$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749.cer File: 95c6ced0-8242-4d5e-b1fa-757764b66749.cer (raw, json) Hash identifier: z7h/9OkosJ4TZI+z5gYXUrIc1mQbBdmHNBjZCKbmiaU= Subject key identifier: 0D:16:C4:F9:9F:4D:65:44:05:DC:06:23:B4:9D:80:FD:95:B2:E5:3B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B5F2F994EF7151896A45E40C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/95c6ced0-8242-4d5e-b1fa-757764b66749.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 00:45:24 +0000 Certificate not after: Tue 04 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 53818 IP: 216.172.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:2f:99:4e:f7:15:18:96:a4:5e:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 1 00:45:24 2025 GMT Not After : Jan 4 01:45:24 2028 GMT Subject: CN=95c6ced0-8242-4d5e-b1fa-757764b66749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:97:ec:fd:b4:09:26:7c:7e:47:bc:ee:e4: 78:40:be:9b:63:32:f3:96:58:1a:c3:dd:07:87:de: b7:51:77:2d:35:3d:13:86:62:62:67:91:e6:e0:4c: 9f:74:d7:d6:3c:67:1d:a0:26:a9:5e:e2:0c:ce:16: 03:8e:6a:eb:ea:1a:94:22:b2:44:83:86:4f:b2:c4: 88:0a:57:b1:f5:7a:a9:4e:f0:4e:6c:d3:88:ab:10: b1:06:5e:1a:77:00:2b:ea:b3:c3:2c:e9:3b:6e:4c: 89:99:61:20:99:61:b6:3b:f0:1d:fe:e8:34:07:3f: 07:dd:d5:a0:01:14:56:eb:9e:05:ef:7d:7c:62:f4: 30:c2:8a:b1:3e:0d:ad:c0:ea:6f:ee:40:00:ab:ee: c6:60:96:9a:15:66:ab:5f:3b:e1:59:8e:45:c5:3d: 6f:52:1b:3f:9c:86:f1:71:5d:09:07:0b:f1:9f:19: df:55:88:dc:fd:9c:10:73:95:eb:08:26:c1:52:17: 8e:3e:82:2b:b3:39:07:87:df:1b:37:ea:c2:cf:ec: f0:49:17:cb:4b:2b:be:bd:fd:cd:d9:34:1b:13:c2: 58:ad:1e:03:e2:be:23:72:ae:9f:dd:24:01:45:7d: a9:1c:fa:10:cd:89:12:27:3e:b7:b7:00:56:c8:05: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:C4:F9:9F:4D:65:44:05:DC:06:23:B4:9D:80:FD:95:B2:E5:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/95c6ced0-8242-4d5e-b1fa-757764b66749.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 216.172.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53818 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1f:57:93:10:91:16:8d:4f:2f:ff:a9:25:74:b5:d1:93:81: 8b:23:34:ed:46:58:7d:28:5f:f5:fa:6d:c9:c8:d5:8a:2b:97: 88:a9:21:df:a0:70:49:c3:c7:8b:4d:4c:5b:c7:ff:bb:21:ee: e0:17:09:b3:34:49:da:df:4e:93:6d:e4:29:4c:90:d3:fb:22: 99:f8:79:ee:b7:e3:7c:ee:a3:83:86:24:f5:01:2d:ca:c1:9a: bf:fa:3c:fd:d8:89:0c:15:44:ba:17:48:95:23:72:a9:eb:66: 73:eb:9a:21:06:05:f1:ce:36:f3:00:7e:55:c7:7e:9d:c8:bb: 47:88:f2:23:40:47:5e:e7:88:f7:5b:2f:d3:70:79:90:1e:ab: 32:33:d0:6e:d7:bc:84:51:67:88:94:16:f2:de:37:b9:b3:5e: 1a:c9:13:ac:60:88:7a:f5:ed:63:86:ff:db:b7:22:24:e2:52: 41:35:ac:fd:77:0f:5a:b7:0b:ad:43:43:5d:64:d8:04:69:59: 3a:37:16:99:dd:b3:4c:20:76:2b:99:a9:2f:1c:69:35:fd:9f: 1a:40:a3:09:c5:a7:13:06:22:4b:20:96:fd:1a:a4:79:39:5d: ff:ae:31:e9:47:63:14:a9:6b:46:f0:88:63:d4:1f:28:16:cb: ad:37:a2:97 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtfL5lO9xUYlqReQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAwMTAwNDUyNFoXDTI4MDEwNDAxNDUyNFowLzEtMCsGA1UEAxMk OTVjNmNlZDAtODI0Mi00ZDVlLWIxZmEtNzU3NzY0YjY2NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyCX7P20CSZ8fke87uR4QL6bYzLzllgaw90H h963UXctNT0ThmJiZ5Hm4EyfdNfWPGcdoCapXuIMzhYDjmrr6hqUIrJEg4ZPssSI Clex9XqpTvBObNOIqxCxBl4adwAr6rPDLOk7bkyJmWEgmWG2O/Ad/ug0Bz8H3dWg ARRW654F7318YvQwwoqxPg2twOpv7kAAq+7GYJaaFWarXzvhWY5FxT1vUhs/nIbx cV0JBwvxnxnfVYjc/ZwQc5XrCCbBUheOPoIrszkHh98bN+rCz+zwSRfLSyu+vf3N 2TQbE8JYrR4D4r4jcq6f3SQBRX2pHPoQzYkSJz63twBWyAXeEwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFA0WxPmfTWVEBdwGI7SdgP2VsuU7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 NWM2Y2VkMC04MjQyLTRkNWUtYjFmYS03NTc3NjRiNjY3NDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk1YzZjZWQwLTgyNDItNGQ1ZS1i MWZhLTc1Nzc2NGI2Njc0OS85NWM2Y2VkMC04MjQyLTRkNWUtYjFmYS03NTc3NjRi NjY3NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATYrFAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANI6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACofV5MQkRaNTy//qSV0tdGTgYsjNO1GWH0oX/X6bcnI1Yor l4ipId+gcEnDx4tNTFvH/7sh7uAXCbM0SdrfTpNt5ClMkNP7Ipn4ee6343zuo4OG JPUBLcrBmr/6PP3YiQwVRLoXSJUjcqnrZnPrmiEGBfHONvMAflXHfp3Iu0eI8iNA R17niPdbL9NweZAeqzIz0G7XvIRRZ4iUFvLeN7mzXhrJE6xgiHr17WOG/9u3IiTi UkE1rP13D1q3C61DQ11k2ARpWTo3Fpnds0wgdiuZqS8caTX9nxpAownFpxMGIksg lv0apHk5Xf+uMelHYxSpa0bwiGPUHygWy603opc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:46 2025 by rpki-client