$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce.cer File: 9d88f5c5-9695-4d4f-82f6-c15d09dd63ce.cer (raw, json) Hash identifier: 4jTLJVoHLLKrRGUTrsEPD7Vpxg8rYGEGiR80tpmGv1I= Subject key identifier: A0:42:DF:D3:9C:0E:38:65:03:C0:D5:2D:87:C7:3C:43:38:46:29:63 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A883907F5E358851D36CDD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 00:45:36 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 14082 IP: 209.102.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:39:07:f5:e3:58:85:1d:36:cd:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 16 00:45:36 2025 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=9d88f5c5-9695-4d4f-82f6-c15d09dd63ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:aa:66:57:32:1e:1d:77:fc:15:97:6c:61: c7:59:b5:f6:4b:3d:34:da:cf:d5:23:46:1c:19:2c: 62:3c:a8:5e:59:5c:ef:eb:5b:ca:67:28:d4:69:a4: 25:a3:3d:3a:1b:e6:cb:b6:18:0b:97:2c:f1:b4:28: 6e:67:e8:9c:18:bd:65:e3:57:13:f0:1c:0b:51:50: 0a:78:0e:fd:da:ac:dd:b0:41:1f:12:ac:3c:ae:3e: f4:39:2a:ea:9d:b1:3a:f8:48:be:67:80:e1:c7:02: e6:7e:9e:21:c6:cc:21:f9:b5:e3:ba:1e:dc:86:7b: 94:bd:75:9b:81:5c:01:d7:78:0b:69:4c:07:68:96: 9b:0a:94:41:cb:c2:85:b6:5e:dd:7a:fb:15:eb:73: 45:c8:09:f5:0d:d4:a3:83:e4:72:52:60:64:dc:22: 17:f3:36:71:0d:05:83:c5:8f:f8:3c:e7:13:58:c3: 2f:91:b7:b5:7d:35:e6:9b:da:c8:07:2d:43:b4:d5: 8b:d2:a1:7e:61:a2:04:80:8c:a6:3a:81:1e:04:64: 41:57:4f:92:f7:e7:aa:98:8c:cf:88:d2:9d:cf:0a: c9:cd:c7:2f:83:41:95:af:ea:3a:c6:9f:73:6a:a7: ad:f7:79:0d:f7:f6:79:c6:45:f5:71:27:d8:ab:d2: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:DF:D3:9C:0E:38:65:03:C0:D5:2D:87:C7:3C:43:38:46:29:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce/9d88f5c5-9695-4d4f-82f6-c15d09dd63ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 209.102.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cc:40:27:c4:82:9d:6f:c1:6e:d9:2d:63:48:26:c9:a1:21: 26:37:55:7f:6d:86:19:a7:c6:27:c5:dc:d1:43:2e:eb:cf:33: c6:b2:1a:9e:ad:93:b9:cb:a7:21:88:7c:76:02:ac:56:77:37: c6:10:e6:0c:04:d4:90:35:3d:85:c2:57:4f:0f:1d:67:5c:2c: d7:37:fd:87:57:28:ea:8c:c0:67:66:b7:8d:96:59:32:1c:60: b2:67:19:d2:d8:f6:ab:ff:53:ef:54:18:5b:02:96:97:6e:a2: 66:03:2c:fe:79:93:dd:b3:b5:e5:76:ef:3e:a5:a2:c4:dc:34: 24:4d:a7:82:b4:79:7d:5a:84:3a:44:bc:f8:0c:83:2c:47:4f: b0:10:64:4d:3c:e9:42:48:8b:50:88:cf:b1:1d:b5:3a:46:2d: 4e:9e:09:9e:70:00:6b:cd:b1:01:19:9e:c3:24:a3:f4:08:ed: 1e:92:a6:e3:1e:38:48:53:d2:01:87:66:fc:43:47:87:70:01: 91:42:6f:e5:73:f4:78:f2:d3:ba:4b:ad:d6:29:93:1b:fe:c2: 6e:7d:22:b9:c8:26:05:03:70:c9:95:7e:3b:c3:69:1c:fa:9f: 48:9c:a2:d4:cf:6c:09:3e:9d:d5:ea:e9:b6:20:23:75:6d:35: 52:0d:12:0d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEqIOQf141iFHTbN1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxNjAwNDUzNloXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk OWQ4OGY1YzUtOTY5NS00ZDRmLTgyZjYtYzE1ZDA5ZGQ2M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/qqZlcyHh13/BWXbGHHWbX2Sz002s/VI0Yc GSxiPKheWVzv61vKZyjUaaQloz06G+bLthgLlyzxtChuZ+icGL1l41cT8BwLUVAK eA792qzdsEEfEqw8rj70OSrqnbE6+Ei+Z4DhxwLmfp4hxswh+bXjuh7chnuUvXWb gVwB13gLaUwHaJabCpRBy8KFtl7devsV63NFyAn1DdSjg+RyUmBk3CIX8zZxDQWD xY/4POcTWMMvkbe1fTXmm9rIBy1DtNWL0qF+YaIEgIymOoEeBGRBV0+S9+eqmIzP iNKdzwrJzccvg0GVr+o6xp9zaqet93kN9/Z5xkX1cSfYq9Jz4QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKBC39OcDjhlA8DVLYfHPEM4RiljMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 ZDg4ZjVjNS05Njk1LTRkNGYtODJmNi1jMTVkMDlkZDYzY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlkODhmNWM1LTk2OTUtNGQ0Zi04 MmY2LWMxNWQwOWRkNjNjZS85ZDg4ZjVjNS05Njk1LTRkNGYtODJmNi1jMTVkMDlk ZDYzY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATRZuAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NwIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQMxAJ8SCnW/BbtktY0gmyaEhJjdVf22GGafGJ8Xc0UMu688z xrIanq2TucunIYh8dgKsVnc3xhDmDATUkDU9hcJXTw8dZ1ws1zf9h1co6ozAZ2a3 jZZZMhxgsmcZ0tj2q/9T71QYWwKWl26iZgMs/nmT3bO15XbvPqWixNw0JE2ngrR5 fVqEOkS8+AyDLEdPsBBkTTzpQkiLUIjPsR21OkYtTp4JnnAAa82xARmewySj9Ajt HpKm4x44SFPSAYdm/ENHh3ABkUJv5XP0ePLTukut1imTG/7Cbn0iucgmBQNwyZV+ O8NpHPqfSJyi1M9sCT6d1erptiAjdW01Ug0SDQ== -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:47 2025 by rpki-client