$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a844db4-0124-49a3-9875-310c9bdf2cb4.cer File: 9a844db4-0124-49a3-9875-310c9bdf2cb4.cer (raw, json) Hash identifier: oNqAX4utfSBpIku8AOKWUK74vEx3uQeoPyiI7H6914U= Subject key identifier: 16:AB:A7:89:8B:57:E3:AB:2F:7B:77:28:FA:75:53:08:0F:76:BE:BD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A3CA7C16601600BCCB8289040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a844db4-0124-49a3-9875-310c9bdf2cb4/9a844db4-0124-49a3-9875-310c9bdf2cb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a844db4-0124-49a3-9875-310c9bdf2cb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 23:07:16 +0000 Certificate not after: Tue 21 Sep 2027 23:07:16 +0000 Subordinate resources: AS: 62838 IP: 23.179.32.0/24 IP: 104.37.168.0/22 IP: 104.219.16.0/22 IP: 142.202.4.0/22 IP: 162.248.4.0/22 IP: 162.253.152.0/22 IP: 2607:d680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:a7:c1:66:01:60:0b:cc:b8:28:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 18 23:07:16 2025 GMT Not After : Sep 21 23:07:16 2027 GMT Subject: CN=9a844db4-0124-49a3-9875-310c9bdf2cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:35:0a:30:16:ee:d8:bf:c5:3b:8d:71:48: bc:e5:33:3c:ec:77:16:2e:3a:e0:41:7a:81:e6:69: a9:7b:3d:33:54:09:fb:ed:73:01:a2:c6:f5:59:32: e4:c7:6f:43:50:93:f9:74:4c:0c:a6:5b:6a:9d:19: ae:1b:88:d3:8c:80:43:92:ba:4a:3a:4d:c8:8c:a1: 98:78:de:ff:12:ff:66:13:95:30:79:57:54:67:15: ac:af:8d:68:4c:93:e1:ba:bd:e0:63:0d:a4:bc:4b: 0c:4f:7f:20:e6:90:54:0f:b4:ce:b9:51:23:fd:5c: 01:b6:3a:5b:d6:01:b5:f4:35:2d:19:35:12:0d:6b: 3c:d2:32:c8:33:d4:b5:a9:2c:3f:19:1f:8b:26:f6: 32:47:1d:c5:ed:e5:78:21:d0:03:72:df:f4:98:c3: 63:c8:63:cc:2e:8f:6f:2b:05:f9:83:74:b1:b0:60: ca:6a:a5:9f:4a:f3:c8:f3:51:39:7d:d6:6f:2f:af: 14:06:34:58:46:ac:6f:9f:c5:c4:33:e2:21:7a:4d: 74:ab:5e:93:fb:05:b9:b2:ac:1b:52:dd:62:f1:4e: e6:1c:e5:da:0a:50:85:ae:cd:26:ad:9b:ab:09:c2: fd:f9:e4:9b:2a:3b:2e:77:90:f0:33:63:c6:c5:e4: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:A7:89:8B:57:E3:AB:2F:7B:77:28:FA:75:53:08:0F:76:BE:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a844db4-0124-49a3-9875-310c9bdf2cb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a844db4-0124-49a3-9875-310c9bdf2cb4/9a844db4-0124-49a3-9875-310c9bdf2cb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.179.32.0/24 104.37.168.0/22 104.219.16.0/22 142.202.4.0/22 162.248.4.0/22 162.253.152.0/22 IPv6: 2607:d680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62838 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1e:10:01:fa:8b:d3:de:83:21:94:ff:72:72:ae:a2:2d:77: 33:52:72:9f:59:25:6a:94:95:eb:c1:6f:1e:96:35:ad:48:df: 9c:53:a8:56:1e:76:6e:d7:4f:7a:ce:74:b1:89:d7:b7:a5:7e: a7:f6:e1:ce:1f:e3:c4:de:3b:86:65:e0:07:e1:61:ba:d2:db: 43:a6:18:13:64:26:bd:f3:22:57:aa:6b:27:d9:38:1b:3e:b6: 89:2b:a6:b9:c5:44:ba:ec:14:af:d6:38:a3:34:c0:32:96:59: 5e:fd:79:42:ee:ed:cd:ec:26:b3:3b:b3:32:bd:91:85:84:ae: 42:49:3a:b7:c9:e1:8f:5a:4b:d8:c2:7c:76:16:d8:e3:0c:22: 66:6a:0f:30:4a:4d:a9:ae:e0:b9:48:e2:f2:7b:98:88:98:37: 59:f0:9f:af:5f:b2:b5:44:15:c7:c8:88:18:2f:63:59:d5:9c: 2f:67:fb:b8:00:7a:5f:8c:a3:27:ed:ec:31:bb:09:a5:79:ac: 9c:0f:dc:38:fc:d5:af:79:29:c7:92:0e:c0:ff:af:f1:e8:7f: 8a:3c:07:10:a7:85:16:dc:bf:f3:ad:48:9e:f2:97:81:eb:27: 8c:91:96:92:76:8c:26:62:34:08:32:f0:e0:c8:8f:a7:c4:ef: fa:2a:9e:13 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEo8p8FmAWALzLgokEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxODIzMDcxNloXDTI3MDkyMTIzMDcxNlowLzEtMCsGA1UEAxMk OWE4NDRkYjQtMDEyNC00OWEzLTk4NzUtMzEwYzliZGYyY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+c1CjAW7ti/xTuNcUi85TM87HcWLjrgQXqB 5mmpez0zVAn77XMBosb1WTLkx29DUJP5dEwMpltqnRmuG4jTjIBDkrpKOk3IjKGY eN7/Ev9mE5UweVdUZxWsr41oTJPhur3gYw2kvEsMT38g5pBUD7TOuVEj/VwBtjpb 1gG19DUtGTUSDWs80jLIM9S1qSw/GR+LJvYyRx3F7eV4IdADct/0mMNjyGPMLo9v KwX5g3SxsGDKaqWfSvPI81E5fdZvL68UBjRYRqxvn8XEM+Ihek10q16T+wW5sqwb Ut1i8U7mHOXaClCFrs0mrZurCcL9+eSbKjsud5DwM2PGxeRwdQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFBarp4mLV+OrL3t3KPp1UwgPdr69MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 YTg0NGRiNC0wMTI0LTQ5YTMtOTg3NS0zMTBjOWJkZjJjYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlhODQ0ZGI0LTAxMjQtNDlhMy05 ODc1LTMxMGM5YmRmMmNiNC85YTg0NGRiNC0wMTI0LTQ5YTMtOTg3NS0zMTBjOWJk ZjJjYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXsyADBAJoJagDBAJo2xADBAKOygQDBAKi+AQD BAKi/ZgwDQQCAAIwBwMFACYH1oAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPV2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAeEAH6i9PegyGU/3JyrqItdzNScp9ZJWqUlevBbx6WNa1I35xT qFYedm7XT3rOdLGJ17elfqf24c4f48TeO4Zl4AfhYbrS20OmGBNkJr3zIleqayfZ OBs+tokrprnFRLrsFK/WOKM0wDKWWV79eULu7c3sJrM7szK9kYWErkJJOrfJ4Y9a S9jCfHYW2OMMImZqDzBKTamu4LlI4vJ7mIiYN1nwn69fsrVEFcfIiBgvY1nVnC9n +7gAel+Moyft7DG7CaV5rJwP3Dj81a95KceSDsD/r/Hof4o8BxCnhRbcv/OtSJ7y l4HrJ4yRlpJ2jCZiNAgy8ODIj6fE7/oqnhM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:39 2025 by rpki-client