$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer File: ced1e153-6559-46ef-8f8b-ee841a2a0188.cer (raw, json) Hash identifier: OK05N5q+6Ch313H4OQEjplVTThAoWWewf6Cu7TjH8H4= Subject key identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A7D0E4C96B9946A8DC1095DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Jul 2025 00:45:37 +0000 Certificate not after: Fri 15 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 394889 IP: 199.48.172.0/22 IP: 2620:135:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:0e:4c:96:b9:94:6a:8d:c1:09:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 12 00:45:37 2025 GMT Not After : Oct 15 00:45:37 2027 GMT Subject: CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:e7:77:e3:7f:bb:46:90:b3:13:87:f7:77: b0:e6:8d:e2:e2:16:a5:1b:74:48:90:d3:01:50:8b: c6:8c:41:bf:f7:02:8c:fc:26:2f:e0:48:66:0c:f3: e0:ba:c6:2a:66:8f:7e:ab:13:57:3c:b8:c0:dc:e2: 7c:88:00:4c:76:00:df:fa:b2:0f:bf:a1:03:f8:1a: 62:86:df:7c:a4:d0:cc:67:65:aa:94:18:19:70:dd: 83:24:b8:90:aa:d5:91:cc:c5:07:1b:e1:52:95:72: 06:2a:93:a5:30:b5:32:5b:52:75:88:a9:21:5f:a1: e8:07:b0:af:4e:51:70:72:3e:62:03:5c:9d:21:90: 61:bc:31:c0:18:67:03:90:34:30:7b:e9:0c:2d:01: a3:fd:63:5c:6e:fc:69:36:4d:81:a1:39:93:57:42: 45:09:cf:6b:d2:45:de:cc:27:0f:54:eb:e7:d9:a4: d8:36:c1:2c:4f:34:83:7d:9b:80:c9:9b:62:b2:91: 35:d8:5b:46:79:82:c5:02:5a:56:22:1b:97:41:47: b1:af:7d:b8:3f:2a:00:9a:55:49:fc:65:1c:09:e0: 46:0a:73:5e:36:33:db:a1:1e:a5:a8:75:19:6b:8a: 43:ac:ad:ef:ef:4f:b8:eb:7f:69:dd:4a:f5:ba:9c: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.48.172.0/22 IPv6: 2620:135:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d7:a6:28:8c:f3:d3:f1:3b:a3:53:7a:7d:b6:fc:76:c7:35: bc:a2:0e:fe:e0:10:e3:8e:b0:f7:82:f1:2f:fb:2b:85:24:15: 49:42:6f:b6:10:05:6c:5e:a0:6e:d9:ff:89:6c:c8:69:1b:67: cd:12:08:8b:9b:b8:f8:80:4a:60:5b:13:27:8e:d0:59:4a:6d: 1e:af:b6:df:b9:35:56:a2:e2:86:34:2c:fc:20:d8:1d:d3:33: 37:62:f6:ac:6d:c6:d7:50:4b:a9:3d:63:db:f0:e1:7e:94:2c: b6:10:3b:47:b6:01:af:3a:ec:65:04:67:cd:b3:d2:99:30:c6: ed:53:a8:d6:67:d5:8c:fc:10:71:72:53:4c:c6:31:f5:dc:a6: 77:9c:f1:db:26:94:f8:53:21:eb:a1:36:03:68:8a:c1:30:e8: 7b:dd:a9:9d:84:9c:b9:32:c1:6e:74:4d:10:d9:31:75:09:3d: e1:3e:13:99:18:74:65:28:dd:d3:28:31:c6:8e:98:e1:2b:bc: 18:d0:b0:74:5c:4f:4e:d8:ed:29:79:b4:bb:e5:97:35:5c:0b: 6d:a2:ff:b1:81:0b:e3:d1:09:4b:c7:54:3f:ea:de:fd:d6:3b: 02:9d:56:c7:e9:a2:89:7c:44:d9:58:d9:d3:18:ae:96:58:9d: 10:76:b4:ae -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEp9DkyWuZRqjcEJXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxMjAwNDUzN1oXDTI3MTAxNTAwNDUzN1owLzEtMCsGA1UEAxMk Y2VkMWUxNTMtNjU1OS00NmVmLThmOGItZWU4NDFhMmEwMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnjnd+N/u0aQsxOH93ew5o3i4halG3RIkNMB UIvGjEG/9wKM/CYv4EhmDPPgusYqZo9+qxNXPLjA3OJ8iABMdgDf+rIPv6ED+Bpi ht98pNDMZ2WqlBgZcN2DJLiQqtWRzMUHG+FSlXIGKpOlMLUyW1J1iKkhX6HoB7Cv TlFwcj5iA1ydIZBhvDHAGGcDkDQwe+kMLQGj/WNcbvxpNk2BoTmTV0JFCc9r0kXe zCcPVOvn2aTYNsEsTzSDfZuAyZtispE12FtGeYLFAlpWIhuXQUexr324PyoAmlVJ /GUcCeBGCnNeNjPboR6lqHUZa4pDrK3v70+4639p3Ur1upwdhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF8rsg5qxWPr82ZoGsZk8O07pFpLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j ZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEyYTAxODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NlZDFlMTUzLTY1NTktNDZlZi04 ZjhiLWVlODQxYTJhMDE4OC9jZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEy YTAxODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHMKwwDgQCAAIwCAMGACYgATWgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR16YojPPT8TujU3p9tvx2xzW8 og7+4BDjjrD3gvEv+yuFJBVJQm+2EAVsXqBu2f+JbMhpG2fNEgiLm7j4gEpgWxMn jtBZSm0er7bfuTVWouKGNCz8INgd0zM3YvasbcbXUEupPWPb8OF+lCy2EDtHtgGv OuxlBGfNs9KZMMbtU6jWZ9WM/BBxclNMxjH13KZ3nPHbJpT4UyHroTYDaIrBMOh7 3amdhJy5MsFudE0Q2TF1CT3hPhOZGHRlKN3TKDHGjpjhK7wY0LB0XE9O2O0pebS7 5Zc1XAttov+xgQvj0QlLx1Q/6t791jsCnVbH6aKJfETZWNnTGK6WWJ0QdrSu -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:33 2025 by rpki-client