$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer File: cf287819-e56f-4dbd-8904-66671e2f705d.cer (raw, json) Hash identifier: Lu1w1jTIQho5/Xu4LJoJIfg2ZxskC3iEqrYrS+VsFSw= Subject key identifier: 29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849F30062415D6A3FD104059500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 May 2025 13:56:02 +0000 Certificate not after: Thu 26 Aug 2027 13:56:02 +0000 Subordinate resources: IP: 23.139.68.0/24 IP: 2602:f63c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:00:62:41:5d:6a:3f:d1:04:05:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 23 13:56:02 2025 GMT Not After : Aug 26 13:56:02 2027 GMT Subject: CN=cf287819-e56f-4dbd-8904-66671e2f705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:7f:c1:8a:e1:da:fa:0f:18:cc:6e:e2:a8: 50:5b:67:80:2f:02:43:46:c8:7e:26:9c:5b:13:61: 22:03:9d:95:a8:1a:40:bc:65:e1:2b:62:94:39:86: 12:f2:21:fe:2b:b9:03:1e:cb:0c:10:58:b3:32:98: 13:93:d1:fa:14:e5:90:11:fe:79:26:cc:e3:ae:39: 4a:30:23:71:f6:f2:0b:f7:36:fb:22:95:dc:46:27: 5f:87:06:eb:42:b8:db:71:f0:a6:b5:bf:43:5a:4d: 71:3d:ec:b6:d4:85:08:31:3a:0c:0f:f1:ee:40:7e: 8b:6e:b4:91:32:4e:bd:55:66:83:58:5f:59:98:ce: 7d:09:5f:d9:0a:17:0b:9d:06:af:1a:6c:02:34:de: ba:9d:1f:ad:30:3d:10:9a:52:1c:2a:7a:56:61:ab: d6:46:14:a6:66:2e:2c:94:05:79:51:ef:2e:d8:72: ad:ea:88:04:47:f2:72:ba:e8:03:fd:13:5e:83:9e: 48:d8:15:0a:f6:e2:52:7e:13:f1:49:11:9d:4e:4a: 99:08:7d:d8:37:2e:6d:52:bb:1b:4f:79:be:97:44: bf:00:a2:46:cb:d0:13:53:f3:e4:fa:48:88:a8:16: 72:f7:11:0c:5f:6d:43:4d:17:9f:2a:76:55:7d:dc: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.68.0/24 IPv6: 2602:f63c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:90:b4:e4:23:d5:02:0e:3f:1d:74:b3:be:21:1d:57:26:ad: 84:c3:4b:8e:8f:fb:af:8e:fd:20:01:93:ee:d5:be:24:70:2b: 82:cd:36:79:fc:dc:cb:cc:2b:83:3a:3c:01:00:f5:9d:0a:39: 26:f8:6f:a8:d0:3d:48:04:68:f2:03:f8:60:d4:f0:1c:90:1b: 44:bc:6e:19:0b:57:dd:a9:72:6c:5c:94:14:97:d9:69:4e:96: 8a:4f:e4:d8:4f:aa:2d:1e:61:70:35:86:f3:12:58:a5:68:f5: 6a:60:03:fb:4c:6d:69:05:15:98:5a:af:9b:5e:87:a6:a1:3e: 50:45:f4:a7:a0:4e:07:48:ca:12:7c:43:7d:c3:92:90:7a:8f: 8d:ee:52:51:9a:5f:06:ee:36:f4:ed:d3:13:97:52:09:be:4d: 04:e0:72:e9:7b:aa:01:d9:26:68:bd:50:ab:31:44:88:5c:c0: f4:1b:68:dd:e4:76:cc:dd:a8:1f:f9:69:e1:91:13:0f:8a:9e: 4e:aa:7f:a6:e7:e3:99:4a:fa:5b:50:9a:6a:e6:b1:3e:4e:f8: ba:37:b7:4a:26:76:58:41:ad:6f:5d:43:75:90:2e:69:3d:7a: 8b:ee:b2:7a:4c:f4:55:75:2d:e4:1f:a5:df:4a:ce:7c:08:92: 00:61:46:69 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEnzAGJBXWo/0QQFlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMzEzNTYwMloXDTI3MDgyNjEzNTYwMlowLzEtMCsGA1UEAxMk Y2YyODc4MTktZTU2Zi00ZGJkLTg5MDQtNjY2NzFlMmY3MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBx/wYrh2voPGMxu4qhQW2eALwJDRsh+Jpxb E2EiA52VqBpAvGXhK2KUOYYS8iH+K7kDHssMEFizMpgTk9H6FOWQEf55JszjrjlK MCNx9vIL9zb7IpXcRidfhwbrQrjbcfCmtb9DWk1xPey21IUIMToMD/HuQH6LbrSR Mk69VWaDWF9ZmM59CV/ZChcLnQavGmwCNN66nR+tMD0QmlIcKnpWYavWRhSmZi4s lAV5Ue8u2HKt6ogER/JyuugD/RNeg55I2BUK9uJSfhPxSRGdTkqZCH3YNy5tUrsb T3m+l0S/AKJGy9ATU/Pk+kiIqBZy9xEMX21DTRefKnZVfdxb4QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCmWkU9iyBCvsN/t9elisiybiBp+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j ZjI4NzgxOS1lNTZmLTRkYmQtODkwNC02NjY3MWUyZjcwNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NmMjg3ODE5LWU1NmYtNGRiZC04 OTA0LTY2NjcxZTJmNzA1ZC9jZjI4NzgxOS1lNTZmLTRkYmQtODkwNC02NjY3MWUy ZjcwNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi0QwDgQCAAIwCAMGACYC9jwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABuQtOQj1QIOPx10s74hHVcmrYTDS46P+6+O/SABk+7VviRwK4LNNnn83MvMK4M6 PAEA9Z0KOSb4b6jQPUgEaPID+GDU8ByQG0S8bhkLV92pcmxclBSX2WlOlopP5NhP qi0eYXA1hvMSWKVo9WpgA/tMbWkFFZhar5teh6ahPlBF9KegTgdIyhJ8Q33DkpB6 j43uUlGaXwbuNvTt0xOXUgm+TQTgcul7qgHZJmi9UKsxRIhcwPQbaN3kdszdqB/5 aeGREw+Knk6qf6bn45lK+ltQmmrmsT5O+Lo3t0omdlhBrW9dQ3WQLmk9eovusnpM 9FV1LeQfpd9KznwIkgBhRmk= -----END CERTIFICATE-----Generated at Fri Jul 25 13:25:56 2025 by rpki-client