$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer File: 339ec033-73b6-4268-bb2b-7188aedd736e.cer (raw, json) Hash identifier: 6uE5c1gmbxMLATsu6KrnlmxOmfJN8Qg2Vy7oLtim90k= Subject key identifier: 13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A69838359C2E129BFD67A4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Jul 2025 00:45:37 +0000 Certificate not after: Fri 08 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 40361 IP: 199.242.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:83:83:59:c2:e1:29:bf:d6:7a:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 5 00:45:37 2025 GMT Not After : Oct 8 00:45:37 2027 GMT Subject: CN=339ec033-73b6-4268-bb2b-7188aedd736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:7c:ee:c7:13:f3:48:10:aa:36:18:57:d7: 6a:10:0a:09:27:be:fc:93:1a:86:08:b9:ba:04:b2: 11:17:7a:cf:34:04:01:b6:c1:a0:d6:22:99:87:7f: 92:1c:3c:9b:5c:5b:0e:7a:84:f7:99:3a:fe:71:91: 70:6b:3e:75:77:ca:1a:77:09:ed:c5:c6:64:1a:f3: 5e:da:92:03:42:ee:1f:1b:4c:b4:f9:39:e9:85:fa: 76:9f:93:a8:f4:38:38:03:48:d0:be:07:65:c1:19: c5:6e:fa:26:36:5b:e2:89:1c:13:5e:18:d7:70:23: d6:e5:8e:61:3d:ef:cc:d0:55:db:37:4c:be:76:92: 19:64:26:71:eb:d8:7e:37:15:c1:c5:bf:e0:5a:5e: a5:07:14:a6:cf:83:4a:60:68:de:3c:75:f1:56:d6: ec:c9:cc:36:f0:71:53:d4:75:cf:5c:1b:e5:ea:4d: e5:43:b3:c0:99:56:c1:c5:91:17:54:25:e3:f4:3d: bf:d9:3e:95:dc:2e:28:24:9e:48:d2:2d:28:ae:9f: 90:75:e9:6f:e8:ad:7f:06:0d:d6:86:8c:4d:9c:99: 40:ef:ac:16:91:b2:19:46:d8:1b:fb:43:61:8c:c4: 4b:8e:aa:f4:d2:a3:3f:76:1f:f8:fb:76:97:c6:75: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.242.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40361 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:84:80:f6:c7:89:cd:68:31:89:c3:0f:e6:e3:6c:b0:a5:45: 88:92:73:29:29:f8:1b:56:57:9b:32:cd:ce:b1:9d:ed:90:d9: a6:75:7d:47:89:2b:5c:a1:c8:76:92:c3:d4:21:69:57:b6:93: 05:c2:63:06:40:1b:40:c6:64:f1:b8:fe:3b:12:a2:7c:f5:70: 3b:38:a4:35:46:e6:9e:a0:df:ff:0b:f8:98:08:ed:89:40:c0: 3a:2a:6f:40:27:76:99:36:df:a7:55:6b:6e:f7:94:9f:d6:d6: 36:ef:00:95:48:4e:27:ba:28:fa:37:da:ab:e9:fc:bf:ab:eb: 12:46:1a:74:c5:46:9e:83:49:2b:98:e7:f2:79:f0:df:da:27: e1:61:46:bd:05:56:65:07:85:fa:45:b9:2a:3a:44:f7:16:58: e5:49:45:6a:eb:4d:38:34:19:00:39:24:1c:69:ba:30:d0:6d: 9a:cc:51:90:15:5c:71:ad:3b:71:fc:2b:43:7d:0e:ac:ba:b4: 7c:5b:60:2d:03:04:7a:85:11:fc:af:f2:b4:fa:20:78:31:d6: 15:c9:6a:b7:d3:49:53:12:ee:8d:13:8b:37:6e:63:fb:41:e4: 72:ff:d9:f6:2e:86:e7:7a:f3:bf:99:62:6c:8a:d9:a7:90:dc: b3:cd:b5:70 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEppg4NZwuEpv9Z6TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcwNTAwNDUzN1oXDTI3MTAwODAwNDUzN1owLzEtMCsGA1UEAxMk MzM5ZWMwMzMtNzNiNi00MjY4LWJiMmItNzE4OGFlZGQ3MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgV87scT80gQqjYYV9dqEAoJJ778kxqGCLm6 BLIRF3rPNAQBtsGg1iKZh3+SHDybXFsOeoT3mTr+cZFwaz51d8oadwntxcZkGvNe 2pIDQu4fG0y0+Tnphfp2n5Oo9Dg4A0jQvgdlwRnFbvomNlviiRwTXhjXcCPW5Y5h Pe/M0FXbN0y+dpIZZCZx69h+NxXBxb/gWl6lBxSmz4NKYGjePHXxVtbsycw28HFT 1HXPXBvl6k3lQ7PAmVbBxZEXVCXj9D2/2T6V3C4oJJ5I0i0orp+Qdelv6K1/Bg3W hoxNnJlA76wWkbIZRtgb+0NhjMRLjqr00qM/dh/4+3aXxnXo0wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBN2GGMRJDyq+JNxurUC1yXl0KTHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MzllYzAzMy03M2I2LTQyNjgtYmIyYi03MTg4YWVkZDczNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMzOWVjMDMzLTczYjYtNDI2OC1i YjJiLTcxODhhZWRkNzM2ZS8zMzllYzAzMy03M2I2LTQyNjgtYmIyYi03MTg4YWVk ZDczNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH8v8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ2pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGGEgPbHic1oMYnDD+bjbLClRYiScykp+BtWV5syzc6xne2Q 2aZ1fUeJK1yhyHaSw9QhaVe2kwXCYwZAG0DGZPG4/jsSonz1cDs4pDVG5p6g3/8L +JgI7YlAwDoqb0Andpk236dVa273lJ/W1jbvAJVITie6KPo32qvp/L+r6xJGGnTF Rp6DSSuY5/J58N/aJ+FhRr0FVmUHhfpFuSo6RPcWWOVJRWrrTTg0GQA5JBxpujDQ bZrMUZAVXHGtO3H8K0N9Dqy6tHxbYC0DBHqFEfyv8rT6IHgx1hXJarfTSVMS7o0T izduY/tB5HL/2fYuhud687+ZYmyK2aeQ3LPNtXA= -----END CERTIFICATE-----Generated at Wed Jul 9 06:52:31 2025 by rpki-client