$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer File: 04723749-feb1-4da5-ac21-ba89ad1d057e.cer (raw, json) Hash identifier: SysvUngA/p6JbYBt4cOXX+rnilMS/fQPF8hje7a95sk= Subject key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B0E000C1A1B435306D99B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 21:27:26 +0000 Certificate not after: Sun 25 Jul 2027 18:39:34 +0000 Subordinate resources: AS: 398766 IP: 23.252.16.0/20 IP: 124.198.160.0/19 IP: 162.118.96.0/19 IP: 2605:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:e0:00:c1:a1:b4:35:30:6d:99:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 29 21:27:26 2025 GMT Not After : Jul 25 18:39:34 2027 GMT Subject: CN=04723749-feb1-4da5-ac21-ba89ad1d057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:10:fb:9d:35:48:b1:27:31:61:34:0a:fc: 93:f3:fd:d6:ed:21:b3:a7:87:30:4c:a9:47:85:83: 83:13:b2:99:3e:54:4a:9b:50:5d:ac:41:0c:45:01: 2f:8c:27:5d:df:f6:cf:5e:8c:8a:05:c2:29:4e:f8: d8:86:bb:fd:78:e9:d5:29:ce:eb:e8:c8:d5:e2:9a: a9:e0:9a:d6:28:71:47:fa:fa:72:29:ad:ad:09:08: 17:61:cc:87:ee:ee:9d:dd:7e:4e:f7:79:d2:3c:20: b0:86:89:4c:72:44:d6:8b:6b:ee:62:c9:22:2c:ac: 6a:fa:33:40:4c:98:23:66:8e:34:98:d4:93:5d:78: 91:7e:28:1c:ce:f6:c7:aa:8f:58:1c:e4:f1:32:61: d1:6a:7b:82:36:e6:ca:1e:9e:6b:5d:f3:b1:b8:35: 5a:a6:44:2d:f9:84:ec:a7:ea:c7:72:bc:8b:bf:9e: 59:d9:88:0c:e7:4c:6b:c0:29:de:f7:96:01:51:53: 4f:5b:98:9f:e0:34:a9:dc:eb:c4:cb:ad:1d:c1:fa: df:5e:41:64:37:1a:17:f4:d2:26:7c:d1:e5:b7:28: 6b:fa:2e:2f:bf:8a:1f:93:7e:f9:10:0b:a1:0c:33: de:4e:f2:de:bb:17:26:11:2a:1b:f3:7e:11:0a:f2: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.252.16.0/20 124.198.160.0/19 162.118.96.0/19 IPv6: 2605:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4a:9f:5d:5b:30:7b:8b:b5:e9:70:6c:a6:48:8c:7e:30:ba: c2:a2:f1:40:6e:77:70:3c:5f:02:de:4c:fc:66:b2:d9:9f:a9: 17:64:18:23:8d:62:83:2f:83:8c:e4:44:2d:fb:f9:bb:e4:03: cb:85:64:dd:e1:95:0e:69:d2:3c:19:7e:f8:5e:8d:61:7b:10: 67:4a:f8:16:e0:7e:4e:d3:ff:9c:f6:3b:00:09:58:6d:50:11: 6a:84:e3:6b:6c:f8:0c:4e:37:62:ab:c7:75:af:c2:c7:08:34: f6:8a:fc:8b:8f:64:a4:4a:53:67:61:28:d8:ed:ed:c7:5e:27: 51:0b:fb:a0:6b:33:f8:fd:96:8d:c7:c0:2c:2a:54:d4:1d:8b: 84:14:72:f7:b5:d4:51:7e:83:cf:8b:93:a2:5d:7f:e5:dd:f2: bd:02:45:ba:39:17:1f:22:6a:8d:4d:5f:14:c2:ba:c2:07:37: 6e:8a:cb:75:d9:ac:01:af:56:68:08:35:05:a7:75:21:ae:90: a8:69:ef:02:55:b1:dd:2c:d7:63:2b:1d:cc:53:06:0a:a6:9f: 5d:bf:73:22:f5:1e:f5:90:cb:50:8d:7f:f0:27:e8:b0:2d:30: e2:27:3e:25:18:c8:20:f1:9c:58:dd:12:ba:a8:d7:d9:ae:20: 8d:bf:ec:ff -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEmw4ADBobQ1MG2ZsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyOTIxMjcyNloXDTI3MDcyNTE4MzkzNFowLzEtMCsGA1UEAxMk MDQ3MjM3NDktZmViMS00ZGE1LWFjMjEtYmE4OWFkMWQwNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/sQ+501SLEnMWE0CvyT8/3W7SGzp4cwTKlH hYODE7KZPlRKm1BdrEEMRQEvjCdd3/bPXoyKBcIpTvjYhrv9eOnVKc7r6MjV4pqp 4JrWKHFH+vpyKa2tCQgXYcyH7u6d3X5O93nSPCCwholMckTWi2vuYskiLKxq+jNA TJgjZo40mNSTXXiRfigczvbHqo9YHOTxMmHRanuCNubKHp5rXfOxuDVapkQt+YTs p+rHcryLv55Z2YgM50xrwCne95YBUVNPW5if4DSp3OvEy60dwfrfXkFkNxoX9NIm fNHltyhr+i4vv4ofk375EAuhDDPeTvLeuxcmESob834RCvK6fwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFGAoMrN+PQzOqflRSMOOvedHV+xLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQxZDA1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA0NzIzNzQ5LWZlYjEtNGRhNS1h YzIxLWJhODlhZDFkMDU3ZS8wNDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQx ZDA1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAQX/BADBAV8xqADBAWidmAwDQQCAAIwBwMFACYF 60AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhWuMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB1Kn11bMHuL telwbKZIjH4wusKi8UBud3A8XwLeTPxmstmfqRdkGCONYoMvg4zkRC37+bvkA8uF ZN3hlQ5p0jwZfvhejWF7EGdK+Bbgfk7T/5z2OwAJWG1QEWqE42ts+AxON2Krx3Wv wscINPaK/IuPZKRKU2dhKNjt7cdeJ1EL+6BrM/j9lo3HwCwqVNQdi4QUcve11FF+ g8+Lk6Jdf+Xd8r0CRbo5Fx8iao1NXxTCusIHN26Ky3XZrAGvVmgINQWndSGukKhp 7wJVsd0s12MrHcxTBgqmn12/cyL1HvWQy1CNf/An6LAtMOInPiUYyCDxnFjdErqo 19muII2/7P8= -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:56 2025 by rpki-client