$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer File: 503450af-ac6f-4861-96c0-24f7e8724111.cer (raw, json) Hash identifier: lRTO17Bb1oqhvbBRrtWj5mn/tJyn/ntn0uHNZnI+5JA= Subject key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AB1667A5C1CE990DD52F2CD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Jul 2025 18:45:19 +0000 Certificate not after: Fri 02 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 22961 IP: 23.146.120.0/23 IP: 74.122.4.0/24 IP: 2602:29d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:66:7a:5c:1c:e9:90:dd:52:f2:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 30 18:45:19 2025 GMT Not After : Apr 2 00:45:33 2027 GMT Subject: CN=503450af-ac6f-4861-96c0-24f7e8724111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:db:90:f7:0c:50:c6:83:05:18:81:5c:61: 16:45:98:0a:6b:c3:45:5c:9b:0a:71:0d:0d:42:c6: 45:09:1b:83:4a:ef:33:19:e1:47:b4:bc:88:1c:f7: de:02:b9:e5:7f:e2:88:36:f1:e7:54:f1:3e:80:76: 0b:cf:55:9e:5a:aa:ab:16:c5:ae:5b:4a:ba:90:43: c6:78:c0:63:06:04:14:85:9d:10:90:16:7e:98:98: 32:b9:a2:c5:cd:3d:94:10:fd:f1:44:5a:08:a6:e2: 06:ab:8f:4e:56:d1:52:ed:49:a6:ee:0f:87:74:97: fe:f7:9f:53:69:d3:13:4d:c4:dc:39:0f:1e:d8:6a: 3a:ae:d1:ee:55:af:f4:5a:23:f9:79:98:40:5d:c4: 48:0e:9a:e5:15:5e:65:7b:56:18:f1:33:2f:dc:6a: b7:dd:55:06:01:1f:67:86:fa:f7:07:31:89:34:ad: 2a:cb:80:7c:e8:a8:d2:87:6b:ba:d6:5c:ea:fb:b0: a6:19:ff:fc:67:46:bf:6a:4e:62:e1:b3:08:41:c6: 5c:fc:a2:a7:da:4d:50:02:0a:bc:a5:3b:e1:1a:ac: 3a:b8:8c:b0:94:3d:43:c2:2a:28:21:7b:4b:a5:1a: 15:66:d0:d3:01:1b:4e:e1:8d:f1:76:2b:2c:a9:55: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.120.0/23 74.122.4.0/24 IPv6: 2602:29d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22961 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:98:55:ec:11:9a:77:26:1b:39:56:5a:63:2b:d0:ab:da:4f: d9:0e:45:02:bc:34:24:07:21:f3:e9:3f:29:7d:7a:d2:9a:02: 4d:d3:d8:bb:fd:01:05:3b:e5:80:b7:9f:8d:18:35:e1:72:94: 50:53:0d:8e:63:8a:fa:fb:74:07:0c:9f:96:68:59:d5:76:ea: be:fb:bd:2f:c2:8c:91:b1:7f:7c:40:61:bc:56:78:a3:77:99: 70:3a:59:24:9c:d7:76:89:16:45:ee:f9:9c:06:4e:2f:93:78: 61:b5:9c:2f:93:69:7e:48:19:de:df:4c:5d:60:06:60:b3:2f: 90:ae:ec:1e:5f:db:bd:5b:b8:82:49:b6:2b:dd:7d:22:cc:45: 59:38:94:87:8a:74:9a:78:bc:5f:38:e1:aa:0e:6f:2a:0a:4f: fb:b4:af:93:bb:e8:5f:5a:f4:86:c7:51:c1:d1:2c:50:58:10: 20:91:f9:19:6b:2c:eb:e4:0a:2e:62:9b:cb:8f:69:37:f4:bf: 93:7c:fc:a2:3b:05:04:00:27:97:93:da:52:dc:6c:9c:5e:26: b2:db:87:37:4f:ff:7e:c3:2a:df:e3:33:64:f9:28:f6:22:1a: 5e:b9:44:5c:af:3c:11:79:ea:78:d2:d9:be:1b:a7:7f:75:f3: e2:15:8b:3a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEqxZnpcHOmQ3VLyzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDczMDE4NDUxOVoXDTI3MDQwMjAwNDUzM1owLzEtMCsGA1UEAxMk NTAzNDUwYWYtYWM2Zi00ODYxLTk2YzAtMjRmN2U4NzI0MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXbkPcMUMaDBRiBXGEWRZgKa8NFXJsKcQ0N QsZFCRuDSu8zGeFHtLyIHPfeArnlf+KINvHnVPE+gHYLz1WeWqqrFsWuW0q6kEPG eMBjBgQUhZ0QkBZ+mJgyuaLFzT2UEP3xRFoIpuIGq49OVtFS7Umm7g+HdJf+959T adMTTcTcOQ8e2Go6rtHuVa/0WiP5eZhAXcRIDprlFV5le1YY8TMv3Gq33VUGAR9n hvr3BzGJNK0qy4B86KjSh2u61lzq+7CmGf/8Z0a/ak5i4bMIQcZc/KKn2k1QAgq8 pTvhGqw6uIywlD1DwiooIXtLpRoVZtDTARtO4Y3xdissqVXqBwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPljGpEr96BqXYIxQAwh1f277fq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3MjQxMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzUwMzQ1MGFmLWFjNmYtNDg2MS05 NmMwLTI0ZjdlODcyNDExMS81MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3 MjQxMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXkngDBABKegQwDgQCAAIwCAMGBCYCAp0AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlmxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC2YVewRmncmGzlWWmMr 0KvaT9kORQK8NCQHIfPpPyl9etKaAk3T2Lv9AQU75YC3n40YNeFylFBTDY5jivr7 dAcMn5ZoWdV26r77vS/CjJGxf3xAYbxWeKN3mXA6WSSc13aJFkXu+ZwGTi+TeGG1 nC+TaX5IGd7fTF1gBmCzL5Cu7B5f271buIJJtivdfSLMRVk4lIeKdJp4vF844aoO byoKT/u0r5O76F9a9IbHUcHRLFBYECCR+RlrLOvkCi5im8uPaTf0v5N8/KI7BQQA J5eT2lLcbJxeJrLbhzdP/37DKt/jM2T5KPYiGl65RFyvPBF56njS2b4bp3918+IV izo= -----END CERTIFICATE-----Generated at Mon Aug 4 08:24:25 2025 by rpki-client