3d:04:b8:97:56:d5:5b:e7:36:b8:52:9b:86:f0:5f: 0c:3a:57:d8:cb:69:ce:89:45:99:d2:ea:74:5d:78: 77:c1:64:af:d9:07:9a:a3:20:eb:a0:43:33:f6:96: a8:09:04:d4:f4:e7:3c:12:56:10:0a:48:22:cc:a7: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.196.0/24 IPv6: 2602:f727::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14545 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:51:3d:3f:3f:59:ae:95:e0:18:37:08:81:03:13:ae:1d:50: 2c:a4:51:a5:ce:ca:fc:15:50:97:28:a5:da:4e:37:da:c7:98: df:aa:a2:8f:e0:a2:f3:d2:c1:8f:30:9c:81:69:e3:ae:63:43: aa:3d:f2:34:04:74:c4:08:c1:9e:ac:62:3d:60:4e:45:0f:a2: 8a:4b:0b:73:9f:f9:92:d7:1c:d4:23:0f:34:b9:61:20:ee:00: 42:72:8a:a3:b3:de:7c:14:e0:09:fc:9d:6b:e4:2f:3b:2b:00: fc:cc:11:c8:b1:6c:ee:5c:cc:58:25:76:5e:e8:fb:b8:01:eb: c0:9a:e9:ec:52:f0:36:a8:78:a6:36:49:41:b1:20:85:ac:94: b9:88:ef:63:6e:52:9b:1e:ee:b5:5f:fd:cb:5c:69:84:1f:ed: f7:83:14:77:3a:d0:13:d5:13:5e:e3:9a:79:31:a5:53:78:eb: 88:ec:e6:7d:30:72:b9:8d:7d:71:e0:b9:20:0f:1a:65:9e:0f: 1b:83:5a:18:3d:50:9f:2e:5d:64:28:72:db:d4:f5:f3:c1:14: 76:8d:6d:80:e4:7f:82:13:2a:cb:73:31:50:db:60:63:bc:53: 39:91:24:fe:38:5c:d0:26:9e:bd:e9:48:04:8e:d1:0d:f8:6f: 83:38:d1:e5 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEj0b4LIdGVtg9Zjc+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMTA5Mjg0OFoXDTI3MDUyNzA4Mjg0OFowLzEtMCsGA1UEAxMk NjQxMTUxZjEtZDA2YS00ZWQ5LWEwNmUtN2Q5ZTBlODk3Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hgb2KWtaJgdTL6Pa/ieDD1oZKoqc7YMIdk5 qeu4KMKL8HnorBpk1aLIi6GT7Zz9zRb+5e00HZ83g707LPXCuaVYpOCxOLKVlamF 7mWuio6KL8fFlEHLEyGeQGJd/0SJ8uAPH+4+Hm1/qjgBxulRgk9mpkqNqX9ZfFxW GQuVLb13bDATERCmU4p3KpkheQcwRv0rSq1CgzS37sg3BMd3RcifuxNPMZGYMz1C ++ynFYbgiuPKusHkRoupUt2vEFoV6qg9BLiXVtVb5za4UpuG8F8MOlfYy2nOiUWZ 0up0XXh3wWSv2QeaoyDroEMz9paoCQTU9Oc8ElYQCkgizKd0eQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAbjSLoq87V8SeX9JNETiJkaBVq5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 NDExNTFmMS1kMDZhLTRlZDktYTA2ZS03ZDllMGU4OTdiOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY0MTE1MWYxLWQwNmEtNGVkOS1h MDZlLTdkOWUwZTg5N2I5NC82NDExNTFmMS1kMDZhLTRlZDktYTA2ZS03ZDllMGU4 OTdiOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhMQwDgQCAAIwCAMGACYC9ycAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjjRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ1RPT8/Wa6V4Bg3CIEDE64dUCyk UaXOyvwVUJcopdpON9rHmN+qoo/govPSwY8wnIFp465jQ6o98jQEdMQIwZ6sYj1g TkUPoopLC3Of+ZLXHNQjDzS5YSDuAEJyiqOz3nwU4An8nWvkLzsrAPzMEcixbO5c zFgldl7o+7gB68Ca6exS8DaoeKY2SUGxIIWslLmI72NuUpse7rVf/ctcaYQf7feD FHc60BPVE17jmnkxpVN464js5n0wcrmNfXHguSAPGmWeDxuDWhg9UJ8uXWQoctvU 9fPBFHaNbYDkf4ITKstzMVDbYGO8UzmRJP44XNAmnr3pSASO0Q34b4M40eU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:11 2025 by rpki-client