$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer File: 82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer (raw, json) Hash identifier: iEcC/jccL1hzT3amO+rK2mv+MpBi/4QZED6LNKVjbBU= Subject key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AE9EEDF94FB1FD47864F4F1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 00:45:24 +0000 Certificate not after: Tue 23 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 40114 IP: 74.117.148.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ee:df:94:fb:1f:d4:78:64:f4:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 20 00:45:24 2025 GMT Not After : Nov 23 01:45:24 2027 GMT Subject: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:72:7c:e9:cc:bd:42:26:10:fd:c2:21:82: f2:8f:1f:95:16:8c:cd:a7:62:b9:1e:c3:10:67:75: da:e2:05:40:f3:33:4b:e5:54:ee:f2:d0:18:1a:2e: cc:f8:bc:e1:76:06:da:57:bb:35:75:b9:6d:73:3e: f5:15:e9:ed:35:f7:f4:db:ba:c8:27:99:ea:c3:07: e4:33:1e:4e:7f:27:85:b3:8c:e7:52:61:2c:5a:83: 2a:48:9e:7c:ad:59:e6:72:ac:9b:06:65:de:c4:fa: f0:b2:30:df:96:71:44:ec:e0:ad:c7:23:87:2f:5d: 30:26:22:d2:b8:ba:17:fc:72:f4:a5:96:36:06:2e: 7e:3a:60:f5:26:8e:b8:d0:47:32:bf:60:7c:0c:5f: 8a:ce:73:fd:36:af:a0:18:ed:eb:11:e3:c8:a6:4d: 14:b9:3e:bf:5c:6c:b3:32:c1:b3:7e:c4:b3:ae:be: 34:e4:6f:0c:38:76:ba:c9:91:8d:f4:71:41:ad:67: 52:a3:93:d0:a8:19:a3:ef:0e:14:80:eb:0d:6a:ff: 3e:5a:64:3d:44:bf:b4:b9:4d:be:f2:bb:8f:4f:96: 24:b3:ff:15:c4:71:58:6d:22:08:57:cd:97:2a:be: ba:dc:b0:ac:e7:0a:8d:44:62:c7:a8:c5:d7:5f:95: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 74.117.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:90:b0:cb:16:c1:7b:70:f5:8b:8c:24:87:3d:14:ae:40:32: 29:0b:49:c5:5e:2e:64:14:41:a2:98:fa:ac:2f:0a:ce:87:41: 1d:cc:5d:2a:21:32:6d:9b:13:50:5d:0a:5a:e0:4f:50:bd:2e: 01:a9:ca:c4:ae:08:60:79:53:03:68:c3:f4:f1:d5:82:a1:65: 04:42:3a:8d:9e:b4:d7:a3:63:e5:f0:ff:36:ba:b2:07:83:1e: ab:8e:b8:a4:8e:93:17:00:5d:ae:5f:0d:d5:0d:a6:cc:a9:ca: 44:a4:6c:4a:87:81:d6:d0:dc:69:06:9e:ae:1c:3d:75:e4:6c: b4:a0:c6:00:5c:3d:0e:22:6a:83:f5:40:4a:f9:d3:18:fb:19: eb:fa:b6:7f:02:d9:ad:9f:43:d6:58:20:12:17:fb:4f:35:3d: f2:a9:55:2d:20:6e:5c:04:9d:ed:cf:de:a4:53:96:ad:16:b3: 9d:11:97:73:c1:72:92:37:5e:67:d5:89:71:1e:e8:02:14:12: 6f:cc:c0:99:ab:4c:c9:a5:60:ea:73:eb:2e:e9:0e:66:da:13: ee:86:f6:d1:db:2c:55:f3:8d:62:51:3d:70:bb:8d:5e:5a:5a: 2b:4b:fc:2d:2c:57:94:e6:1e:a8:e7:9e:2d:c5:b4:e0:1e:af: bc:8f:3b:92 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErp7t+U+x/UeGT08cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgyMDAwNDUyNFoXDTI3MTEyMzAxNDUyNFowLzEtMCsGA1UEAxMk ODJkMzcxNzUtYzNkZi00MWFjLWFlMmItN2MyYzI1NzJjN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtupyfOnMvUImEP3CIYLyjx+VFozNp2K5HsMQ Z3Xa4gVA8zNL5VTu8tAYGi7M+LzhdgbaV7s1dbltcz71FentNff027rIJ5nqwwfk Mx5OfyeFs4znUmEsWoMqSJ58rVnmcqybBmXexPrwsjDflnFE7OCtxyOHL10wJiLS uLoX/HL0pZY2Bi5+OmD1Jo640Ecyv2B8DF+KznP9Nq+gGO3rEePIpk0UuT6/XGyz MsGzfsSzrr405G8MOHa6yZGN9HFBrWdSo5PQqBmj7w4UgOsNav8+WmQ9RL+0uU2+ 8ruPT5Yks/8VxHFYbSIIV82XKr663LCs5wqNRGLHqMXXX5UbUwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHIcjUC7cbDoqOEqMgNhGgNYODCFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 MmQzNzE3NS1jM2RmLTQxYWMtYWUyYi03YzJjMjU3MmM3YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzgyZDM3MTc1LWMzZGYtNDFhYy1h ZTJiLTdjMmMyNTcyYzdhYi84MmQzNzE3NS1jM2RmLTQxYWMtYWUyYi03YzJjMjU3 MmM3YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKdZQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJyyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA6QsMsWwXtw9YuMJIc9FK5AMikLScVeLmQUQaKY+qwvCs6H QR3MXSohMm2bE1BdClrgT1C9LgGpysSuCGB5UwNow/Tx1YKhZQRCOo2etNejY+Xw /za6sgeDHquOuKSOkxcAXa5fDdUNpsypykSkbEqHgdbQ3GkGnq4cPXXkbLSgxgBc PQ4iaoP1QEr50xj7Gev6tn8C2a2fQ9ZYIBIX+081PfKpVS0gblwEne3P3qRTlq0W s50Rl3PBcpI3XmfViXEe6AIUEm/MwJmrTMmlYOpz6y7pDmbaE+6G9tHbLFXzjWJR PXC7jV5aWitL/C0sV5TmHqjnni3FtOAer7yPO5I= -----END CERTIFICATE-----Generated at Sat Aug 23 09:39:57 2025 by rpki-client