$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer File: 34a5694e-eed6-4612-aff2-ae9f369f1738.cer (raw, json) Hash identifier: vcl2PQ1zJi8ejVgwoPayH4zDWcFY9XI+meNxcuKDpcc= Subject key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE9EEDFA4AFC80FD3391A77D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 00:45:24 +0000 Certificate not after: Tue 23 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 397861 IP: 67.158.59.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ee:df:a4:af:c8:0f:d3:39:1a:77:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 20 00:45:24 2025 GMT Not After : Nov 23 01:45:24 2027 GMT Subject: CN=34a5694e-eed6-4612-aff2-ae9f369f1738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:22:24:39:15:d7:0d:89:3e:23:4c:6d:16: e3:da:0b:a5:f1:c8:a4:05:59:c2:30:28:51:e1:ef: 10:f8:78:b9:02:cd:82:1e:88:8a:ab:08:55:39:c5: 43:c2:10:22:33:a3:2c:b9:2d:ed:0f:d0:69:45:1d: 32:97:29:de:6d:12:ee:37:0e:bc:be:bd:11:f9:d6: da:1c:9e:89:06:5c:90:c5:30:ef:01:94:9d:f9:e7: e6:0d:ea:cc:65:fc:bc:98:50:68:51:d1:ae:f0:78: 32:c9:89:28:ae:b6:eb:d6:76:4e:1f:2f:3b:34:64: 10:51:63:e2:5e:52:aa:32:2b:d2:64:dc:6d:42:a6: ac:b6:e9:d9:22:e5:97:1a:c7:cf:cd:1b:64:a3:5f: e9:49:04:a7:ad:c3:44:06:63:6e:02:c3:0e:26:73: 83:9c:df:86:7f:b6:8a:c8:62:36:e7:9a:96:cb:55: 2d:20:ab:b4:45:2a:cb:7a:00:c4:8b:99:18:87:09: f3:92:c8:b7:4d:d4:b1:59:8c:de:f5:fb:f0:de:29: 15:06:a2:e5:8f:22:cf:bf:93:b8:ad:33:a9:3e:b0: 25:84:94:e1:ca:45:99:40:47:da:49:43:3d:9d:b2: 2e:fc:2e:21:35:51:4d:6c:f2:7d:ca:18:c3:42:11: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 67.158.59.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397861 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1b:6f:6e:86:ae:b1:26:91:ef:01:aa:50:12:d1:39:29:57: d0:48:a1:6d:50:4b:c2:16:0b:4f:f3:a2:78:d8:57:13:83:1a: 57:42:f8:03:ec:79:00:e1:d3:7a:b8:2c:34:62:20:1d:83:09: 15:66:79:41:05:5b:e9:1e:a1:69:76:7f:24:27:45:d5:e4:cb: c0:32:e9:d5:d6:d4:ee:05:4a:34:3e:bb:eb:39:48:0e:41:8f: 40:4f:2a:3c:58:30:79:80:76:36:cc:69:04:4f:ac:4a:67:7c: 9b:79:5a:a8:a6:eb:77:21:d5:11:0b:f0:34:2f:f9:36:af:6b: b2:93:2b:c9:48:5a:07:78:2c:4b:05:63:2c:e3:ef:01:16:49: 4a:82:7c:a4:f2:65:31:05:ab:d9:4a:63:f1:82:21:86:b0:b8: 5d:06:4d:c9:87:14:0f:ee:db:1d:0a:56:25:4b:18:5d:ee:41: 53:96:8c:79:44:0b:9a:6b:f9:08:7b:8f:e6:09:ea:64:43:ba: af:a1:fa:5c:29:72:5f:9c:93:ad:90:6f:1f:e9:a2:bc:cb:ba: 68:1f:97:e8:b5:ed:86:53:f8:36:8f:21:92:04:d0:e2:43:d8: 57:37:ab:84:66:73:d6:65:39:b0:cb:57:0c:35:74:4d:55:ab: ac:c1:39:04 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErp7t+kr8gP0zkad9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMDAwNDUyNFoXDTI3MTEyMzAxNDUyNFowLzEtMCsGA1UEAxMk MzRhNTY5NGUtZWVkNi00NjEyLWFmZjItYWU5ZjM2OWYxNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiysiJDkV1w2JPiNMbRbj2gul8cikBVnCMChR 4e8Q+Hi5As2CHoiKqwhVOcVDwhAiM6MsuS3tD9BpRR0ylynebRLuNw68vr0R+dba HJ6JBlyQxTDvAZSd+efmDerMZfy8mFBoUdGu8HgyyYkorrbr1nZOHy87NGQQUWPi XlKqMivSZNxtQqastunZIuWXGsfPzRtko1/pSQSnrcNEBmNuAsMOJnODnN+Gf7aK yGI255qWy1UtIKu0RSrLegDEi5kYhwnzksi3TdSxWYze9fvw3ikVBqLljyLPv5O4 rTOpPrAlhJThykWZQEfaSUM9nbIu/C4hNVFNbPJ9yhjDQhG8zwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNQcrGTOrp678gbXMw4+C0hNuh1yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z NGE1Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlmMzY5ZjE3MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzM0YTU2OTRlLWVlZDYtNDYxMi1h ZmYyLWFlOWYzNjlmMTczOC8zNGE1Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlmMzY5 ZjE3MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABDnjswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhIlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGwbb26GrrEmke8BqlAS0TkpV9BIoW1QS8IWC0/zonjYVxOD GldC+APseQDh03q4LDRiIB2DCRVmeUEFW+keoWl2fyQnRdXky8Ay6dXW1O4FSjQ+ u+s5SA5Bj0BPKjxYMHmAdjbMaQRPrEpnfJt5Wqim63ch1REL8DQv+Tava7KTK8lI Wgd4LEsFYyzj7wEWSUqCfKTyZTEFq9lKY/GCIYawuF0GTcmHFA/u2x0KViVLGF3u QVOWjHlEC5pr+Qh7j+YJ6mRDuq+h+lwpcl+ck62Qbx/porzLumgfl+i17YZT+DaP IZIE0OJD2Fc3q4Rmc9ZlObDLVww1dE1Vq6zBOQQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:20 2025 by rpki-client