$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer File: c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer (raw, json) Hash identifier: HMKa9a98EMRTpUPTKkKSbeztyxsXXjLCTPvoGdsJvzk= Subject key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A8A31B4424AF2858250289DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 17:42:28 +0000 Certificate not after: Sun 16 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 397750 IP: 23.141.220.0/24 IP: 104.232.42.0/24 IP: 2602:fc78::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:31:b4:42:4a:f2:85:82:50:28:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 16 17:42:28 2025 GMT Not After : Aug 16 00:45:20 2026 GMT Subject: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:ca:d2:a6:2d:42:67:11:78:f0:a5:a0:e8: 4d:85:58:e5:6a:a1:4e:0e:3f:f4:e4:19:ea:4a:3d: 60:e1:60:b2:79:0c:ac:91:6a:d8:bd:22:96:e3:06: a0:65:41:f7:1d:be:b7:fb:b8:cb:05:1d:4f:30:94: 61:4d:67:4f:23:04:4f:88:ef:ad:b3:61:9e:0f:20: 09:05:ad:9f:8c:53:b9:43:3d:f8:83:53:30:fe:a7: 0d:2f:6d:11:f4:21:ea:47:bf:43:11:d0:02:5a:f8: bf:20:68:ad:3e:28:1a:59:04:ca:d0:dc:e1:25:cf: d5:12:20:62:8c:e6:0b:ac:ca:16:66:d1:99:02:48: 9b:b1:0f:87:62:b6:9d:bc:8d:f5:4b:74:40:41:8b: a4:45:ae:c4:78:24:cb:a1:0c:4d:ba:db:6e:47:eb: b0:9f:7d:7a:e6:79:06:85:bf:13:96:50:e0:de:dc: f1:57:40:2e:f9:d5:2f:31:b4:62:66:7a:54:dd:72: 3b:4b:bd:f4:8b:37:6b:5f:68:42:09:96:c6:c4:00: e8:92:d7:80:52:dc:b6:ec:cd:82:78:2f:8f:6e:97: 0b:73:67:9d:98:35:55:b8:24:d1:b5:dd:a1:ed:a1: ef:66:07:9c:aa:a1:64:9a:5a:39:52:8c:d9:86:0d: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.141.220.0/24 104.232.42.0/24 IPv6: 2602:fc78::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397750 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1f:e3:b2:3a:74:fe:b5:bf:9c:86:83:4f:63:98:ae:5c:4e: f4:71:5b:78:5c:dc:44:31:66:c3:e7:74:f4:1c:6f:6d:c0:ef: 0c:47:30:82:88:dd:86:cb:f9:32:cc:09:b8:d6:61:e2:ed:6d: 2c:44:38:51:5f:aa:67:76:d4:1c:97:97:28:64:c3:41:5d:54: 3e:b9:50:8b:10:ee:2a:1f:5c:c2:f3:07:0b:be:7a:9f:73:57: 52:a5:4b:4e:7c:58:cc:de:1e:a6:c8:75:2c:f6:a6:aa:c4:70: ea:c7:01:e8:79:bc:7e:52:75:0f:3f:96:78:be:f8:50:03:e7: bc:f2:a0:bf:bd:d0:95:5d:6f:bc:9f:3a:5a:44:f5:4c:e4:10: f8:73:e6:09:f8:97:c6:f3:e0:90:f1:e9:48:4b:92:b6:77:2d: c4:36:43:1f:43:9e:95:56:dc:ae:83:1f:c6:2e:ff:e3:ed:ef: 61:a6:6f:66:a8:43:94:cb:a4:41:15:53:6c:43:6d:83:b0:36: d1:1c:f0:3d:d5:df:df:43:ba:55:e1:33:26:d2:03:9f:d9:e7: ab:de:fb:63:ea:6c:41:5f:fc:67:db:52:c7:8b:85:c1:d7:9d: 3d:bd:ac:31:f4:db:c9:d1:45:55:a5:19:35:ea:42:cb:89:9b: e8:2e:ef:82 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEqKMbRCSvKFglAoncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxNjE3NDIyOFoXDTI2MDgxNjAwNDUyMFowLzEtMCsGA1UEAxMk YzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdjODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8HK0qYtQmcRePCloOhNhVjlaqFODj/05Bnq Sj1g4WCyeQyskWrYvSKW4wagZUH3Hb63+7jLBR1PMJRhTWdPIwRPiO+ts2GeDyAJ Ba2fjFO5Qz34g1Mw/qcNL20R9CHqR79DEdACWvi/IGitPigaWQTK0NzhJc/VEiBi jOYLrMoWZtGZAkibsQ+HYradvI31S3RAQYukRa7EeCTLoQxNuttuR+uwn3165nkG hb8TllDg3tzxV0Au+dUvMbRiZnpU3XI7S730izdrX2hCCZbGxADokteAUty27M2C eC+PbpcLc2edmDVVuCTRtd2h7aHvZgecqqFkmlo5UozZhg0LMQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJbk7W6eP4uNrr+6uwgho8Ob0W7YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j M2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MzY2Q0NjI1LTYwMzQtNGIzYi05 ZDhiLTU0MTdjYTk3YzgzOS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5 N2M4MzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjdwDBABo6CowDgQCAAIwCAMGACYC/HgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYRtjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9H+OyOnT+tb+choNP Y5iuXE70cVt4XNxEMWbD53T0HG9twO8MRzCCiN2Gy/kyzAm41mHi7W0sRDhRX6pn dtQcl5coZMNBXVQ+uVCLEO4qH1zC8wcLvnqfc1dSpUtOfFjM3h6myHUs9qaqxHDq xwHoebx+UnUPP5Z4vvhQA+e88qC/vdCVXW+8nzpaRPVM5BD4c+YJ+JfG8+CQ8elI S5K2dy3ENkMfQ56VVtyugx/GLv/j7e9hpm9mqEOUy6RBFVNsQ22DsDbRHPA91d/f Q7pV4TMm0gOf2eer3vtj6mxBX/xn21LHi4XB1509vawx9NvJ0UVVpRk16kLLiZvo Lu+C -----END CERTIFICATE-----Generated at Mon Aug 4 08:19:00 2025 by rpki-client