$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer File: 210656ce-d9a2-443d-996e-405a0c9439dc.cer (raw, json) Hash identifier: VTIO7OZlKfNSbt9g5J2x0Byc3zkefzt1Oxd25u2iuB0= Subject key identifier: 63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AAF4E81D520855FA0C7D38A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Jul 2025 00:45:24 +0000 Certificate not after: Tue 02 Nov 2027 00:45:24 +0000 Subordinate resources: IP: 23.150.152.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:af:4e:81:d5:20:85:5f:a0:c7:d3:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 30 00:45:24 2025 GMT Not After : Nov 2 00:45:24 2027 GMT Subject: CN=210656ce-d9a2-443d-996e-405a0c9439dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:46:ed:62:29:49:d7:22:c8:15:10:46:ed:f1: d8:3f:61:93:dc:94:9d:d0:29:9e:8d:f7:6b:fb:20: 8e:88:07:08:4a:f9:53:ba:ff:52:5f:21:25:18:d6: c9:83:c0:a7:25:ea:92:d0:70:cf:04:09:d2:d5:b2: be:dc:30:93:2b:e3:e6:60:42:3a:5d:4c:ea:70:e1: e1:5e:94:90:ff:f8:bc:66:c6:5b:1c:db:a2:84:26: 06:28:dc:41:b9:3e:3e:42:71:fc:36:54:90:a6:5b: 06:01:15:29:e0:a2:c3:fa:c3:d7:e8:89:1f:d5:95: cf:53:20:0b:c9:21:8e:b0:56:be:fb:11:68:b6:1b: ec:24:a1:50:1f:5a:3f:58:b5:91:fa:86:93:8a:1f: 7b:c3:af:e9:8f:4e:8d:4f:0f:62:b3:15:e0:66:45: 2d:3c:df:2a:c5:fd:5d:e9:00:da:fa:7b:f2:2f:d2: 0d:e1:d6:1d:49:46:8d:53:51:61:6d:85:8e:7f:7e: 62:da:0f:e8:bf:6c:8a:eb:0f:1b:4f:40:91:ce:ce: 51:62:9a:df:1d:bf:a3:d3:00:75:3c:1f:01:5b:33: 5b:85:d7:d2:c4:3a:72:a1:8c:62:e6:9c:de:c0:ae: 29:87:80:33:99:01:a1:69:09:d6:78:a6:21:f8:54: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.150.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a0:91:0a:e8:3c:27:36:33:c3:4f:5d:d0:1e:d8:c2:34:0d: 8b:e0:8f:15:5f:f2:94:a9:35:60:46:32:f5:d2:d5:7f:de:ad: ee:97:c5:91:10:30:d1:43:75:e3:8a:fe:73:f9:3b:43:39:80: ea:84:eb:c7:b6:5a:3b:34:1f:27:d1:17:70:3a:08:75:f5:4f: 44:1f:92:16:ec:1b:1c:29:82:2f:1e:7b:51:d3:5e:3a:79:b4: 01:f5:44:d8:a3:3f:cd:b3:f8:0f:1d:33:a6:da:73:ce:cf:83: 7b:3a:da:f6:41:03:64:0c:41:c6:3d:d6:df:d3:ba:d7:66:b8: 1a:82:71:e1:22:de:f7:6c:73:b8:b7:eb:e4:16:04:9b:b1:7d: 9a:70:eb:04:c3:0e:9d:eb:dc:53:5e:78:d9:92:33:ee:47:28: ef:bb:de:bb:62:80:ba:34:d2:52:44:6a:21:4f:99:65:bc:aa: d7:66:63:32:5e:06:7e:3b:4c:3b:19:d5:81:61:cc:51:37:64: 55:00:4a:58:cb:13:fc:c3:1f:a4:3c:c3:66:35:c0:42:0f:0f: 43:85:11:90:de:a6:75:92:72:e3:5f:99:fc:7b:17:d9:e3:96: 2c:c9:c1:bf:95:d5:68:1d:17:ed:29:30:03:7e:b7:18:f9:a4: 27:49:fe:3a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqvToHVIIVfoMfTigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDczMDAwNDUyNFoXDTI3MTEwMjAwNDUyNFowLzEtMCsGA1UEAxMk MjEwNjU2Y2UtZDlhMi00NDNkLTk5NmUtNDA1YTBjOTQzOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70btYilJ1yLIFRBG7fHYP2GT3JSd0Cmejfdr +yCOiAcISvlTuv9SXyElGNbJg8CnJeqS0HDPBAnS1bK+3DCTK+PmYEI6XUzqcOHh XpSQ//i8ZsZbHNuihCYGKNxBuT4+QnH8NlSQplsGARUp4KLD+sPX6Ikf1ZXPUyAL ySGOsFa++xFothvsJKFQH1o/WLWR+oaTih97w6/pj06NTw9isxXgZkUtPN8qxf1d 6QDa+nvyL9IN4dYdSUaNU1FhbYWOf35i2g/ov2yK6w8bT0CRzs5RYprfHb+j0wB1 PB8BWzNbhdfSxDpyoYxi5pzewK4ph4AzmQGhaQnWeKYh+FTHUwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGMlo9nNHg/h1T71PNUeY34a5jO0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y MTA2NTZjZS1kOWEyLTQ0M2QtOTk2ZS00MDVhMGM5NDM5ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzIxMDY1NmNlLWQ5YTItNDQzZC05 OTZlLTQwNWEwYzk0MzlkYy8yMTA2NTZjZS1kOWEyLTQ0M2QtOTk2ZS00MDVhMGM5 NDM5ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXlpgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJqCRCug8JzYzw09d0B7Y wjQNi+CPFV/ylKk1YEYy9dLVf96t7pfFkRAw0UN144r+c/k7QzmA6oTrx7ZaOzQf J9EXcDoIdfVPRB+SFuwbHCmCLx57UdNeOnm0AfVE2KM/zbP4Dx0zptpzzs+Dezra 9kEDZAxBxj3W39O612a4GoJx4SLe92xzuLfr5BYEm7F9mnDrBMMOnevcU1542ZIz 7kco77veu2KAujTSUkRqIU+ZZbyq12ZjMl4GfjtMOxnVgWHMUTdkVQBKWMsT/MMf pDzDZjXAQg8PQ4URkN6mdZJy41+Z/HsX2eOWLMnBv5XVaB0X7SkwA363GPmkJ0n+ Og== -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:26 2025 by rpki-client