$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer File: 97e60b77-17e3-4250-9bc8-b5e7664a320a.cer (raw, json) Hash identifier: cSApbmgPCRzh9pLUa6dOR6o0GhfF1Z+Bjwed8cbINCQ= Subject key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AE7243131116D12903351CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 00:45:25 +0000 Certificate not after: Mon 22 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 31799 AS: 54552 IP: 23.138.144.0/24 IP: 74.123.116.0/22 IP: 216.39.244.0/22 IP: 2620:13f:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:24:31:31:11:6d:12:90:33:51:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 19 00:45:25 2025 GMT Not After : Nov 22 01:45:25 2027 GMT Subject: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:a2:a3:56:75:0a:2b:fa:25:97:9f:8a:e2: 3d:1f:13:2b:cf:31:df:ff:e7:5e:66:bb:9b:ac:32: 3c:a5:20:24:be:ea:b4:ff:4f:79:01:5a:77:4c:1e: 18:5c:22:33:c4:4c:88:15:26:09:9d:1f:b5:30:db: 3c:f4:4b:1b:12:2e:fc:21:99:a2:ee:5b:bd:48:00: a9:42:90:62:1e:88:b3:62:cd:b6:a2:4f:93:a2:6d: 8d:d2:0e:81:ec:fe:1c:26:1d:63:75:df:7a:dd:43: 17:41:e3:30:58:c3:b2:5b:b6:90:1b:5d:76:46:5d: f7:2d:2f:54:fa:ba:df:ff:56:63:e9:09:54:f2:7e: ac:22:d5:97:fa:a5:74:43:ab:53:ae:81:65:cd:65: f8:0d:b0:b1:f3:57:b5:03:9e:16:5a:2e:13:ed:18: cf:38:c4:c0:95:4b:5a:45:c4:62:ab:6e:11:ed:0b: 83:a6:3e:ac:c4:75:40:bb:31:d1:7d:80:f1:75:2f: 0a:ab:81:ea:dd:1f:d2:e9:5f:cc:70:47:7f:cd:d4: c1:d3:da:ae:82:34:ce:b2:47:22:25:6a:d3:4f:0c: 28:89:0f:f8:f6:4a:ec:48:c2:42:1e:ff:92:4d:b2: 58:7d:4b:f5:f6:90:45:54:f9:68:87:f3:a6:bb:6a: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.144.0/24 74.123.116.0/22 216.39.244.0/22 IPv6: 2620:13f:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31799 54552 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:60:30:d6:26:bc:d0:73:07:b4:f2:28:1c:48:b2:73:4a:36: 6a:35:38:fa:26:0c:f3:84:cd:15:93:be:98:a4:47:ce:5c:2e: 16:93:c3:b2:6e:47:26:8e:38:a6:3a:f8:ff:29:fb:b7:fc:73: 12:aa:64:42:93:29:a5:46:0b:cd:5d:5d:c2:9f:1f:fa:81:16: e5:9a:cf:d8:c4:6e:0c:a7:83:34:32:a7:dc:d2:50:d9:e6:74: c1:95:0a:ac:c7:8a:04:a5:14:c7:4b:cb:dd:c1:f2:fc:59:f3: 40:f5:98:6d:27:34:87:0a:56:cd:6f:89:1e:ec:eb:14:df:69: fa:37:7a:1c:c3:71:f7:90:95:71:60:7e:f3:89:78:df:77:ac: 39:4c:39:3b:bc:99:14:1a:2e:30:e4:3b:75:b8:59:35:50:1e: 40:ae:7b:47:0a:05:7f:9c:d8:9d:ff:26:8b:83:0b:25:6a:f7: b3:0c:a8:1a:3f:75:96:d4:c5:fe:11:a3:37:2b:5e:ea:95:44: 42:44:0e:24:a7:53:78:94:c5:ed:47:a4:93:53:7d:a1:ef:29: f2:e6:45:2a:28:91:2b:99:29:38:1d:a7:08:56:31:9e:27:ff: 95:e8:42:8a:5f:ac:65:39:df:25:69:da:5c:14:da:c6:db:c7: 59:05:ea:a0 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWErnJDExEW0SkDNRzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxOTAwNDUyNVoXDTI3MTEyMjAxNDUyNVowLzEtMCsGA1UEAxMk OTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEzMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ2io1Z1Civ6JZefiuI9HxMrzzHf/+deZrub rDI8pSAkvuq0/095AVp3TB4YXCIzxEyIFSYJnR+1MNs89EsbEi78IZmi7lu9SACp QpBiHoizYs22ok+Tom2N0g6B7P4cJh1jdd963UMXQeMwWMOyW7aQG112Rl33LS9U +rrf/1Zj6QlU8n6sItWX+qV0Q6tTroFlzWX4DbCx81e1A54WWi4T7RjPOMTAlUta RcRiq24R7QuDpj6sxHVAuzHRfYDxdS8Kq4Hq3R/S6V/McEd/zdTB09qugjTOskci JWrTTwwoiQ/49krsSMJCHv+STbJYfUv19pBFVPloh/Omu2r0JQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFLg8ir6qpPN+310VKgQ67WyhhLZTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk3ZTYwYjc3LTE3ZTMtNDI1MC05 YmM4LWI1ZTc2NjRhMzIwYS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0 YTMyMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAAXipADBAJKe3QDBALYJ/QwDwQCAAIwCQMHBCYg AT+wADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJ8NwIDANUYMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADRg MNYmvNBzB7TyKBxIsnNKNmo1OPomDPOEzRWTvpikR85cLhaTw7JuRyaOOKY6+P8p +7f8cxKqZEKTKaVGC81dXcKfH/qBFuWaz9jEbgyngzQyp9zSUNnmdMGVCqzHigSl FMdLy93B8vxZ80D1mG0nNIcKVs1viR7s6xTfafo3ehzDcfeQlXFgfvOJeN93rDlM OTu8mRQaLjDkO3W4WTVQHkCue0cKBX+c2J3/JouDCyVq97MMqBo/dZbUxf4Rozcr XuqVREJEDiSnU3iUxe1HpJNTfaHvKfLmRSookSuZKTgdpwhWMZ4n/5XoQopfrGU5 3yVp2lwU2sbbx1kF6qA= -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:36 2025 by rpki-client