$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer File: ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer (raw, json) Hash identifier: qeMGkvN88HfxM9VyMpr1frTaSqxRkVyeJxjvLpy9gq0= Subject key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A74AE3EACFFEB6AE543912800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Jul 2025 00:45:36 +0000 Certificate not after: Tue 12 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 103.109.82.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:ae:3e:ac:ff:eb:6a:e5:43:91:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 9 00:45:36 2025 GMT Not After : Oct 12 00:45:36 2027 GMT Subject: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:63:4f:92:53:f1:1e:34:53:99:c2:93:bf: 7d:68:f1:4c:c1:b3:69:92:f8:b2:bd:bf:69:cc:2d: 05:7d:23:92:23:42:74:83:81:b6:b6:e2:8e:72:8c: a9:fa:72:e5:19:91:25:0c:6e:87:42:45:1c:04:43: 02:77:03:90:49:ba:19:48:8a:28:66:88:f6:42:f3: 45:05:44:48:2c:c3:52:ce:3d:94:f4:20:70:2a:17: a0:1f:62:9a:8b:47:db:84:f8:59:bb:63:b0:26:13: 02:05:5c:a3:38:1d:1f:7c:7c:4d:73:18:f1:f3:a2: 0c:f1:68:90:03:54:eb:06:e0:13:72:a2:1a:29:0f: 03:ea:9d:2f:b7:7b:f4:c1:f4:e8:b9:60:d2:21:0c: 7b:e2:e3:49:4d:8b:ab:c0:22:f4:d0:e2:e6:87:ce: 6a:93:22:5c:6a:ea:a2:09:49:37:67:9e:fa:ea:35: 38:ec:f9:46:fa:29:34:68:58:20:55:0f:8b:ac:22: 74:49:01:72:4a:f6:b2:ff:12:5c:6d:5b:62:75:8f: 6a:61:1f:ae:40:50:e8:7d:78:eb:fe:8c:ed:da:af: 4c:d5:6b:96:a4:4f:d3:fb:e6:a0:43:b5:46:87:72: 78:b0:97:62:f9:d4:ad:1c:a7:42:72:0f:cd:ba:de: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 103.109.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9e:7b:92:03:88:ee:be:2d:41:94:9e:59:f1:37:89:dc:12: f2:c7:87:31:f0:dc:92:ff:51:c9:97:af:d3:4f:55:40:e7:1c: d5:7c:71:60:99:eb:a2:15:5f:3c:1b:a0:c9:88:19:91:23:12: 7f:62:68:da:47:8a:4b:4f:35:1a:69:34:2b:8b:ac:c9:d4:30: 79:c8:50:42:01:06:8d:c2:45:92:11:08:67:5c:76:dc:db:8d: 91:d3:ed:ed:8b:19:0d:64:6b:81:0f:be:8a:f9:20:a2:79:04: 61:53:f7:f2:8e:f8:a6:5e:db:d9:51:e3:ae:b7:70:93:14:b1: d7:3d:4f:fd:ec:26:5b:f7:e7:8c:74:f6:1e:68:ad:ca:fe:ec: ab:2a:78:f8:29:7f:0a:55:ff:25:ed:bf:59:ce:44:84:8a:ab: bf:de:d0:a7:fd:c4:1a:9b:69:73:5e:07:c2:e0:53:61:69:78: 2c:b7:b6:59:82:43:82:98:f5:f0:f5:bd:39:42:b7:0d:1a:5f: 25:c9:69:98:13:e0:97:92:8e:94:e6:e5:2e:88:e9:13:d0:e0: 40:0e:71:23:be:c2:11:2f:b4:dc:f3:13:e7:2b:65:40:48:d6: 02:1a:96:53:1f:4e:c4:5c:93:e6:55:20:60:f0:28:67:78:25: 6d:73:fb:4d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEp0rj6s/+tq5UORKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDcwOTAwNDUzNloXDTI3MTAxMjAwNDUzNlowLzEtMCsGA1UEAxMk Y2NkMTVmZTEtOTZlOS00NWFkLTk2ZmQtMjIwNDFlMTFjZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ZjT5JT8R40U5nCk799aPFMwbNpkviyvb9p zC0FfSOSI0J0g4G2tuKOcoyp+nLlGZElDG6HQkUcBEMCdwOQSboZSIooZoj2QvNF BURILMNSzj2U9CBwKhegH2Kai0fbhPhZu2OwJhMCBVyjOB0ffHxNcxjx86IM8WiQ A1TrBuATcqIaKQ8D6p0vt3v0wfTouWDSIQx74uNJTYurwCL00OLmh85qkyJcauqi CUk3Z5766jU47PlG+ik0aFggVQ+LrCJ0SQFySvay/xJcbVtidY9qYR+uQFDofXjr /ozt2q9M1WuWpE/T++agQ7VGh3J4sJdi+dStHKdCcg/Nut6YZwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBfuPC2cyjSC89ubMsxK6uJJDRDFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j Y2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUxMWNlOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NjZDE1ZmUxLTk2ZTktNDVhZC05 NmZkLTIyMDQxZTExY2U4ZC9jY2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUx MWNlOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnbVIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGJ57kgOI7r4tQZSeWfE3 idwS8seHMfDckv9RyZev009VQOcc1XxxYJnrohVfPBugyYgZkSMSf2Jo2keKS081 Gmk0K4usydQwechQQgEGjcJFkhEIZ1x23NuNkdPt7YsZDWRrgQ++ivkgonkEYVP3 8o74pl7b2VHjrrdwkxSx1z1P/ewmW/fnjHT2Hmityv7sqyp4+Cl/ClX/Je2/Wc5E hIqrv97Qp/3EGptpc14HwuBTYWl4LLe2WYJDgpj18PW9OUK3DRpfJclpmBPgl5KO lOblLojpE9DgQA5xI77CES+03PMT5ytlQEjWAhqWUx9OxFyT5lUgYPAoZ3glbXP7 TQ== -----END CERTIFICATE-----Generated at Wed Jul 9 18:58:23 2025 by rpki-client