$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer File: c2cb8327-ee3e-477c-990c-118e040b2de6.cer (raw, json) Hash identifier: of2+kJgF3C76YPVFc0jG1zwdsJs5Kk8xTnWe5Bu18Rk= Subject key identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A2B270368C8F4971A6666C420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 16:39:08 +0000 Certificate not after: Wed 15 Sep 2027 16:39:08 +0000 Subordinate resources: AS: 398242 IP: 152.86.0.0/20 IP: 170.117.192.0/21 IP: 198.71.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:27:03:68:c8:f4:97:1a:66:66:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 12 16:39:08 2025 GMT Not After : Sep 15 16:39:08 2027 GMT Subject: CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:d9:06:1f:eb:d9:10:30:27:0c:d6:a5:b6: bf:73:6e:d1:9e:ef:1a:fb:d2:ae:4c:e2:ec:e2:5a: 67:0b:9f:ae:5d:cf:bb:96:0f:84:d6:57:a2:94:56: 8e:5c:95:1b:c8:4b:db:e8:f3:2c:10:60:62:44:18: c6:3c:7d:68:5c:8f:df:23:20:b3:d5:17:5f:2a:44: 31:6c:0f:99:12:e1:a9:3b:13:30:0d:76:01:3a:b1: 01:d6:66:7e:9c:cf:8b:53:9f:2e:39:c6:5c:fb:a2: e2:11:1d:9d:91:dc:22:9f:92:51:7c:de:6f:d1:d6: b4:ad:e0:c0:1e:22:1b:c0:25:cf:57:33:05:cd:cc: d6:0a:7a:78:00:ec:b6:f0:63:30:ad:a4:c5:bf:34: 61:94:e7:39:35:73:72:c6:77:9d:30:42:61:f2:92: 59:3a:c9:f6:33:91:8a:24:92:7e:98:89:55:76:88: 54:5d:6c:bc:45:4b:e0:4f:a1:4d:68:1e:23:af:54: 60:fd:1d:48:db:bf:1b:68:2f:b0:8a:ff:23:d3:33: d3:c7:a9:e1:38:56:0c:24:ef:bb:b2:d6:f4:b4:5b: e9:c2:a9:03:f4:02:52:19:89:bc:f0:ae:65:c0:56: 5d:fb:52:6e:d9:99:d3:02:44:7e:7e:4f:74:da:13: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 152.86.0.0/20 170.117.192.0/21 198.71.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398242 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:07:46:14:0b:6c:66:3a:1f:ec:de:0e:3f:8a:6a:09:ec:2a: 8d:86:87:9a:f7:9a:3d:55:10:14:3e:b7:ae:0e:a3:5d:9a:65: d6:00:03:93:8c:54:87:cb:35:db:14:ca:fa:fd:d6:1f:f4:14: 03:04:33:c9:6f:10:77:2a:41:d1:c7:49:8d:5e:15:c1:ee:a4: 93:89:52:7f:56:66:9b:34:76:71:71:89:51:75:0a:91:9b:fe: 86:7d:90:e2:6e:61:0e:06:c1:e5:f2:5b:51:fe:fe:10:b3:44: 00:96:3f:75:24:24:e3:0a:aa:78:78:54:a6:54:a6:31:ee:41: e2:e7:1e:4e:64:2d:60:4b:01:84:3f:47:29:cd:0b:85:c5:09: b8:5e:c8:cf:83:ba:26:49:c5:86:f7:80:45:b5:1b:f2:34:86: 2a:32:6d:e6:28:fd:cb:c9:26:ba:be:79:71:3e:80:6e:95:9f: d2:4a:c5:8a:a7:a1:d1:02:f2:ac:87:8b:b9:bf:63:75:c6:f6: 23:0a:88:d2:e7:fb:b0:f9:08:c2:6f:3b:7c:24:88:d9:dd:44: c3:66:19:4e:1a:9e:bd:9e:94:0d:43:25:dd:f7:ce:13:0e:fa: 48:7d:48:bb:6f:86:65:e8:15:4a:13:fa:9b:4b:37:e1:32:78: b9:7b:88:53 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEorJwNoyPSXGmZmxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxMjE2MzkwOFoXDTI3MDkxNTE2MzkwOFowLzEtMCsGA1UEAxMk YzJjYjgzMjctZWUzZS00NzdjLTk5MGMtMTE4ZTA0MGIyZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKDZBh/r2RAwJwzWpba/c27Rnu8a+9KuTOLs 4lpnC5+uXc+7lg+E1leilFaOXJUbyEvb6PMsEGBiRBjGPH1oXI/fIyCz1RdfKkQx bA+ZEuGpOxMwDXYBOrEB1mZ+nM+LU58uOcZc+6LiER2dkdwin5JRfN5v0da0reDA HiIbwCXPVzMFzczWCnp4AOy28GMwraTFvzRhlOc5NXNyxnedMEJh8pJZOsn2M5GK JJJ+mIlVdohUXWy8RUvgT6FNaB4jr1Rg/R1I278baC+wiv8j0zPTx6nhOFYMJO+7 stb0tFvpwqkD9AJSGYm88K5lwFZd+1Ju2ZnTAkR+fk902hNeEwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFP69iQCgZyt3WZ04v08L3+XdC7alMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j MmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQwYjJkZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2MyY2I4MzI3LWVlM2UtNDc3Yy05 OTBjLTExOGUwNDBiMmRlNi9jMmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQw YjJkZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBASYVgADBAOqdcADBATGR1AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhOiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE0HRhQLbGY6H+zeDj+KagnsKo2Gh5r3 mj1VEBQ+t64Oo12aZdYAA5OMVIfLNdsUyvr91h/0FAMEM8lvEHcqQdHHSY1eFcHu pJOJUn9WZps0dnFxiVF1CpGb/oZ9kOJuYQ4GweXyW1H+/hCzRACWP3UkJOMKqnh4 VKZUpjHuQeLnHk5kLWBLAYQ/RynNC4XFCbheyM+DuiZJxYb3gEW1G/I0hioybeYo /cvJJrq+eXE+gG6Vn9JKxYqnodEC8qyHi7m/Y3XG9iMKiNLn+7D5CMJvO3wkiNnd RMNmGU4anr2elA1DJd33zhMO+kh9SLtvhmXoFUoT+ptLN+EyeLl7iFM= -----END CERTIFICATE-----Generated at Sun Oct 26 00:43:01 2025 by rpki-client