$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer File: 693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer (raw, json) Hash identifier: N+Xu9X0mlA79XonSs7xdNgbxo0IT8WezOAPGxrMqK/M= Subject key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B784FBF156664982A1CC54A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 00:45:22 +0000 Certificate not after: Thu 13 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 72.250.176.0/20 IP: 2607:19c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:4f:bf:15:66:64:98:2a:1c:c5:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 10 00:45:22 2025 GMT Not After : Jan 13 01:45:22 2028 GMT Subject: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:72:7b:e5:57:bb:cc:96:9e:19:f3:0b:f3: 52:b6:d8:cf:32:f9:54:96:a6:67:a6:17:2d:91:f6: ca:02:aa:fc:03:6b:2a:c0:ab:1c:4f:06:5a:24:ba: c8:7a:bd:ce:c5:e9:94:78:f5:cd:40:8a:d6:94:3a: 7a:f7:db:1b:13:66:4b:45:6d:b3:07:17:49:ce:f0: 4a:4f:96:d8:f0:f0:a2:ac:05:66:28:f6:38:8a:ab: 99:34:32:b9:db:51:5e:17:fe:18:63:6d:0c:ce:6b: 9f:68:24:9f:f1:a0:e7:36:e6:c7:11:ba:3b:39:85: 7c:6d:eb:1d:a0:33:37:fa:3d:b4:0e:1d:a6:34:92: ee:84:72:7f:f1:0a:7b:c1:e4:cf:de:9a:a1:c0:bc: 45:4a:80:d3:1d:de:3b:f4:12:d3:13:bf:04:6a:9f: 3b:5a:5c:02:bf:d0:38:46:a7:33:36:71:b7:6a:43: 8b:a3:fc:34:93:13:d8:e2:eb:c6:4b:95:e2:7d:f2: 97:1e:23:5e:e5:4c:96:cd:2b:2c:92:a4:68:05:10: 28:e3:18:d0:75:97:ec:f3:f0:5e:2d:03:9e:08:09: 30:d1:70:70:8f:0a:ab:aa:37:dd:50:49:9b:19:bd: ab:bd:ca:db:aa:58:aa:2f:8d:e7:49:3d:43:05:8b: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:51:24:ae:a9:69:15:71:66:04:ed:2c:92:41:45:39:36:4a: 15:0f:29:67:8d:d4:7e:09:70:11:32:74:92:92:d0:a0:83:da: 99:e2:97:fc:52:f1:7c:03:63:b7:4e:fc:67:06:f0:32:b8:72: d2:cd:6f:b6:b2:d8:38:19:6b:26:fe:0a:bb:ea:84:b9:e8:f3: 04:f3:41:39:52:22:8f:0f:53:97:cf:a1:1c:42:69:bc:93:92: fe:49:de:e9:26:a2:1b:1c:7a:a9:6a:96:dc:e7:c9:60:8a:7b: f7:22:59:0d:ef:f8:f9:47:4b:31:32:12:03:2e:41:a2:62:e3: 59:56:d6:15:73:26:46:0d:22:98:e5:cb:9a:7e:ef:e7:82:f6: 19:e3:ed:97:3b:d9:4a:28:19:fc:03:41:15:d4:55:12:01:bd: df:8f:91:6a:f3:9a:bd:33:02:60:0f:28:2f:2e:58:73:5a:b2: c2:cd:26:a4:61:ce:d2:e5:f1:57:c7:14:85:28:ae:14:5f:3e: 19:cc:59:54:b2:61:c3:f4:57:9e:af:11:7e:4b:8f:88:e0:c8: 93:7e:18:a4:bf:f6:92:8f:87:92:50:25:70:11:1d:1d:67:f5: 4d:02:ce:6b:45:db:4f:37:d4:c1:b5:83:de:eb:e5:17:31:a3: 09:f7:5e:ea -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEt4T78VZmSYKhzFSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAxMDAwNDUyMloXDTI4MDExMzAxNDUyMlowLzEtMCsGA1UEAxMk NjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tye+VXu8yWnhnzC/NSttjPMvlUlqZnphct kfbKAqr8A2sqwKscTwZaJLrIer3OxemUePXNQIrWlDp699sbE2ZLRW2zBxdJzvBK T5bY8PCirAVmKPY4iquZNDK521FeF/4YY20MzmufaCSf8aDnNubHEbo7OYV8besd oDM3+j20Dh2mNJLuhHJ/8Qp7weTP3pqhwLxFSoDTHd479BLTE78Eap87WlwCv9A4 RqczNnG3akOLo/w0kxPY4uvGS5XiffKXHiNe5UyWzSsskqRoBRAo4xjQdZfs8/Be LQOeCAkw0XBwjwqrqjfdUEmbGb2rvcrbqliqL43nST1DBYuC2wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFAQ7kSZDWuU9uSE1vxjGNtDanUGnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY5M2JmNzcyLWIxYzItNGYyZi05 NzZjLTUyOGI2ZjFkOGUxNi82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYx ZDhlMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARI+rAwDQQCAAIwBwMFACYHGcAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA VVEkrqlpFXFmBO0skkFFOTZKFQ8pZ43UfglwETJ0kpLQoIPameKX/FLxfANjt078 ZwbwMrhy0s1vtrLYOBlrJv4Ku+qEuejzBPNBOVIijw9Tl8+hHEJpvJOS/kne6Sai Gxx6qWqW3OfJYIp79yJZDe/4+UdLMTISAy5BomLjWVbWFXMmRg0imOXLmn7v54L2 GePtlzvZSigZ/ANBFdRVEgG934+RavOavTMCYA8oLy5Yc1qyws0mpGHO0uXxV8cU hSiuFF8+GcxZVLJhw/RXnq8RfkuPiODIk34YpL/2ko+HklAlcBEdHWf1TQLOa0Xb TzfUwbWD3uvlFzGjCfde6g== -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:45 2025 by rpki-client