$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer File: c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer (raw, json) Hash identifier: Um9Vh9YIN/PbTEAGzTnMZHPn2cWbot4O15gZ3Ot0lGc= Subject key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EBB9D33E923D7B7F6949CE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 06:36:16 +0000 Certificate not after: Mon 24 May 2027 05:36:16 +0000 Subordinate resources: AS: 11759 IP: 23.133.132.0/24 IP: 2602:f70a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:b9:d3:3e:92:3d:7b:7f:69:49:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 06:36:16 2025 GMT Not After : May 24 05:36:16 2027 GMT Subject: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:98:50:c5:f4:b2:92:7b:93:cc:41:11:be: f4:2c:87:4c:6f:aa:77:8f:08:a5:ca:c8:67:9d:c8: 46:95:b0:47:a3:a4:ef:53:07:af:2d:a0:94:48:b5: cb:7f:2d:ca:91:ad:9d:66:12:be:9a:1f:29:42:4d: 4c:68:63:33:64:93:f5:3c:00:dc:6d:8c:46:50:f4: e9:b6:5d:21:fa:12:8b:e6:19:40:31:36:59:75:98: 4c:4f:53:2c:96:ed:84:04:20:57:6b:06:a1:c3:1a: d1:f3:2a:c5:14:9b:fa:dd:72:98:6f:66:8b:6e:d6: 43:15:d9:ea:0c:e2:31:6a:89:99:e7:2f:59:28:3e: 56:25:59:23:13:9b:00:f9:cf:b3:1f:0a:29:0d:11: 92:35:89:9e:e4:66:db:99:5b:74:a1:fd:4d:26:45: 94:31:ed:09:83:10:17:05:25:bb:53:64:60:2f:84: bf:3e:52:d0:99:4b:d8:a8:b9:4b:84:b5:b9:6c:24: 4b:2e:f3:4d:d2:8e:28:64:38:8d:ef:f1:7d:1a:ef: 4e:d2:ed:d0:41:9b:4c:a3:16:9c:3d:ea:e2:72:9c: 48:5f:fd:16:91:da:99:a2:a1:41:54:5a:05:86:c9: ed:c9:e1:d1:f4:72:39:bf:c8:32:61:58:b2:47:02: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 IPv6: 2602:f70a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11759 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3e:e4:ad:25:86:8e:f3:5a:bd:b3:d6:64:0a:ca:0a:ec:fd: 5f:5e:53:9b:29:bc:05:f9:a4:f9:8e:99:62:03:ab:24:24:c5: 19:dd:a8:11:ef:57:31:d5:dd:81:56:d5:12:8e:48:1e:e8:dd: 05:13:a0:dd:5c:6e:94:1a:bc:92:40:e6:fc:e8:21:94:19:79: 25:03:d9:85:3b:39:2d:3e:f7:e4:f5:9d:f0:02:d8:18:f0:2c: df:e1:8f:c5:c0:55:35:fb:e6:cc:4a:4e:dd:6e:d2:b4:56:23: 22:51:21:be:bb:d4:bd:1f:3f:9e:c2:d6:07:a4:0a:87:56:ca: 66:04:73:af:89:d2:af:9e:a6:90:7f:49:a6:31:70:ee:e4:e5: f7:38:23:ec:61:d3:d4:24:e2:4a:ef:a0:8e:44:3f:fb:7d:25: 30:34:0c:c0:36:d3:f0:4e:a3:fb:f7:79:d7:4c:e4:47:ef:55: 93:ac:59:87:ae:35:bb:f8:14:4b:b3:df:90:22:47:26:1f:38: f1:e3:56:e4:45:53:ea:80:85:01:8a:03:55:a1:66:63:e2:20: 94:23:86:28:7c:b7:65:c8:c7:de:53:59:87:3b:c2:5c:5a:46: 2d:2e:9f:3b:9f:58:d7:2a:eb:f9:4d:b7:2c:8c:8e:28:2a:3e: 66:8f:c7:dc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjrudM+kj17f2lJzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODA2MzYxNloXDTI3MDUyNDA1MzYxNlowLzEtMCsGA1UEAxMk YzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+WYUMX0spJ7k8xBEb70LIdMb6p3jwilyshn nchGlbBHo6TvUwevLaCUSLXLfy3Kka2dZhK+mh8pQk1MaGMzZJP1PADcbYxGUPTp tl0h+hKL5hlAMTZZdZhMT1Mslu2EBCBXawahwxrR8yrFFJv63XKYb2aLbtZDFdnq DOIxaomZ5y9ZKD5WJVkjE5sA+c+zHwopDRGSNYme5GbbmVt0of1NJkWUMe0JgxAX BSW7U2RgL4S/PlLQmUvYqLlLhLW5bCRLLvNN0o4oZDiN7/F9Gu9O0u3QQZtMoxac PericpxIX/0WkdqZoqFBVFoFhsntyeHR9HI5v8gyYViyRwJmOwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNsgAycehNE2o3VCDLBTb1IegNQbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j M2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2MzZjMyMTNmLWQ4ZDAtNGNmYy1h ZTRjLTRhNDU0NDViNmVjYS9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1 YjZlY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhYQwDgQCAAIwCAMGACYC9woAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi3vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFQ+5K0lho7zWr2z1mQKygrs/V9e U5spvAX5pPmOmWIDqyQkxRndqBHvVzHV3YFW1RKOSB7o3QUToN1cbpQavJJA5vzo IZQZeSUD2YU7OS0+9+T1nfAC2BjwLN/hj8XAVTX75sxKTt1u0rRWIyJRIb671L0f P57C1gekCodWymYEc6+J0q+eppB/SaYxcO7k5fc4I+xh09Qk4krvoI5EP/t9JTA0 DMA20/BOo/v3eddM5EfvVZOsWYeuNbv4FEuz35AiRyYfOPHjVuRFU+qAhQGKA1Wh ZmPiIJQjhih8t2XIx95TWYc7wlxaRi0unzufWNcq6/lNtyyMjigqPmaPx9w= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:19 2025 by rpki-client