$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer File: 088404f8-82fb-4330-8ac4-ad17a88d2e28.cer (raw, json) Hash identifier: TuSsv+TjiARJQBqfOVyQOglc96+QOCQB//B+wcIogmY= Subject key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AD664167AB469F7B5EFFA2420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 00:45:24 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 206.57.128.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:64:16:7a:b4:69:f7:b5:ef:fa:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 13 00:45:24 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:5d:a6:5f:84:f6:5f:4b:8a:e7:eb:4d:cb: 2a:fe:43:3e:25:06:bf:54:06:0f:0d:93:46:26:57: e9:b7:a0:d3:68:bc:52:6e:92:48:e1:d6:f9:c2:60: 10:b9:43:33:ec:89:d6:ca:95:f3:8a:d7:75:4e:37: d2:c9:93:81:ac:bb:1b:f6:72:2b:d9:78:13:d2:1e: bb:0e:6c:1f:b5:0d:59:b4:72:69:24:82:9e:1d:fa: a5:a9:b2:57:b1:ad:b7:2f:e5:c8:36:59:a7:7e:3b: 05:4c:0f:71:0b:e2:c8:2a:0f:07:73:13:4b:3a:c1: 99:bc:6f:76:59:07:80:5d:55:11:e8:55:b5:e2:1e: 8b:f2:16:ed:be:7c:8e:f1:17:fe:6b:e0:98:01:34: 8c:35:f5:0f:ab:a1:65:87:ca:ac:17:49:7a:9c:61: 58:91:f7:d8:4b:43:af:86:46:a2:63:47:61:f0:bd: 71:68:e6:4a:b3:d3:07:4e:5c:89:d4:44:af:f0:0c: ad:37:97:c8:77:c4:0e:a0:f3:0e:79:dc:87:74:b6: 64:2e:59:98:6b:12:b6:46:7f:99:61:5c:9f:c0:66: a8:0d:5f:d8:59:d5:c1:f1:e0:34:99:64:7d:88:e0: f6:d4:08:5d:65:60:ba:19:3c:8f:44:68:7f:dd:2f: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.57.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:34:1c:2d:74:06:c4:66:11:e2:a5:f5:49:94:6c:43:bd:64: 28:3c:02:59:6f:20:03:6a:28:c8:48:5b:dd:88:a5:fd:2f:02: af:17:d3:b4:06:ee:eb:bf:9a:00:8c:06:a9:0b:f2:47:04:8b: 80:0f:6b:4f:1a:c2:7e:4d:28:7e:50:07:88:ee:2f:7f:77:41: 79:b3:be:4e:f8:61:0f:f3:43:ed:c0:ab:98:97:0f:4f:6a:03: 88:87:4f:38:0c:a5:48:07:61:2b:54:80:0e:10:8c:be:bf:1b: d1:e9:bb:ba:5b:86:7a:ff:c4:5b:ff:b8:d4:c8:19:f7:d9:0f: de:7e:dc:29:c9:d5:7f:cd:29:89:51:c7:29:7e:d4:9c:9d:6f: e9:9c:b0:84:bf:7f:ad:7b:42:d7:6c:89:dd:38:72:52:3e:d9: 7a:75:ac:cf:79:60:dc:fa:7f:5c:0e:7c:f7:7f:48:49:93:c5: 09:0d:d2:79:91:da:95:04:2e:96:1b:81:2f:be:a8:74:fe:ad: 0d:aa:92:07:84:71:09:d1:11:c8:0d:18:06:1f:18:e8:31:23: c3:30:26:73:58:34:a0:da:17:53:61:dc:f8:66:dd:6d:9b:13: 84:c8:f4:ca:eb:07:4c:be:3e:aa:41:4e:60:66:e8:11:c2:18: 35:36:40:43 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErWZBZ6tGn3te/6JCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxMzAwNDUyNFoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk MDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQyZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Rdpl+E9l9LiufrTcsq/kM+JQa/VAYPDZNG Jlfpt6DTaLxSbpJI4db5wmAQuUMz7InWypXzitd1TjfSyZOBrLsb9nIr2XgT0h67 DmwftQ1ZtHJpJIKeHfqlqbJXsa23L+XINlmnfjsFTA9xC+LIKg8HcxNLOsGZvG92 WQeAXVUR6FW14h6L8hbtvnyO8Rf+a+CYATSMNfUPq6Flh8qsF0l6nGFYkffYS0Ov hkaiY0dh8L1xaOZKs9MHTlyJ1ESv8AytN5fId8QOoPMOedyHdLZkLlmYaxK2Rn+Z YVyfwGaoDV/YWdXB8eA0mWR9iOD21AhdZWC6GTyPRGh/3S/rowIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGsWOJZgr9VSlNryYZ9jQboy+eRcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w ODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA4ODQwNGY4LTgyZmItNDMzMC04 YWM0LWFkMTdhODhkMmUyOC8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4 ZDJlMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAfOOYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcjQcLXQGxGYR4qX1SZRs Q71kKDwCWW8gA2ooyEhb3Yil/S8CrxfTtAbu67+aAIwGqQvyRwSLgA9rTxrCfk0o flAHiO4vf3dBebO+TvhhD/ND7cCrmJcPT2oDiIdPOAylSAdhK1SADhCMvr8b0em7 uluGev/EW/+41MgZ99kP3n7cKcnVf80piVHHKX7UnJ1v6ZywhL9/rXtC12yJ3Thy Uj7ZenWsz3lg3Pp/XA58939ISZPFCQ3SeZHalQQulhuBL76odP6tDaqSB4RxCdER yA0YBh8Y6DEjwzAmc1g0oNoXU2Hc+GbdbZsThMj0yusHTL4+qkFOYGboEcIYNTZA Qw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:39 2025 by rpki-client