$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer File: 65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer (raw, json) Hash identifier: K+GSdngse9zdm9aAf1EQPA/p9Mvl1FNI9p7NOMTsaS8= Subject key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858498497669B6A826E233A0047A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 00:45:35 +0000 Certificate not after: Sun 18 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 54939 IP: 23.153.136.0/24 IP: 2602:814:1000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:97:66:9b:6a:82:6e:23:3a:00:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 14 00:45:35 2025 GMT Not After : Jul 18 00:45:35 2027 GMT Subject: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:c9:67:8d:d6:3f:e1:5a:07:1b:1b:16:6e: 27:bf:fe:b7:2b:1b:35:2b:6e:24:c2:a1:71:56:4b: 6b:c3:8a:93:83:3a:21:d9:f4:b4:e2:c2:3a:d4:4e: bb:4f:af:e5:41:ae:f2:18:e8:3f:d8:3a:fe:78:b0: c8:ea:4a:46:98:b6:fc:eb:5d:9d:5a:cf:13:c6:1a: 3d:09:b4:21:83:94:e0:75:d7:c6:c1:20:d6:66:8e: 61:63:d9:58:82:20:4e:77:f5:89:38:35:86:00:1d: 06:5f:46:47:8e:0a:8a:06:39:42:aa:c5:dc:72:e4: 2e:99:2e:e4:d3:a3:d5:3a:cf:93:01:be:02:2d:0b: 6c:7c:c5:2d:aa:2f:2c:db:b0:67:4b:03:85:9c:e5: bd:24:35:77:c1:f4:dd:dc:ff:37:94:df:d5:1a:51: 58:c0:33:1a:ab:3e:c3:c0:32:b3:d4:c6:a0:90:3c: 62:b7:07:cb:b6:42:1e:a2:58:c8:3a:28:80:87:20: 68:e4:07:d8:e5:00:45:71:1b:29:32:43:b4:1e:2b: 7f:a9:a5:88:05:58:cd:f5:83:2e:90:a1:34:ab:c8: 01:4b:42:2c:59:2c:17:3b:f5:62:0e:b2:41:3d:63: df:68:8d:fb:05:56:a4:dc:52:92:e6:97:4c:ab:f7: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.153.136.0/24 IPv6: 2602:814:1000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:89:5d:ab:d4:3f:d3:77:39:9b:e9:d9:c4:5f:8e:ed:7a:32: 95:31:30:41:33:e6:fc:34:5d:63:a5:d9:93:c0:8b:5d:d5:01: d6:74:28:cc:b3:49:2c:36:6a:e7:52:b4:44:a4:66:13:4c:1a: 19:2c:8d:d5:a3:1c:f6:3a:f4:94:75:d7:fc:57:14:a9:72:7c: e9:27:f6:62:55:4d:5a:06:12:78:3d:d8:b5:99:2a:da:ad:cc: 33:bb:6b:cc:94:95:4e:f3:b0:70:f8:f9:06:7f:1b:06:8f:61: 76:28:38:e2:f1:9e:b0:9e:b4:66:1b:bb:02:46:5b:50:8b:98: 5b:8e:93:3d:26:5c:42:85:4c:d5:ab:f2:15:c1:6b:1f:82:7a: 8d:c3:94:70:61:de:c1:0b:ea:f0:7e:0d:02:7e:50:23:c9:d1: 0e:b7:0e:8c:40:3d:09:b0:ad:d1:40:68:19:8b:24:88:be:8d: d8:2c:34:04:67:54:9d:e0:d6:d3:39:98:55:3e:b9:93:c8:80: 3b:01:d0:08:f6:3d:96:bc:ea:e7:e2:0d:92:bd:25:07:66:04: ce:06:ff:4e:54:81:1a:60:63:06:5b:b0:16:55:0f:3f:06:a4: f0:60:92:ca:3f:71:c4:a0:57:f0:ed:05:f2:53:36:8f:5a:48: ba:e0:bf:d8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmEl2abaoJuIzoAR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQxNDAwNDUzNVoXDTI3MDcxODAwNDUzNVowLzEtMCsGA1UEAxMk NjUxOTJmNTMtOGIwNy00YzNmLWE2YjAtZTllNDIyOTJkMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJfJZ43WP+FaBxsbFm4nv/63Kxs1K24kwqFx Vktrw4qTgzoh2fS04sI61E67T6/lQa7yGOg/2Dr+eLDI6kpGmLb8612dWs8Txho9 CbQhg5TgddfGwSDWZo5hY9lYgiBOd/WJODWGAB0GX0ZHjgqKBjlCqsXccuQumS7k 06PVOs+TAb4CLQtsfMUtqi8s27BnSwOFnOW9JDV3wfTd3P83lN/VGlFYwDMaqz7D wDKz1MagkDxitwfLtkIeoljIOiiAhyBo5AfY5QBFcRspMkO0Hit/qaWIBVjN9YMu kKE0q8gBS0IsWSwXO/ViDrJBPWPfaI37BVak3FKS5pdMq/elCQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEJfnfvjnRSNB8Q1Fs7lJQ049hTiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 NTE5MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0MjI5MmQzMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY1MTkyZjUzLThiMDctNGMzZi1h NmIwLWU5ZTQyMjkyZDMxYy82NTE5MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0MjI5 MmQzMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmYgwDgQCAAIwCAMGACYCCBQQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDWmzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmiV2r1D/Tdzmb6dnEX47tejKV MTBBM+b8NF1jpdmTwItd1QHWdCjMs0ksNmrnUrREpGYTTBoZLI3Voxz2OvSUddf8 VxSpcnzpJ/ZiVU1aBhJ4Pdi1mSrarcwzu2vMlJVO87Bw+PkGfxsGj2F2KDji8Z6w nrRmG7sCRltQi5hbjpM9JlxChUzVq/IVwWsfgnqNw5RwYd7BC+rwfg0CflAjydEO tw6MQD0JsK3RQGgZiySIvo3YLDQEZ1Sd4NbTOZhVPrmTyIA7AdAI9j2WvOrn4g2S vSUHZgTOBv9OVIEaYGMGW7AWVQ8/BqTwYJLKP3HEoFfw7QXyUzaPWki64L/Y -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:17 2025 by rpki-client