$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer File: 86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer (raw, json) Hash identifier: Ym9SO6HuclrewIIlJTO2y09m6yefrHr/+e0W4k6CB0I= Subject key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849F442C5E979EB5A38C508E0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 May 2025 00:45:36 +0000 Certificate not after: Fri 27 Aug 2027 00:45:36 +0000 Subordinate resources: IP: 47.191.0.0 -- 47.207.255.255 IP: 172.99.32.0/19 IP: 172.109.0.0/16 IP: 2606:4d80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:42:c5:e9:79:eb:5a:38:c5:08:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 24 00:45:36 2025 GMT Not After : Aug 27 00:45:36 2027 GMT Subject: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:bf:4b:c4:64:e7:0f:cd:cc:f1:31:29:a1: 1b:90:9a:bb:1b:d8:01:c3:ef:71:e6:7c:99:c5:33: a6:7d:d1:1d:5e:3b:68:f8:a1:3b:45:2e:2e:ac:bb: 74:ba:38:2f:59:b7:b0:39:ea:01:84:97:73:2b:1c: 8a:94:1a:69:48:d8:8c:1d:80:dd:01:19:39:68:6c: 7f:19:15:86:6c:cb:42:f2:ed:c5:ed:78:c6:61:3b: ae:56:aa:9c:64:f5:2f:58:7d:1e:61:4b:82:ea:01: ef:3c:00:6e:ef:21:1d:4e:6a:25:d0:be:49:96:dc: 02:12:21:c5:41:c5:9f:fe:6f:1f:37:41:b8:a8:77: 71:66:eb:91:d4:9b:72:2a:03:45:04:47:87:3b:49: d4:01:a0:c2:1a:21:81:f2:ec:49:1f:2e:b9:a0:73: a9:f3:ce:06:cb:fb:33:d0:5a:77:1c:dd:0d:3e:b4: 93:ae:17:8b:cd:d7:91:5d:25:99:b9:41:e3:a0:f4: 71:1a:2b:10:20:27:b9:ba:96:69:3f:10:be:01:cc: a9:47:27:ef:17:a1:1c:33:0d:77:78:41:c6:5c:48: 9c:7a:38:25:16:4a:b2:bf:cd:92:86:39:a2:8a:df: ab:0c:ce:40:8c:d1:a7:2c:05:f5:d2:f0:ea:c2:a1: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 47.191.0.0-47.207.255.255 172.99.32.0/19 172.109.0.0/16 IPv6: 2606:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:e1:ff:26:09:32:54:0d:89:f5:7e:74:25:73:cf:dd:58: 55:1b:25:85:5f:a0:14:1f:3d:e7:37:fb:d5:1b:0e:31:ea:c0: cf:3e:4f:d1:66:48:55:41:d1:29:6a:5f:02:53:d3:6d:b5:18: d8:af:02:4e:6c:84:c4:b6:df:ed:b1:8c:12:a8:51:67:e4:71: 7c:f7:d3:62:25:13:10:2b:e2:20:5b:43:ef:95:4b:58:8a:70: 85:20:8a:ee:1c:2e:06:9a:2b:86:61:4d:3d:b6:a4:6f:c1:ef: f6:fc:00:83:20:a2:46:8a:fa:64:e3:7d:81:e8:67:1c:e9:ca: 72:14:09:95:fe:ba:86:69:c8:78:b7:99:28:f6:fb:d3:36:7f: 9e:5a:03:ea:cc:38:9d:1c:c6:7f:68:14:0a:cf:a2:fb:98:f9: 42:68:f8:3a:9a:51:0c:c2:b2:94:b1:9a:57:38:32:04:e8:fd: 1d:dc:e3:74:79:6e:56:02:56:f4:df:c7:65:df:15:c3:4f:dc: 03:f6:f3:ad:c8:c6:4e:78:e1:68:51:94:ab:b1:98:8b:77:2b: ba:38:54:06:bb:ba:f2:38:ea:99:27:67:7d:d9:f6:ed:23:c4: 65:d4:ae:91:1b:10:83:78:df:26:95:6b:79:4c:0f:2c:cd:0c: 3b:6f:ed:44 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEn0QsXpeetaOMUI4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUyNDAwNDUzNloXDTI3MDgyNzAwNDUzNlowLzEtMCsGA1UEAxMk ODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4M2RiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBG/S8Rk5w/NzPExKaEbkJq7G9gBw+9x5nyZ xTOmfdEdXjto+KE7RS4urLt0ujgvWbewOeoBhJdzKxyKlBppSNiMHYDdARk5aGx/ GRWGbMtC8u3F7XjGYTuuVqqcZPUvWH0eYUuC6gHvPABu7yEdTmol0L5JltwCEiHF QcWf/m8fN0G4qHdxZuuR1JtyKgNFBEeHO0nUAaDCGiGB8uxJHy65oHOp884Gy/sz 0Fp3HN0NPrSTrheLzdeRXSWZuUHjoPRxGisQICe5upZpPxC+AcypRyfvF6EcMw13 eEHGXEicejglFkqyv82Shjmiit+rDM5AjNGnLAX10vDqwqEADwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFDVrFPTDF1+W/pkhRXtqsWBp/kYtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgzZGJmY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05 ZGQxLWZhNTEzODNkYmZjZS84NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgz ZGJmY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB0EAgABMBcwCgMDAC+/AwMEL8ADBAWsYyADAwCsbTANBAIAAjAH AwUAJgZNgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBacOH/JgkyVA2J9X50JXPP3VhVGyWFX6AUHz3nN/vV Gw4x6sDPPk/RZkhVQdEpal8CU9NttRjYrwJObITEtt/tsYwSqFFn5HF899NiJRMQ K+IgW0PvlUtYinCFIIruHC4GmiuGYU09tqRvwe/2/ACDIKJGivpk432B6Gcc6cpy FAmV/rqGach4t5ko9vvTNn+eWgPqzDidHMZ/aBQKz6L7mPlCaPg6mlEMwrKUsZpX ODIE6P0d3ON0eW5WAlb038dl3xXDT9wD9vOtyMZOeOFoUZSrsZiLdyu6OFQGu7ry OOqZJ2d92fbtI8Rl1K6RGxCDeN8mlWt5TA8szQw7b+1E -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:15 2025 by rpki-client