$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer File: 70a36240-104b-454c-b230-bf415e356e88.cer (raw, json) Hash identifier: Pr74TAtgIbdWN6NR2a4R/VAt97crRfVk8dMaWHW0CAM= Subject key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B77CB33BD6DB46C3F43279140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 20:18:19 +0000 Certificate not after: Fri 07 May 2027 16:31:28 +0000 Subordinate resources: AS: 13405 AS: 18457 IP: 23.128.148.0/24 IP: 142.249.56.0/22 IP: 2602:f7bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:cb:33:bd:6d:b4:6c:3f:43:27:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 9 20:18:19 2025 GMT Not After : May 7 16:31:28 2027 GMT Subject: CN=70a36240-104b-454c-b230-bf415e356e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:46:6e:c0:79:f7:9d:63:44:7b:79:1f:2c: 70:f5:95:e2:33:a2:b7:09:5d:a5:07:e5:55:0a:d5: 3b:9e:ab:c4:58:60:9f:29:93:05:39:2e:54:24:8c: 10:26:0d:da:36:c6:09:f4:23:c8:5f:62:28:8c:f9: 89:de:df:d6:09:07:e6:83:81:c8:14:a7:3e:f6:4f: 71:ad:e5:b0:58:c5:95:2e:e8:70:cc:66:4a:6f:36: 11:b2:36:d1:c9:e8:2a:fa:2b:24:e2:5b:66:3a:1c: 1b:fd:94:ab:71:ae:9a:25:52:e2:01:48:77:64:e0: 74:20:33:08:76:28:6e:c5:ec:ce:7e:a0:5e:23:4d: d2:d4:1b:6e:dc:af:d6:9c:a3:fc:32:3a:40:05:a0: 62:96:67:c9:54:73:82:95:0f:6b:39:61:8f:49:9d: 22:92:0e:bb:1b:c3:0e:60:48:ed:33:3d:87:dc:d0: 97:82:80:76:74:bb:ef:88:95:03:7e:de:e4:13:15: e1:0c:f5:33:42:ad:09:b9:59:2f:81:8c:0e:99:0a: c0:90:61:2b:fc:f9:7b:93:32:a7:68:fd:aa:b7:dd: a9:28:b2:8b:cf:a2:ce:c5:02:4b:b3:55:8e:c0:44: 03:44:76:53:ec:0b:94:a3:cc:55:7d:f5:75:5c:3f: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.128.148.0/24 142.249.56.0/22 IPv6: 2602:f7bc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13405 18457 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:02:3e:e6:7d:2e:8d:46:db:e4:44:ff:30:aa:47:65:76:ad: 03:44:e7:c0:c9:f6:be:4b:fd:e5:ee:a7:9f:c4:36:e3:c7:e0: 62:3b:da:49:53:80:39:0e:9f:ef:22:33:75:0e:6e:34:0c:69: bd:3f:9b:c7:dc:de:97:11:2f:60:d7:e0:d9:01:1b:c3:ab:a0: 08:b5:23:93:56:7d:00:13:5b:7e:bd:50:71:09:21:80:5e:ad: 45:ed:f1:b4:bc:57:cd:01:d4:39:2a:f9:c8:cc:8d:d8:6a:77: bb:94:e4:7b:ed:64:1d:a6:cd:93:1e:db:2a:30:40:89:1f:2d: e4:6e:6a:59:ad:ff:af:66:a8:db:9e:cc:c4:a6:03:72:fc:7e: 7e:d2:e0:c4:c4:ed:4f:f5:c7:e2:35:82:ad:c1:fa:f9:94:19: c5:bb:bb:fe:32:47:2f:f2:78:ed:bb:45:32:35:f5:c3:39:fb: f5:20:f4:88:6d:93:6f:ea:56:b3:27:d0:e9:82:c5:56:7e:de: ea:70:f3:86:60:0c:6c:67:e6:be:06:16:7b:90:2d:43:7d:e9: b5:5a:3b:8d:b9:d7:a0:52:82:31:b0:90:a5:48:54:71:0d:42: d6:4b:67:99:cc:b2:eb:b1:a7:ee:82:c2:95:56:6e:bd:72:df: b1:df:2d:0b -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEt3yzO9bbRsP0MnkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAwOTIwMTgxOVoXDTI3MDUwNzE2MzEyOFowLzEtMCsGA1UEAxMk NzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUlGbsB5951jRHt5Hyxw9ZXiM6K3CV2lB+VV CtU7nqvEWGCfKZMFOS5UJIwQJg3aNsYJ9CPIX2IojPmJ3t/WCQfmg4HIFKc+9k9x reWwWMWVLuhwzGZKbzYRsjbRyegq+isk4ltmOhwb/ZSrca6aJVLiAUh3ZOB0IDMI dihuxezOfqBeI03S1Btu3K/WnKP8MjpABaBilmfJVHOClQ9rOWGPSZ0ikg67G8MO YEjtMz2H3NCXgoB2dLvviJUDft7kExXhDPUzQq0JuVkvgYwOmQrAkGEr/Pl7kzKn aP2qt92pKLKLz6LOxQJLs1WOwEQDRHZT7AuUo8xVffV1XD9VpwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFGAxnYACkFjDfmqk5tvXt8pOjHvpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzcwYTM2MjQwLTEwNGItNDU0Yy1i MjMwLWJmNDE1ZTM1NmU4OC83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUz NTZlODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgJQDBAKO+TgwDgQCAAIwCAMGACYC97wAMB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAjRdAgJIGTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXAj7mfS6NRtvk RP8wqkdldq0DROfAyfa+S/3l7qefxDbjx+BiO9pJU4A5Dp/vIjN1Dm40DGm9P5vH 3N6XES9g1+DZARvDq6AItSOTVn0AE1t+vVBxCSGAXq1F7fG0vFfNAdQ5KvnIzI3Y ane7lOR77WQdps2THtsqMECJHy3kbmpZrf+vZqjbnszEpgNy/H5+0uDExO1P9cfi NYKtwfr5lBnFu7v+Mkcv8njtu0UyNfXDOfv1IPSIbZNv6lazJ9DpgsVWft7qcPOG YAxsZ+a+BhZ7kC1Dfem1WjuNudegUoIxsJClSFRxDULWS2eZzLLrsafugsKVVm69 ct+x3y0L -----END CERTIFICATE-----Generated at Fri Oct 10 09:58:01 2025 by rpki-client