$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer File: c186a276-9141-41da-babe-4559d2c6d734.cer (raw, json) Hash identifier: VSesJg2ExjdLFGKAJFPZcI/KFqF+3+1ND3TlGfUVZNY= Subject key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849CA627EFEE3CBBBC4D8E38680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 May 2025 00:45:34 +0000 Certificate not after: Thu 12 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 17331 IP: 206.168.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ca:62:7e:fe:e3:cb:bb:c4:d8:e3:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 9 00:45:34 2025 GMT Not After : Aug 12 00:45:34 2027 GMT Subject: CN=c186a276-9141-41da-babe-4559d2c6d734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:bc:19:b9:e4:f3:47:74:5b:ee:f6:bc:14: 21:c9:ef:20:c2:ef:b5:88:22:2b:2e:b9:f8:52:29: 39:84:5a:61:9d:41:cd:8b:05:3f:89:de:6e:eb:6c: 25:c7:d4:0c:c5:4b:11:67:be:a6:8a:4f:f8:6d:bb: 2f:29:cc:0b:45:db:68:8b:f2:53:73:3d:ca:91:f3: 77:cb:6d:0a:a7:d2:96:87:e0:ff:d6:21:56:26:af: 3f:f9:16:57:00:b4:45:d0:af:64:fd:64:ff:97:94: df:3f:b1:82:b8:c0:f2:02:fd:cd:b6:68:cb:49:55: 78:72:e5:b1:e6:c2:9a:cd:0a:6b:53:ce:17:55:a3: d1:b2:ba:f3:37:31:2e:e3:7b:e5:ec:43:e5:fd:d7: c7:64:04:a3:03:10:40:2e:64:67:c4:c6:82:a0:80: 60:c7:53:06:d1:29:d8:e8:0b:55:38:0c:68:0b:5c: b5:ee:66:58:4f:71:97:54:79:d1:48:d3:90:3c:20: 73:57:b0:9c:b5:c6:f3:e3:50:cb:3a:17:b8:93:45: 11:65:ac:cb:ec:db:b4:31:14:33:78:bd:33:6e:92: aa:b2:a0:25:3e:2b:3d:0a:34:fd:b8:1f:ea:b7:30: 97:74:dc:0e:08:f6:3b:d4:54:1a:dc:41:7a:05:99: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17331 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8a:f4:5f:26:3a:af:ef:72:6e:81:33:dd:47:54:c6:8e:ba: c3:1c:ba:c7:b9:b3:50:53:4a:71:d4:6c:e1:32:ba:79:e8:3b: d4:b4:55:7d:8a:6a:24:e2:ac:cc:cc:c2:6a:2b:7b:99:62:b9: de:bb:cc:e4:c1:ad:1d:15:e0:8e:98:81:5b:d7:6b:79:45:57: 47:e8:45:e5:91:cf:f8:c7:fa:63:f2:3c:01:f7:55:8c:76:09: 73:5b:99:1d:5a:06:a1:c5:45:54:6e:70:8f:eb:33:40:aa:d8: 6c:0a:dc:ae:a9:75:1b:1c:f1:1a:85:da:b3:c6:cc:f9:d5:e9: 12:7a:5e:aa:3c:7c:30:7b:d1:96:40:0a:28:4d:ed:eb:2f:4c: e1:33:b6:c1:68:12:e0:1c:9d:e8:47:e9:aa:8c:1c:66:b9:4f: a3:ee:28:20:e0:c8:4a:cc:b6:d1:a0:67:c7:56:f5:56:91:48: 52:85:fd:12:02:d3:26:1b:b7:4a:4b:6c:4b:13:ae:00:a8:ac: a6:d0:59:34:cd:30:4f:8b:28:dc:48:e2:0d:d7:59:c0:ef:96: c0:7d:a7:89:94:15:b5:e7:1e:23:9f:d8:c4:57:3d:41:06:23: d9:51:dc:51:bb:ab:12:4f:6f:03:88:39:0c:73:1d:00:ca:d9: 82:57:08:0a -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnKYn7+48u7xNjjhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUwOTAwNDUzNFoXDTI3MDgxMjAwNDUzNFowLzEtMCsGA1UEAxMk YzE4NmEyNzYtOTE0MS00MWRhLWJhYmUtNDU1OWQyYzZkNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yW8Gbnk80d0W+72vBQhye8gwu+1iCIrLrn4 Uik5hFphnUHNiwU/id5u62wlx9QMxUsRZ76mik/4bbsvKcwLRdtoi/JTcz3KkfN3 y20Kp9KWh+D/1iFWJq8/+RZXALRF0K9k/WT/l5TfP7GCuMDyAv3NtmjLSVV4cuWx 5sKazQprU84XVaPRsrrzNzEu43vl7EPl/dfHZASjAxBALmRnxMaCoIBgx1MG0SnY 6AtVOAxoC1y17mZYT3GXVHnRSNOQPCBzV7Cctcbz41DLOhe4k0URZazL7Nu0MRQz eL0zbpKqsqAlPis9CjT9uB/qtzCXdNwOCPY71FQa3EF6BZkQZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGz+K/XTNq5S8ZPGzPWG0E4TF24jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJjNmQ3MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MxODZhMjc2LTkxNDEtNDFkYS1i YWJlLTQ1NTlkMmM2ZDczNC9jMTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJj NmQ3MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALOqFAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Q7MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYIr0XyY6r+9yboEz3UdUxo66wxy6x7mzUFNKcdRs4TK6eeg7 1LRVfYpqJOKszMzCait7mWK53rvM5MGtHRXgjpiBW9dreUVXR+hF5ZHP+Mf6Y/I8 AfdVjHYJc1uZHVoGocVFVG5wj+szQKrYbArcrql1GxzxGoXas8bM+dXpEnpeqjx8 MHvRlkAKKE3t6y9M4TO2wWgS4Byd6EfpqowcZrlPo+4oIODISsy20aBnx1b1VpFI UoX9EgLTJhu3SktsSxOuAKisptBZNM0wT4so3EjiDddZwO+WwH2niZQVteceI5/Y xFc9QQYj2VHcUburEk9vA4g5DHMdAMrZglcICg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:22 2025 by rpki-client