$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer File: 73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer (raw, json) Hash identifier: Jmx8YiGOnFhu1Y8gSALQZFlQH8gsqCFH2Wr9cBIMKkc= Subject key identifier: F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AA9B93EBAD092F4797102E760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 23.176.8.0/24 IP: 2602:f91b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3e:ba:d0:92:f4:79:71:02:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=73b0221a-01e7-4f40-8f9b-6e4cf92c6efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bb:e8:45:e0:a8:78:eb:84:23:2e:8a:ef:4e: 52:09:5d:e0:e8:4f:df:c1:46:a6:8b:3c:6f:7e:43: d2:bc:40:da:5c:06:d7:74:b4:32:c1:e2:0f:6e:12: ec:01:40:50:16:b9:04:0c:13:18:ff:c4:68:37:cc: dc:5b:ea:9c:a6:8a:81:a4:f6:da:a5:a2:5a:92:8d: a2:0b:b3:48:fa:83:8e:a3:db:74:96:6b:b1:0f:14: 29:5e:8a:a0:5c:00:cf:69:72:36:7b:75:af:0b:21: 4c:a8:cb:23:7e:79:3f:40:86:3b:1e:4f:e8:3a:05: ee:64:a7:86:19:00:9f:f1:c6:74:0f:32:10:9e:93: fe:44:62:21:58:7c:9d:e8:1f:3a:da:f0:28:53:75: 76:7e:cf:e5:48:a4:af:e2:9f:f1:7d:bf:dc:52:25: 9e:73:9c:65:e0:7e:87:3e:90:5b:6e:31:d2:0c:dd: a9:f6:2d:7e:4a:27:59:e4:c7:80:9d:35:a7:30:14: 92:a8:92:7d:d0:f3:fb:61:9f:aa:d1:92:87:9b:54: 72:71:6c:34:aa:ff:36:d4:5e:39:7b:ff:1a:ca:24: b0:7c:57:f5:d3:68:47:ef:99:25:33:9f:6a:cb:b6: 63:fe:92:80:ba:e6:f4:cf:b3:a7:75:73:95:c6:58: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.176.8.0/24 IPv6: 2602:f91b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ec:f9:d4:81:d0:ff:66:a2:a1:a8:9d:fc:5c:67:99:ea:6c: f0:36:46:61:41:77:4e:25:2d:7b:3b:a2:7f:4a:3a:6a:ab:4b: c7:f6:5f:db:57:aa:e9:22:42:e0:37:f7:ad:14:7d:0e:eb:cb: 2d:bb:5c:d3:ca:8e:05:c7:90:fb:90:44:a6:b4:bc:9b:a0:61: 59:d1:66:ca:28:3a:a2:98:6b:24:df:a3:32:21:4f:86:20:e9: c4:f8:97:ee:ef:9b:01:9e:e4:c6:57:7c:0b:a7:c0:39:18:45: b4:86:cb:c2:7a:ee:bf:00:c6:cb:55:d4:28:8f:48:af:4b:91: 16:8c:de:be:9f:2b:6d:12:38:16:05:5e:92:ec:11:78:c8:a6: 2a:ef:29:15:19:27:5f:24:88:24:0c:6d:0d:d3:1b:0a:a7:d9: 0c:89:95:a5:87:9f:52:e8:fd:36:74:74:c3:bb:67:97:67:dc: ba:34:c8:00:03:d1:1a:77:a8:7d:95:d0:3c:b2:16:a5:15:3d: e7:1d:d2:5d:68:5c:d7:53:fa:d6:4a:9f:30:08:68:5d:0e:2e: 25:aa:cc:ee:b1:6c:de:90:f2:56:1b:00:6c:fd:5d:79:3d:d3: a5:93:33:67:9e:bd:f6:db:5d:20:6a:ae:71:bb:4d:22:5f:ca: 5f:cd:e0:6d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqpuT660JL0eXEC52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk NzNiMDIyMWEtMDFlNy00ZjQwLThmOWItNmU0Y2Y5MmM2ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLvoReCoeOuEIy6K705SCV3g6E/fwUamizxv fkPSvEDaXAbXdLQyweIPbhLsAUBQFrkEDBMY/8RoN8zcW+qcpoqBpPbapaJako2i C7NI+oOOo9t0lmuxDxQpXoqgXADPaXI2e3WvCyFMqMsjfnk/QIY7Hk/oOgXuZKeG GQCf8cZ0DzIQnpP+RGIhWHyd6B862vAoU3V2fs/lSKSv4p/xfb/cUiWec5xl4H6H PpBbbjHSDN2p9i1+SidZ5MeAnTWnMBSSqJJ90PP7YZ+q0ZKHm1RycWw0qv821F45 e/8ayiSwfFf102hH75klM59qy7Zj/pKAuub0z7OndXOVxlgwBwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPDyFTB8gtNkbnXOILTN4jIwXywGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 M2IwMjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRjZjkyYzZlZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzczYjAyMjFhLTAxZTctNGY0MC04 ZjliLTZlNGNmOTJjNmVmYS83M2IwMjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRjZjky YzZlZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsAgwDgQCAAIwCAMGACYC+RsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJvs+dSB0P9moqGonfxcZ5nqbPA2RmFBd04lLXs7on9KOmqrS8f2X9tXqukiQuA3 960UfQ7ryy27XNPKjgXHkPuQRKa0vJugYVnRZsooOqKYayTfozIhT4Yg6cT4l+7v mwGe5MZXfAunwDkYRbSGy8J67r8AxstV1CiPSK9LkRaM3r6fK20SOBYFXpLsEXjI pirvKRUZJ18kiCQMbQ3TGwqn2QyJlaWHn1Lo/TZ0dMO7Z5dn3Lo0yAAD0Rp3qH2V 0DyyFqUVPecd0l1oXNdT+tZKnzAIaF0OLiWqzO6xbN6Q8lYbAGz9XXk906WTM2ee vfbbXSBqrnG7TSJfyl/N4G0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:54 2025 by rpki-client