$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer File: 1a059caa-dd4f-4480-a089-c3da1959a314.cer (raw, json) Hash identifier: JiO5BP0xADznZd0ZjYUQoqoh+gkJOjv9D/z2cZhM90M= Subject key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE9EEDFC0E98D1C5AB9C2CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 00:45:24 +0000 Certificate not after: Tue 23 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 397072 IP: 23.173.160.0/24 IP: 2602:fe09::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ee:df:c0:e9:8d:1c:5a:b9:c2:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 20 00:45:24 2025 GMT Not After : Nov 23 01:45:24 2027 GMT Subject: CN=1a059caa-dd4f-4480-a089-c3da1959a314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:45:eb:5b:c7:14:69:66:ed:33:f8:e8:92: a4:21:4d:18:db:a1:9b:95:c7:9c:83:b4:f7:73:de: e7:ac:98:6f:50:cb:5b:cd:a4:d9:fa:ef:36:51:a0: 7a:ab:8c:dd:a0:4f:b3:ef:03:69:cc:74:e5:d1:1a: ce:ff:2b:72:af:e0:c3:9a:69:10:b2:f8:cd:4c:c8: f3:9c:80:6e:01:1a:f7:89:e3:18:48:2e:2b:49:d2: 7b:10:fb:be:c4:35:ab:e9:df:5a:35:a1:c3:76:2f: 90:19:3a:f6:79:5f:b7:40:f8:d0:6c:6d:eb:8f:74: 2d:51:fd:cb:75:cf:cf:8e:41:b8:d9:4b:2c:ac:fa: 0e:b2:80:b8:64:81:0c:a3:cf:a9:72:da:53:c1:a5: 93:5c:b8:9a:0a:b5:7b:a1:af:2a:f2:20:f6:94:97: 34:74:8b:9a:72:55:94:32:37:81:a6:e9:68:f1:d6: 5c:35:07:d6:f0:eb:c9:cc:14:35:63:3b:dd:ac:2f: 66:f3:01:f3:d2:14:48:9c:28:1d:4a:0e:4a:71:d6: 0e:dc:29:56:61:b9:78:ef:ee:f0:4c:92:06:20:15: ef:35:28:0c:6f:94:16:04:bd:f7:36:f7:0e:33:92: 39:80:3d:90:55:44:7a:61:c1:c9:de:73:b7:d7:8e: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.173.160.0/24 IPv6: 2602:fe09::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:63:9e:a3:a5:fc:a3:6f:cb:67:25:e5:8f:f5:e7:45:47:29: ce:16:33:1f:ab:2d:d7:11:ee:52:72:71:25:21:d6:43:bf:0a: 24:05:16:a2:68:e7:28:ce:7a:d7:05:27:e0:1e:c0:08:4f:ce: 86:8a:84:f5:36:d4:47:c1:ea:5e:56:71:bb:70:51:ac:01:98: 00:7a:2b:1d:5d:08:bc:64:96:40:72:b4:98:2c:4f:18:64:ec: 22:b1:68:61:5f:98:19:05:bb:da:87:94:2c:25:c0:00:2e:dc: f6:37:eb:90:21:a1:18:c1:7d:1d:c2:9f:c5:94:cc:74:64:aa: e8:38:da:60:f3:28:65:47:59:04:96:3a:57:a0:c5:ed:a4:9d: 34:f4:45:55:7d:90:27:fd:ce:61:58:4d:90:b6:ba:b1:f9:61: 55:71:46:31:09:39:26:76:8d:8c:d1:4c:15:df:a6:a5:dc:db: 72:e1:81:1e:df:5e:05:ec:83:3d:57:a5:c8:ee:a3:57:6a:e3: 37:29:5e:2b:6f:0b:fc:dc:9f:76:64:88:94:53:b6:de:c2:c4: 0c:40:23:e5:57:be:04:99:19:5c:ea:f9:26:0e:bf:96:c8:8d: 73:31:fe:b2:c6:b8:c0:2e:1c:d0:db:dd:9f:44:7b:9d:75:d6: 51:09:8c:b1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErp7t/A6Y0cWrnCz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMDAwNDUyNFoXDTI3MTEyMzAxNDUyNFowLzEtMCsGA1UEAxMk MWEwNTljYWEtZGQ0Zi00NDgwLWEwODktYzNkYTE5NTlhMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdF61vHFGlm7TP46JKkIU0Y26Gblcecg7T3 c97nrJhvUMtbzaTZ+u82UaB6q4zdoE+z7wNpzHTl0RrO/ytyr+DDmmkQsvjNTMjz nIBuARr3ieMYSC4rSdJ7EPu+xDWr6d9aNaHDdi+QGTr2eV+3QPjQbG3rj3QtUf3L dc/PjkG42UssrPoOsoC4ZIEMo8+pctpTwaWTXLiaCrV7oa8q8iD2lJc0dIuaclWU MjeBpulo8dZcNQfW8OvJzBQ1YzvdrC9m8wHz0hRInCgdSg5KcdYO3ClWYbl47+7w TJIGIBXvNSgMb5QWBL33NvcOM5I5gD2QVUR6YcHJ3nO3146fCwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPRak2UzdKNnq6qO9xe0TUDt4rdCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x YTA1OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2RhMTk1OWEzMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFhMDU5Y2FhLWRkNGYtNDQ4MC1h MDg5LWMzZGExOTU5YTMxNC8xYTA1OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2RhMTk1 OWEzMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXraAwDgQCAAIwCAMGBCYC/gkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYPEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUY56jpfyjb8tnJeWP9edFRynO FjMfqy3XEe5ScnElIdZDvwokBRaiaOcoznrXBSfgHsAIT86GioT1NtRHwepeVnG7 cFGsAZgAeisdXQi8ZJZAcrSYLE8YZOwisWhhX5gZBbvah5QsJcAALtz2N+uQIaEY wX0dwp/FlMx0ZKroONpg8yhlR1kEljpXoMXtpJ009EVVfZAn/c5hWE2Qtrqx+WFV cUYxCTkmdo2M0UwV36al3Nty4YEe314F7IM9V6XI7qNXauM3KV4rbwv83J92ZIiU U7bewsQMQCPlV74EmRlc6vkmDr+WyI1zMf6yxrjALhzQ292fRHudddZRCYyx -----END CERTIFICATE-----Generated at Sat Aug 23 16:50:23 2025 by rpki-client