$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer File: 98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer (raw, json) Hash identifier: 2CB/gibeiqFq/79tQu4yr/g/pfI7OXXyH4bO89Hlvgo= Subject key identifier: 4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A426DF0092A2AA480F1CC9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 00:45:37 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 20209 IP: 209.73.32.0/19 IP: 209.81.64.0/19 IP: 2605:4800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:6d:f0:09:2a:2a:a4:80:f1:cc:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 21 00:45:37 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=98cbd190-fbfe-49f7-b5c6-bda1299a2fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:5b:e8:f8:fd:8e:59:57:16:a6:f9:6c:2c: 55:00:23:9a:80:25:ff:92:98:fe:7d:b5:41:a4:ee: a9:31:7f:80:18:96:b6:9e:17:50:13:c7:74:7f:0d: a8:3b:f7:42:75:9e:1e:bf:b3:3a:0d:49:23:c2:b8: 8e:17:33:6a:b7:92:2e:8d:82:85:7e:1c:3f:3f:a4: 2b:1d:59:b9:ec:f5:45:8c:00:fa:e7:0f:59:db:af: 69:eb:50:5e:f4:5a:f2:eb:f7:28:53:f0:f1:8a:70: 78:8d:c0:ae:58:6f:26:d9:44:42:87:b0:d8:fe:82: a8:ac:94:a1:7f:04:80:ab:2c:79:e3:e3:44:5c:e6: 1d:2c:da:dd:5f:40:30:13:c9:45:6a:b4:bb:80:38: 3e:6d:1b:df:68:39:18:dd:04:b0:dc:95:50:18:38: 88:45:90:0e:30:1e:dd:c6:2b:ea:b8:7f:05:74:3f: ac:d5:76:db:0e:4e:6b:7a:17:7c:87:88:b1:31:43: ba:09:64:5c:36:a9:d5:65:8e:83:c6:22:9b:3a:e0: c4:b9:41:31:7b:11:49:14:f8:19:0f:b8:6b:a1:58: 08:6d:1c:37:c3:2b:59:bc:d0:d8:41:72:7a:36:a0: c7:a0:91:99:9b:be:bf:69:98:6f:7f:4d:92:95:75: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 209.73.32.0/19 209.81.64.0/19 IPv6: 2605:4800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20209 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9f:8c:f3:93:ec:7f:ac:8c:05:df:3a:85:31:6a:08:75:1f: 8f:43:1a:a1:18:27:9c:5c:e2:3f:5e:05:bb:d9:db:6e:64:68: 90:f8:78:c6:2c:40:a8:3c:b6:0d:26:91:3a:70:10:d9:60:21: 46:00:96:2d:8d:1e:45:85:ea:55:1b:16:30:57:fc:86:a7:46: 82:8a:30:0e:18:58:30:01:6c:d4:cc:19:0f:62:f7:d4:f8:b8: 9c:1f:be:4c:85:04:e9:a8:81:3a:c3:60:e6:8b:59:de:62:34: 72:65:8a:f2:3d:5e:69:e4:14:28:8a:e9:40:e0:01:8d:6c:6e: 6f:3f:65:fc:53:94:57:68:0b:0d:78:d0:ba:4b:18:86:a7:75: 41:46:f0:ea:97:2c:97:27:61:12:53:52:ae:dc:fd:78:5e:ac: f8:82:43:86:5d:02:36:72:6f:2f:28:34:7d:ab:b4:83:77:65: 28:6a:38:17:b5:4f:5c:47:18:93:af:67:18:c4:1b:14:3c:43: 18:98:d2:71:7a:65:92:6b:95:95:0b:5b:b7:3d:65:76:3b:40: 4a:25:c0:51:b2:6c:43:07:3c:d0:01:56:13:20:79:07:2c:e1: 4a:22:22:ee:b4:79:84:b3:65:56:25:c5:02:65:ab:b1:1e:3f: ce:fe:01:94 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEpCbfAJKiqkgPHMm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYyMTAwNDUzN1oXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk OThjYmQxOTAtZmJmZS00OWY3LWI1YzYtYmRhMTI5OWEyZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN1b6Pj9jllXFqb5bCxVACOagCX/kpj+fbVB pO6pMX+AGJa2nhdQE8d0fw2oO/dCdZ4ev7M6DUkjwriOFzNqt5IujYKFfhw/P6Qr HVm57PVFjAD65w9Z269p61Be9Fry6/coU/DxinB4jcCuWG8m2URCh7DY/oKorJSh fwSAqyx54+NEXOYdLNrdX0AwE8lFarS7gDg+bRvfaDkY3QSw3JVQGDiIRZAOMB7d xivquH8FdD+s1XbbDk5rehd8h4ixMUO6CWRcNqnVZY6DxiKbOuDEuUExexFJFPgZ D7hroVgIbRw3wytZvNDYQXJ6NqDHoJGZm76/aZhvf02SlXVvcQIDAQABo4IELzCC BCswHQYDVR0OBBYEFEovd6kMGf8Uoz81czzG3/WdfBZ2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 OGNiZDE5MC1mYmZlLTQ5ZjctYjVjNi1iZGExMjk5YTJmZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk4Y2JkMTkwLWZiZmUtNDlmNy1i NWM2LWJkYTEyOTlhMmZlOS85OGNiZDE5MC1mYmZlLTQ5ZjctYjVjNi1iZGExMjk5 YTJmZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAXRSSADBAXRUUAwDQQCAAIwBwMFACYFSAAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTvEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHZ+M85Psf6yMBd86hTFq CHUfj0MaoRgnnFziP14Fu9nbbmRokPh4xixAqDy2DSaROnAQ2WAhRgCWLY0eRYXq VRsWMFf8hqdGgoowDhhYMAFs1MwZD2L31Pi4nB++TIUE6aiBOsNg5otZ3mI0cmWK 8j1eaeQUKIrpQOABjWxubz9l/FOUV2gLDXjQuksYhqd1QUbw6pcslydhElNSrtz9 eF6s+IJDhl0CNnJvLyg0fau0g3dlKGo4F7VPXEcYk69nGMQbFDxDGJjScXplkmuV lQtbtz1ldjtASiXAUbJsQwc80AFWEyB5ByzhSiIi7rR5hLNlViXFAmWrsR4/zv4B lA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:42:39 2025 by rpki-client