$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer File: 68f1635e-5871-4108-b726-e99a09258e31.cer (raw, json) Hash identifier: SydPT8csiFd4hFFWKp4qQfJOz5BeahU+9+ymPLIwulw= Subject key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B37068DD12277739C4B1AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 19:30:01 +0000 Certificate not after: Tue 03 Aug 2027 19:30:01 +0000 Subordinate resources: AS: 33510 IP: 204.126.156.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:70:68:dd:12:27:77:39:c4:b1:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 19:30:01 2025 GMT Not After : Aug 3 19:30:01 2027 GMT Subject: CN=68f1635e-5871-4108-b726-e99a09258e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:be:49:44:ae:7c:f2:df:2b:97:d9:f9:b5: 5c:cc:1b:83:90:04:1d:03:16:09:6d:df:4e:ca:f5: 2e:4d:00:b9:aa:74:8e:a0:8f:b4:4b:bf:99:d7:12: 70:89:81:ab:46:7b:f9:5d:73:df:75:5f:38:dc:48: 1d:7c:db:43:c7:4d:f9:58:34:44:8e:62:19:c5:b6: de:68:17:a8:0a:7c:a9:da:32:e1:95:84:cc:69:f8: 82:2c:29:b4:dc:41:f4:90:61:96:7a:e9:37:bf:96: 98:0a:cf:a5:62:2f:f1:f7:58:38:17:72:39:46:2c: 5f:ee:9d:78:78:2d:83:f5:2f:b7:ff:b4:be:96:ee: 50:e6:2a:27:18:ac:3b:f0:5e:0b:c3:97:d4:c5:a9: 8e:f0:1b:4d:c3:12:db:b8:cb:d5:1d:9e:93:d0:cc: 2f:48:ad:2b:c6:cc:41:0c:a9:fd:8a:27:7d:be:2e: b9:8b:8f:f3:27:d9:a9:62:bf:0d:8a:89:2a:47:d7: dc:6b:6b:a6:22:8b:8f:e3:2a:b7:1d:1e:b7:5a:11: e4:41:58:08:f8:70:79:61:e9:0d:4f:95:fb:99:36: ab:7d:99:60:c3:9d:ab:54:4a:a8:92:80:98:4a:b8: e8:46:b9:96:98:79:45:85:2a:ef:1f:9c:c4:f9:35: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.126.156.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33510 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:79:f5:19:9c:68:67:73:f7:cd:6c:12:f9:2a:b6:64:3d:6f: 2c:c2:3a:0f:10:3a:e4:92:78:5a:91:cb:0e:63:a8:fd:ab:4c: 90:0e:f8:91:20:e5:49:25:ff:07:9f:78:3b:37:53:ec:c2:95: b3:f6:9f:30:01:a8:f1:36:29:b6:33:bc:aa:6a:4c:75:61:09: 70:8f:4a:b6:dd:ac:ac:83:83:6f:44:28:2f:5c:fd:e7:77:78: 14:58:50:df:61:d3:12:33:e7:ab:83:56:3a:b3:dc:46:01:b3: 5f:a5:db:c5:5e:eb:39:63:02:19:b1:ce:a8:c3:f3:14:66:95: 37:3a:ae:7b:96:d7:56:9a:14:41:8e:37:9c:23:08:13:9e:b0: 75:37:7e:6c:1a:74:48:7a:07:22:4f:98:2a:53:0b:26:77:b5: b4:b5:b3:27:fb:03:48:98:d1:16:23:03:c3:a9:92:13:1e:4e: 23:65:78:13:3d:6f:d8:84:8c:c0:c4:e6:ae:5d:5c:27:29:a5: 70:31:7a:78:ea:36:eb:d0:34:06:28:89:84:4f:3e:ba:9d:29: 69:17:88:75:d5:bc:30:9c:db:e7:33:e3:3f:ec:4f:7f:12:55: d1:90:b3:a1:75:3f:cb:5a:a2:59:bc:96:c3:c7:20:2e:fd:0f: 2d:e9:58:89 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmzcGjdEid3OcSxqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDE5MzAwMVoXDTI3MDgwMzE5MzAwMVowLzEtMCsGA1UEAxMk NjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWS+SUSufPLfK5fZ+bVczBuDkAQdAxYJbd9O yvUuTQC5qnSOoI+0S7+Z1xJwiYGrRnv5XXPfdV843EgdfNtDx035WDREjmIZxbbe aBeoCnyp2jLhlYTMafiCLCm03EH0kGGWeuk3v5aYCs+lYi/x91g4F3I5Rixf7p14 eC2D9S+3/7S+lu5Q5ionGKw78F4Lw5fUxamO8BtNwxLbuMvVHZ6T0MwvSK0rxsxB DKn9iid9vi65i4/zJ9mpYr8NiokqR9fca2umIouP4yq3HR63WhHkQVgI+HB5YekN T5X7mTarfZlgw52rVEqokoCYSrjoRrmWmHlFhSrvH5zE+TU4BQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFM3Fny3YKTeqT4KO1BB7bv/0ygjMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY4ZjE2MzVlLTU4NzEtNDEwOC1i NzI2LWU5OWEwOTI1OGUzMS82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDky NThlMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMfpwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AILmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFN59RmcaGdz981sEvkqtmQ9byzCOg8QOuSSeFqRyw5jqP2r TJAO+JEg5Ukl/wefeDs3U+zClbP2nzABqPE2KbYzvKpqTHVhCXCPSrbdrKyDg29E KC9c/ed3eBRYUN9h0xIz56uDVjqz3EYBs1+l28Ve6zljAhmxzqjD8xRmlTc6rnuW 11aaFEGON5wjCBOesHU3fmwadEh6ByJPmCpTCyZ3tbS1syf7A0iY0RYjA8OpkhMe TiNleBM9b9iEjMDE5q5dXCcppXAxenjqNuvQNAYoiYRPPrqdKWkXiHXVvDCc2+cz 4z/sT38SVdGQs6F1P8taolm8lsPHIC79Dy3pWIk= -----END CERTIFICATE-----Generated at Mon May 12 20:54:29 2025 by rpki-client