$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer File: 39fdcce5-d149-4129-97c3-c60e86600fb8.cer (raw, json) Hash identifier: 8a3dV9z2TtaDfQTm+qAodCjvcrP3sNi6GGDFSt6b7kA= Subject key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE18ED200E842529CFB89CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 15121 IP: 66.102.144.0/20 IP: 198.105.28.0/22 IP: 2604:a780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:00:e8:42:52:9c:fb:89:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=39fdcce5-d149-4129-97c3-c60e86600fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:e7:d6:36:e0:a6:bd:2e:fb:5b:82:cd:c0: 03:b1:c0:18:c2:d3:96:f0:c7:80:22:fe:c4:77:8b: 16:3b:7f:20:69:f1:53:cf:0e:f0:3f:a6:83:9f:a4: ca:91:52:c7:3b:5c:1f:98:4d:59:e4:e6:21:8c:dd: 5a:6f:39:81:80:10:7f:0a:f0:d2:01:b7:14:ce:01: 18:33:58:bc:5b:36:ac:ce:4e:48:00:23:7f:cb:21: 6d:29:f6:1f:e4:73:95:56:fb:46:ff:67:28:11:37: ec:a2:c6:f3:96:b8:6c:05:51:e3:bc:3a:d8:1e:7b: 97:94:60:7a:82:24:02:3e:d1:12:2e:81:2f:74:da: 9b:2a:ae:57:3d:63:d0:ef:62:bf:30:43:f4:97:a6: 1d:20:0b:d8:b0:46:27:f3:3d:e9:04:be:31:7e:d3: e3:9a:0e:9c:e6:9a:d4:df:6e:60:26:26:92:48:3b: 88:97:08:38:33:8b:f5:a0:b0:b0:bc:09:9d:c4:70: 28:da:62:77:fc:e7:0f:91:67:3c:4e:a6:21:66:b7: 0a:9c:1d:16:9e:2f:52:b0:04:41:7d:da:b1:9e:8b: be:9d:82:e7:73:b5:c6:d9:e3:75:97:2a:91:c1:9a: 7f:ec:38:e2:84:cd:fd:21:c0:c6:35:0f:11:81:61: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.102.144.0/20 198.105.28.0/22 IPv6: 2604:a780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:77:9d:93:1e:06:68:08:82:b4:39:6c:bf:50:02:74:a7:7c: 4f:71:89:0e:f1:4c:57:5b:93:cd:97:2f:34:00:8d:3b:4b:a0: 94:34:90:8c:86:6d:27:31:f5:bf:c8:54:c9:cb:18:f8:56:a1: 0e:bf:cc:f0:9e:dc:08:2e:96:64:86:0a:ee:ed:6f:1f:c8:82: ee:eb:e3:8f:c9:7d:37:d7:3c:0f:f9:61:f2:55:ab:83:9d:9a: 41:b5:61:fd:68:83:27:cc:9a:0a:a2:64:0e:7f:59:6d:68:8e: 93:8c:d5:0b:f4:9b:f4:7e:7b:f0:dd:b0:7e:64:c6:41:3b:63: 9a:0f:21:d5:2b:c7:17:4d:7c:15:b7:ba:fa:00:7d:fb:8a:8b: 2d:e7:0f:56:54:ac:87:b8:1a:03:46:dd:f8:5e:08:a5:3f:fc: 99:79:d1:cc:fa:77:de:90:26:ad:2c:a5:80:3f:eb:02:f1:77: f2:e5:5b:39:65:25:39:bf:80:f0:83:34:a5:b2:be:56:81:b9: 85:6b:11:91:29:e9:ae:d5:9e:05:4a:fc:52:ed:1d:0b:65:2f: 42:50:1c:f3:83:e6:72:b6:c2:c5:ea:e8:ef:7d:2f:9a:89:db: c2:a7:59:b3:0e:0a:b9:d6:5a:6a:84:ac:d7:c2:d2:5e:1b:6d: 34:7a:80:91 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWErhjtIA6EJSnPuJz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk MzlmZGNjZTUtZDE0OS00MTI5LTk3YzMtYzYwZTg2NjAwZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLDn1jbgpr0u+1uCzcADscAYwtOW8MeAIv7E d4sWO38gafFTzw7wP6aDn6TKkVLHO1wfmE1Z5OYhjN1abzmBgBB/CvDSAbcUzgEY M1i8Wzaszk5IACN/yyFtKfYf5HOVVvtG/2coETfsosbzlrhsBVHjvDrYHnuXlGB6 giQCPtESLoEvdNqbKq5XPWPQ72K/MEP0l6YdIAvYsEYn8z3pBL4xftPjmg6c5prU 325gJiaSSDuIlwg4M4v1oLCwvAmdxHAo2mJ3/OcPkWc8TqYhZrcKnB0Wni9SsARB fdqxnou+nYLnc7XG2eN1lyqRwZp/7DjihM39IcDGNQ8RgWG2+wIDAQABo4IELzCC BCswHQYDVR0OBBYEFI8LLFKQHcsbRLT7RgFxcJwpIotxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z OWZkY2NlNS1kMTQ5LTQxMjktOTdjMy1jNjBlODY2MDBmYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzM5ZmRjY2U1LWQxNDktNDEyOS05 N2MzLWM2MGU4NjYwMGZiOC8zOWZkY2NlNS1kMTQ5LTQxMjktOTdjMy1jNjBlODY2 MDBmYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCZpADBALGaRwwDQQCAAIwBwMFACYEp4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOxEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZXedkx4GaAiCtDlsv1AC dKd8T3GJDvFMV1uTzZcvNACNO0uglDSQjIZtJzH1v8hUycsY+FahDr/M8J7cCC6W ZIYK7u1vH8iC7uvjj8l9N9c8D/lh8lWrg52aQbVh/WiDJ8yaCqJkDn9ZbWiOk4zV C/Sb9H578N2wfmTGQTtjmg8h1SvHF018Fbe6+gB9+4qLLecPVlSsh7gaA0bd+F4I pT/8mXnRzPp33pAmrSylgD/rAvF38uVbOWUlOb+A8IM0pbK+VoG5hWsRkSnprtWe BUr8Uu0dC2UvQlAc84PmcrbCxero730vmonbwqdZsw4KudZaaoSs18LSXhttNHqA kQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:38 2025 by rpki-client