$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer File: 4ec5b803-bc8c-4215-9539-153e00d47df8.cer (raw, json) Hash identifier: TQeNS+SI7GgZasTGGPjHI1v29g4rrGVIIvA9MI5P4vk= Subject key identifier: 31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A98F921E8849B3360C1753CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 00:45:36 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 393463 IP: 205.153.44.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:f9:21:e8:84:9b:33:60:c1:75:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 22 00:45:36 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=4ec5b803-bc8c-4215-9539-153e00d47df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:f8:51:c5:3b:50:26:41:1d:77:4f:9d:65: eb:e8:54:39:84:bf:6d:08:a7:b5:64:ed:35:c2:b6: 6a:85:8a:83:a4:fb:12:20:8f:07:49:fe:5b:52:ce: 56:c6:a7:35:e9:cd:ac:29:e7:cc:8f:ed:be:a6:3c: 00:01:8c:d4:05:8b:e7:a6:fe:c3:66:5a:6f:15:99: e0:d5:c5:81:48:e7:52:3c:a6:18:5f:20:b2:80:4c: 9d:be:27:d1:aa:f5:48:1a:88:9b:ab:db:b9:d6:b1: 6b:14:cf:af:37:5c:0e:7a:78:0f:a1:c3:31:16:07: 39:7f:66:3d:52:6f:ed:7e:fe:2f:c9:19:1a:a5:46: 36:3b:24:c4:a9:56:18:ae:bf:84:d0:3d:68:8d:bf: 73:29:79:f5:11:da:69:29:38:bc:d2:48:ea:5a:d4: 6e:f5:34:a6:4f:b3:5b:41:d8:3b:f3:d5:1e:bd:3e: be:99:1e:97:ef:94:e2:90:14:79:d0:37:e9:f2:6e: 47:5a:b4:03:75:fc:18:90:1b:e7:3c:b8:54:22:46: bd:1c:8d:ac:b5:49:6e:21:4a:d6:66:71:5c:3c:8c: 8e:c6:c2:b5:a0:3e:8a:48:d8:49:da:38:ec:40:ea: 90:3c:ef:51:73:ee:4d:d3:2f:4d:b9:8d:b2:04:ed: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 205.153.44.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393463 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:22:bc:b2:da:97:0f:cb:f0:1b:32:67:cd:65:9e:c9:97:43: b1:07:2d:2a:50:de:e2:19:d3:2d:87:a7:a7:2f:23:e2:b3:86: 7b:70:b2:c8:53:d3:28:ec:75:5d:e4:a0:3c:9a:51:2d:8c:0c: 61:a6:bc:9b:89:34:0b:6c:a1:13:2d:a1:03:ad:92:76:8b:c8: cc:c6:d2:23:eb:da:56:ec:e5:32:25:01:98:c6:98:d0:9e:e5: ad:9d:07:10:01:ae:65:f3:b9:d1:37:c7:b0:90:18:8a:ea:60: 76:90:92:64:ab:77:a4:40:c3:75:74:cf:7a:cc:74:cb:21:db: 7d:38:82:49:e2:c7:1e:9c:c2:28:d7:97:ad:3f:06:3c:1a:e2: 4b:e0:24:76:86:09:5c:c9:22:22:92:60:e0:5b:9f:07:53:85: f0:cf:b9:97:86:ae:7a:6a:a6:31:f2:04:d0:f5:61:ae:6d:f8: e1:1e:21:b9:c0:71:15:17:c6:01:a6:21:db:5c:b5:86:9d:ae: b4:e7:d0:85:29:95:d9:f8:f6:d8:8e:fe:d1:cb:54:c2:6a:0e: c5:c3:0f:ba:d6:9b:5e:34:6e:90:aa:d5:01:eb:bd:4d:6d:d6: 18:8d:ce:26:63:c1:2f:a5:cd:c9:cf:0a:6a:ce:02:93:38:f5: 83:99:5f:e6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqY+SHohJszYMF1PKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcyMjAwNDUzNloXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk NGVjNWI4MDMtYmM4Yy00MjE1LTk1MzktMTUzZTAwZDQ3ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPD4UcU7UCZBHXdPnWXr6FQ5hL9tCKe1ZO01 wrZqhYqDpPsSII8HSf5bUs5Wxqc16c2sKefMj+2+pjwAAYzUBYvnpv7DZlpvFZng 1cWBSOdSPKYYXyCygEydvifRqvVIGoibq9u51rFrFM+vN1wOengPocMxFgc5f2Y9 Um/tfv4vyRkapUY2OyTEqVYYrr+E0D1ojb9zKXn1EdppKTi80kjqWtRu9TSmT7Nb Qdg789UevT6+mR6X75TikBR50Dfp8m5HWrQDdfwYkBvnPLhUIka9HI2stUluIUrW ZnFcPIyOxsK1oD6KSNhJ2jjsQOqQPO9Rc+5N0y9NuY2yBO0vxQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDGI4Xj2ON8dOx9cqv8uXB+R12CqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 ZWM1YjgwMy1iYzhjLTQyMTUtOTUzOS0xNTNlMDBkNDdkZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzRlYzViODAzLWJjOGMtNDIxNS05 NTM5LTE1M2UwMGQ0N2RmOC80ZWM1YjgwMy1iYzhjLTQyMTUtOTUzOS0xNTNlMDBk NDdkZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALNmSwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgD3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABAivLLalw/L8BsyZ81lnsmXQ7EHLSpQ3uIZ0y2Hp6cvI+Kz hntwsshT0yjsdV3koDyaUS2MDGGmvJuJNAtsoRMtoQOtknaLyMzG0iPr2lbs5TIl AZjGmNCe5a2dBxABrmXzudE3x7CQGIrqYHaQkmSrd6RAw3V0z3rMdMsh2304gkni xx6cwijXl60/Bjwa4kvgJHaGCVzJIiKSYOBbnwdThfDPuZeGrnpqpjHyBND1Ya5t +OEeIbnAcRUXxgGmIdtctYadrrTn0IUpldn49tiO/tHLVMJqDsXDD7rWm140bpCq 1QHrvU1t1hiNziZjwS+lzcnPCmrOApM49YOZX+Y= -----END CERTIFICATE-----Generated at Thu Aug 7 03:56:20 2025 by rpki-client