$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer File: 6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer (raw, json) Hash identifier: /AOut5lkF4LHzOkDJQ22YcCVY2NpYIdgwbemBfiUTro= Subject key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A532E09D80BB5AC7E930B0AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Jun 2025 00:45:37 +0000 Certificate not after: Thu 30 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 54138 IP: 199.33.68.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:2e:09:d8:0b:b5:ac:7e:93:0b:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 27 00:45:37 2025 GMT Not After : Sep 30 00:45:37 2027 GMT Subject: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:dc:f8:a9:4d:d6:1a:93:1a:e0:dd:d7:87: ca:a8:37:74:18:16:4b:51:38:af:32:e4:5d:db:34: fb:5b:d2:21:9f:18:36:cb:50:a9:2b:b1:f9:5d:b2: f0:b5:8e:af:7e:ee:78:cd:6b:38:6d:a1:1e:b7:57: 3d:c3:cc:90:42:db:af:bf:32:6a:cf:c3:b6:b4:50: 03:9c:2a:72:a2:9d:87:cd:34:c4:61:29:ed:52:06: 61:92:ad:ff:99:42:03:e2:69:19:98:b4:1f:b5:e7: 51:49:02:9f:e8:46:dd:d8:e9:fb:9b:66:06:27:e4: e8:bf:76:01:91:4a:2f:ad:70:37:df:4d:6a:d6:3e: 15:23:54:bc:0f:21:17:9e:5e:b5:68:45:24:f9:b0: 0a:f9:c5:e4:ec:26:b6:37:7d:df:aa:ad:f7:aa:76: 48:b6:8f:1b:7e:26:fb:d9:67:dc:89:92:b4:d4:99: c8:29:7f:de:98:c0:89:32:7f:a9:2b:18:77:37:56: 1d:b8:df:9d:49:d0:94:5d:5e:1d:34:b4:1b:0a:37: 90:94:b4:8b:94:54:07:dc:ef:7e:59:4b:aa:bc:31: 21:30:b8:7e:38:b1:8f:cd:37:26:95:6b:f1:19:55: 78:6e:e6:6e:64:8f:66:95:b3:f2:01:25:a1:46:c5: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 199.33.68.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:aa:24:e8:19:7e:e0:bf:d3:9f:3c:1b:95:57:49:a9:57:2e: 68:9a:e8:7d:97:f5:2a:96:5a:1a:57:36:13:cd:25:7d:d9:79: 9e:db:d2:8e:85:34:03:77:c7:02:f4:83:47:41:e8:09:0a:21: f7:71:14:7e:f2:53:c8:72:42:af:8e:f6:44:8c:fb:c9:70:08: bb:4e:de:f0:97:fd:0b:5f:9b:86:35:ad:ed:72:61:ab:99:3d: 7a:cf:91:06:31:24:c4:e7:7f:52:56:09:4e:2f:8a:2d:59:a6: 5d:cf:03:82:0d:aa:da:4a:0a:1f:88:c8:d5:bf:57:e0:ec:ee: 72:48:bb:a9:77:9e:ca:45:52:d2:4f:30:73:77:20:8c:e5:86: 3f:1c:f2:79:f6:db:60:10:d9:5d:5c:c0:8f:67:a5:6c:5b:73: 83:45:a0:e6:bb:5b:c4:b7:da:81:2d:64:48:f0:1e:50:e3:8b: 69:58:c3:9c:de:a3:e3:db:36:3b:49:17:68:92:3b:1c:10:bc: 68:9f:eb:47:b7:ce:09:fe:dd:fb:18:d5:f1:1b:76:fe:f5:66: 7c:6a:1d:a1:44:9d:d9:13:50:26:99:98:c9:ba:da:2a:89:14: d6:dd:19:18:4b:bd:62:95:bd:7c:c4:a2:4a:cd:11:44:26:de: 3c:7d:ca:03 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpTLgnYC7WsfpMLCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYyNzAwNDUzN1oXDTI3MDkzMDAwNDUzN1owLzEtMCsGA1UEAxMk NmY2NGNjMjQtZWY2Mi00NDk4LWI5YWItOTY1Mzc1ZWEwZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKHc+KlN1hqTGuDd14fKqDd0GBZLUTivMuRd 2zT7W9Ihnxg2y1CpK7H5XbLwtY6vfu54zWs4baEet1c9w8yQQtuvvzJqz8O2tFAD nCpyop2HzTTEYSntUgZhkq3/mUID4mkZmLQftedRSQKf6Ebd2On7m2YGJ+Tov3YB kUovrXA3301q1j4VI1S8DyEXnl61aEUk+bAK+cXk7Ca2N33fqq33qnZIto8bfib7 2WfciZK01JnIKX/emMCJMn+pKxh3N1YduN+dSdCUXV4dNLQbCjeQlLSLlFQH3O9+ WUuqvDEhMLh+OLGPzTcmlWvxGVV4buZuZI9mlbPyASWhRsWilQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKlqmuM9Zg3EfMikAljY/RXhkGEPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 ZjY0Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUzNzVlYTBlOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzZmNjRjYzI0LWVmNjItNDQ5OC1i OWFiLTk2NTM3NWVhMGU4ZS82ZjY0Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUzNzVl YTBlOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHIUQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANN6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB+qJOgZfuC/0588G5VXSalXLmia6H2X9SqWWhpXNhPNJX3Z eZ7b0o6FNAN3xwL0g0dB6AkKIfdxFH7yU8hyQq+O9kSM+8lwCLtO3vCX/Qtfm4Y1 re1yYauZPXrPkQYxJMTnf1JWCU4vii1Zpl3PA4INqtpKCh+IyNW/V+Ds7nJIu6l3 nspFUtJPMHN3IIzlhj8c8nn222AQ2V1cwI9npWxbc4NFoOa7W8S32oEtZEjwHlDj i2lYw5zeo+PbNjtJF2iSOxwQvGif60e3zgn+3fsY1fEbdv71ZnxqHaFEndkTUCaZ mMm62iqJFNbdGRhLvWKVvXzEokrNEUQm3jx9ygM= -----END CERTIFICATE-----Generated at Thu Jul 3 07:52:38 2025 by rpki-client