$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer File: dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer (raw, json) Hash identifier: QLF4gSj7ALnPVhP9dTtzOq8RBCT+28jQrY5C98HabqQ= Subject key identifier: 42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A66B8D43AD814DC636C014600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:45:37 +0000 Certificate not after: Thu 07 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 31783 IP: 162.253.22.0/24 IP: 192.70.208.0/24 IP: 198.59.146.0/23 IP: 208.79.8.0/22 IP: 209.20.148.0/23 IP: 2604:6200::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b8:d4:3a:d8:14:dc:63:6c:01:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jul 4 00:45:37 2025 GMT Not After : Oct 7 00:45:37 2027 GMT Subject: CN=dca47667-8bdb-4edf-b1d2-ae7dd968e70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:24:0a:70:78:f0:71:2a:96:09:64:3a:71: ce:a1:cd:7f:4e:04:c9:e6:eb:c4:97:66:6c:82:30: 37:4b:eb:c8:60:83:04:c2:0b:bd:d7:26:f9:08:bc: 69:bb:23:09:c4:3d:56:c8:3f:fe:c5:fc:08:de:77: 62:d3:33:e7:d9:2d:72:f7:32:52:7f:63:92:57:de: a7:84:99:b5:e5:f9:d2:54:97:da:38:02:0b:23:d3: 7f:1e:9f:19:e3:75:e2:ac:46:b1:ee:ac:8a:26:cf: 06:1e:17:1e:f9:27:db:79:5c:b4:1c:5c:00:7b:44: ad:21:2c:c8:65:dd:1c:a0:4e:4c:bc:82:51:51:92: ef:9a:a2:1f:ee:4f:c6:67:3d:3a:c4:be:55:99:5d: 82:93:e3:8c:65:35:7e:1e:05:64:25:3d:8a:43:01: 24:1a:a8:67:a3:ef:5d:42:9a:fa:ad:03:c4:39:ff: 70:ec:c4:e1:01:6a:10:4b:62:e0:62:0f:70:89:40: 45:27:f4:5e:54:18:89:b9:57:4e:73:8a:d7:c0:7d: fb:37:4f:8d:c9:dd:01:bb:c8:71:00:f0:a5:22:5c: bd:fa:54:9e:d4:28:c1:10:5f:c4:a7:41:a4:91:3f: 2c:2c:c8:c7:b0:e8:96:6a:bd:a5:12:69:27:97:26: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 162.253.22.0/24 192.70.208.0/24 198.59.146.0/23 208.79.8.0/22 209.20.148.0/23 IPv6: 2604:6200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31783 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5c:f4:f1:53:8f:7c:62:83:b9:c3:b5:25:95:16:f5:4a:89: f3:7d:8e:8f:ff:2c:c6:a6:e4:31:d0:a2:cc:38:3e:32:3e:15: 96:e0:b4:0b:62:9c:7e:a7:b2:6c:86:00:67:81:f0:3f:40:32: cd:36:5d:ff:9c:9f:4a:e3:8c:a4:42:0f:8e:2c:4a:9e:7c:70: 0f:21:03:b7:84:c9:08:06:da:22:ea:ff:92:70:33:51:ba:c1: 62:9d:79:4d:4f:e8:2d:06:ac:69:fb:f3:bd:a7:c7:95:52:b5: 3a:6c:9b:6b:20:f7:00:e3:12:2b:0b:37:bd:e0:b6:9d:59:68: f5:76:fa:39:f0:04:87:1f:4d:89:64:42:e3:ce:00:9c:fd:78: 64:61:a8:0a:49:02:79:d1:a4:d6:e5:bd:1e:dd:c2:6f:6d:e9: 05:91:f2:1e:80:71:bf:1f:59:98:2d:f4:4d:f2:bc:84:eb:0a: 77:5e:68:3b:95:16:b3:e0:d2:4f:cc:1c:d8:19:a8:d6:cc:dd: 55:26:fd:92:94:08:48:67:0f:63:b9:21:e9:20:50:53:b5:ac: bc:8d:75:56:91:09:49:c5:3c:ae:0d:ad:25:de:a1:46:b3:de: 41:ff:a7:28:13:cd:c9:ab:0c:1b:30:c9:18:bc:93:4c:45:a4: 17:22:bb:d6 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEpmuNQ62BTcY2wBRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDcwNDAwNDUzN1oXDTI3MTAwNzAwNDUzN1owLzEtMCsGA1UEAxMk ZGNhNDc2NjctOGJkYi00ZWRmLWIxZDItYWU3ZGQ5NjhlNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcAkCnB48HEqlglkOnHOoc1/TgTJ5uvEl2Zs gjA3S+vIYIMEwgu91yb5CLxpuyMJxD1WyD/+xfwI3ndi0zPn2S1y9zJSf2OSV96n hJm15fnSVJfaOAILI9N/Hp8Z43XirEax7qyKJs8GHhce+SfbeVy0HFwAe0StISzI Zd0coE5MvIJRUZLvmqIf7k/GZz06xL5VmV2Ck+OMZTV+HgVkJT2KQwEkGqhno+9d Qpr6rQPEOf9w7MThAWoQS2LgYg9wiUBFJ/ReVBiJuVdOc4rXwH37N0+Nyd0Bu8hx APClIly9+lSe1CjBEF/Ep0GkkT8sLMjHsOiWar2lEmknlyb0YwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFELPZ5gebOmnch2/Uh5/jxvJS12XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k Y2E0NzY2Ny04YmRiLTRlZGYtYjFkMi1hZTdkZDk2OGU3MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjYTQ3NjY3LThiZGItNGVkZi1i MWQyLWFlN2RkOTY4ZTcwZi9kY2E0NzY2Ny04YmRiLTRlZGYtYjFkMi1hZTdkZDk2 OGU3MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBACi/RYDBADARtADBAHGO5IDBALQTwgDBAHRFJQw DQQCAAIwBwMFACYEYgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfCcwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAP1z08VOPfGKDucO1JZUW9UqJ832Oj/8sxqbkMdCizDg+Mj4VluC0C2Kcfqey bIYAZ4HwP0AyzTZd/5yfSuOMpEIPjixKnnxwDyEDt4TJCAbaIur/knAzUbrBYp15 TU/oLQasafvzvafHlVK1OmybayD3AOMSKws3veC2nVlo9Xb6OfAEhx9NiWRC484A nP14ZGGoCkkCedGk1uW9Ht3Cb23pBZHyHoBxvx9ZmC30TfK8hOsKd15oO5UWs+DS T8wc2Bmo1szdVSb9kpQISGcPY7kh6SBQU7WsvI11VpEJScU8rg2tJd6hRrPeQf+n KBPNyasMGzDJGLyTTEWkFyK71g== -----END CERTIFICATE-----Generated at Sat Jul 5 17:57:28 2025 by rpki-client