$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c223642e-4477-4d14-9c9a-4aa298909564.cer File: c223642e-4477-4d14-9c9a-4aa298909564.cer (raw, json) Hash identifier: UBTsO9C4TOMlva0+74D+MY3dFDusAQHamnL1vJIra0k= Subject key identifier: 16:BF:BC:BC:71:DA:A8:A4:40:61:83:FF:EA:32:50:68:7C:0D:27:97 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584ABD43EDF2789DB5E6BBAADA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c223642e-4477-4d14-9c9a-4aa298909564/c223642e-4477-4d14-9c9a-4aa298909564.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c223642e-4477-4d14-9c9a-4aa298909564/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 00:45:24 +0000 Certificate not after: Sun 07 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 399584 AS: 399832 IP: 23.170.65.0/24 IP: 2602:fea4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:43:ed:f2:78:9d:b5:e6:bb:aa:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 4 00:45:24 2025 GMT Not After : Nov 7 00:45:24 2027 GMT Subject: CN=c223642e-4477-4d14-9c9a-4aa298909564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:73:b5:c7:56:06:ff:bf:84:82:13:62:3f: 54:ad:ef:c0:f7:05:c6:af:ab:41:c9:b4:0f:c3:62: 77:16:7b:8b:45:51:86:15:e6:c9:93:b6:3c:1c:30: 33:7d:e2:2f:c0:98:28:fa:e6:df:95:07:d0:69:70: 83:4c:12:98:66:70:47:8b:ac:3a:69:90:f0:55:9d: 9c:a1:51:46:c2:0b:f9:30:e5:19:d8:15:cc:a7:ad: d0:cf:a4:3a:8d:ea:ad:a6:95:74:7f:ab:d1:f5:bb: d1:86:31:6f:b2:50:a8:d4:af:90:62:46:a2:8e:42: ae:65:b4:30:7c:01:50:73:98:d9:73:ad:d5:dc:77: eb:af:ad:a1:59:fa:16:c4:8b:1e:91:b3:d4:2e:8c: 78:78:b1:f9:98:67:97:5c:6d:1b:0f:3b:3f:fa:14: cf:1f:a2:c2:77:76:3d:6f:6d:86:ab:84:63:9a:e4: 4d:a6:4b:31:1d:ca:4d:6a:50:20:c8:43:38:77:64: 5b:f4:2c:04:c5:1c:67:e0:a0:46:cb:90:9c:0b:4c: 47:1a:15:c0:d7:39:83:28:36:78:db:67:0d:17:db: b9:92:89:13:fe:b7:b6:70:7d:8e:14:2c:b8:b5:e1: c4:9e:18:56:ad:a8:67:cd:d3:2d:73:28:a9:77:10: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:BC:BC:71:DA:A8:A4:40:61:83:FF:EA:32:50:68:7C:0D:27:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c223642e-4477-4d14-9c9a-4aa298909564/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c223642e-4477-4d14-9c9a-4aa298909564/c223642e-4477-4d14-9c9a-4aa298909564.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.170.65.0/24 IPv6: 2602:fea4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399584 399832 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:14:6c:d3:77:a1:03:17:2a:66:c5:e9:d2:5c:2c:f6:42:8c: 95:ab:f5:c9:f3:f0:f7:4a:55:82:48:f2:96:70:d2:65:7a:ce: 70:da:32:70:fb:22:01:f9:dc:85:49:28:2f:4b:ad:79:90:f1: 04:a8:a0:e9:f8:88:e5:dd:89:53:18:8e:37:99:56:ff:97:b1: 22:8f:2e:2d:32:b8:93:58:7c:22:a1:83:8f:c8:43:e5:6d:64: 05:55:78:4b:2e:5e:93:ca:e5:3d:24:2b:85:a4:62:e5:b6:e6: 4d:46:cd:07:ea:08:2c:da:2f:47:e2:b4:0b:3b:75:ed:5f:40: cc:d8:af:92:14:c1:13:56:44:2f:8e:cb:7f:47:23:7c:34:14: 7b:70:26:93:00:d3:4a:e4:fb:f7:e7:43:33:b4:c3:e4:b9:71: cd:46:a1:b5:a8:bf:4a:d4:b7:e5:77:19:b8:8d:4a:87:b4:83: 4d:18:fe:80:0b:f6:03:c1:4c:ad:51:fa:94:6e:ef:cb:0d:02: 96:36:d6:01:95:2d:bf:81:9a:f5:f8:79:4b:52:7a:ea:b2:5e: 30:a4:c7:f3:8d:e9:19:8b:f4:24:3b:7e:0d:27:ea:08:99:72: 72:4d:c7:63:d2:7e:2e:4c:99:68:71:0c:50:e5:17:8f:17:6d: 00:1c:a7:e1 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEq9Q+3yeJ215ruq2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgwNDAwNDUyNFoXDTI3MTEwNzAwNDUyNFowLzEtMCsGA1UEAxMk YzIyMzY0MmUtNDQ3Ny00ZDE0LTljOWEtNGFhMjk4OTA5NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bdztcdWBv+/hIITYj9Ure/A9wXGr6tBybQP w2J3FnuLRVGGFebJk7Y8HDAzfeIvwJgo+ubflQfQaXCDTBKYZnBHi6w6aZDwVZ2c oVFGwgv5MOUZ2BXMp63Qz6Q6jeqtppV0f6vR9bvRhjFvslCo1K+QYkaijkKuZbQw fAFQc5jZc63V3Hfrr62hWfoWxIsekbPULox4eLH5mGeXXG0bDzs/+hTPH6LCd3Y9 b22Gq4RjmuRNpksxHcpNalAgyEM4d2Rb9CwExRxn4KBGy5CcC0xHGhXA1zmDKDZ4 22cNF9u5kokT/re2cH2OFCy4teHEnhhWrahnzdMtcyipdxCb2wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBa/vLxx2qikQGGD/+oyUGh8DSeXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j MjIzNjQyZS00NDc3LTRkMTQtOWM5YS00YWEyOTg5MDk1NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2MyMjM2NDJlLTQ0NzctNGQxNC05 YzlhLTRhYTI5ODkwOTU2NC9jMjIzNjQyZS00NDc3LTRkMTQtOWM5YS00YWEyOTg5 MDk1NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqkEwDgQCAAIwCAMGBCYC/qQAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwYY4AIDBhnYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADcUbNN3oQMXKmbF6dJc LPZCjJWr9cnz8PdKVYJI8pZw0mV6znDaMnD7IgH53IVJKC9LrXmQ8QSooOn4iOXd iVMYjjeZVv+XsSKPLi0yuJNYfCKhg4/IQ+VtZAVVeEsuXpPK5T0kK4WkYuW25k1G zQfqCCzaL0fitAs7de1fQMzYr5IUwRNWRC+Oy39HI3w0FHtwJpMA00rk+/fnQzO0 w+S5cc1GobWov0rUt+V3GbiNSoe0g00Y/oAL9gPBTK1R+pRu78sNApY21gGVLb+B mvX4eUtSeuqyXjCkx/ON6RmL9CQ7fg0n6giZcnJNx2PSfi5MmWhxDFDlF48XbQAc p+E= -----END CERTIFICATE-----Generated at Sat Aug 23 18:21:44 2025 by rpki-client