$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer File: d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer (raw, json) Hash identifier: EItozgOHzsIqtMDHZg3tEBYiKtpJB/Avcmw/qtBXgVo= Subject key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AD67CCC9CDF51771C2D988E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 01:35:12 +0000 Certificate not after: Tue 16 Nov 2027 02:35:12 +0000 Subordinate resources: AS: 394149 IP: 199.185.184.0/23 IP: 2620:121:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:7c:cc:9c:df:51:77:1c:2d:98:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 13 01:35:12 2025 GMT Not After : Nov 16 02:35:12 2027 GMT Subject: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:19:ac:32:34:22:b5:6e:64:93:c2:69:6a: 60:e2:e7:d5:54:c5:14:d1:a0:c1:2d:7f:ce:f6:9c: 63:52:72:7c:92:11:ce:58:b3:30:ed:13:e6:2e:14: 61:1a:87:18:bf:92:20:3e:ad:0d:33:68:e1:80:d3: 86:1b:bc:74:3c:c2:2e:b9:20:1a:31:bf:c4:73:fd: 68:8b:c6:cf:44:d9:49:0b:17:3b:b2:10:79:64:27: d7:8c:3f:eb:e1:7a:aa:02:22:96:90:3e:8c:b1:8d: 04:ef:3f:97:d1:c3:4f:82:52:7f:85:fd:37:88:7f: b8:e4:fd:05:70:8d:de:a2:7b:29:5f:00:d5:5d:c3: 17:c3:03:8d:32:5e:28:e3:32:60:38:08:a5:96:c1: d4:2b:58:36:c4:cd:c4:26:f2:d7:20:8a:22:aa:df: 3f:82:e4:54:2f:e4:77:71:a7:6c:d2:5b:fe:43:6b: 94:47:36:ae:a2:5a:6a:61:d4:f5:18:da:17:cb:73: 0c:19:05:ab:a5:17:55:b9:77:d3:96:e4:60:05:03: 67:1e:98:db:0f:3a:8d:80:78:55:66:3a:5e:ab:e6: f2:75:c7:29:af:fc:74:35:a6:c8:8c:e3:8d:d1:b3: a6:37:92:13:e7:cc:f5:8b:e0:47:60:b1:43:85:cf: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.185.184.0/23 IPv6: 2620:121:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394149 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:35:c4:a5:2c:25:ab:41:11:5c:65:20:4a:35:a9:25:a2:cf: 98:1a:69:54:97:4b:ec:e1:98:d0:06:d1:b6:7f:82:db:fc:9c: b7:c3:22:1c:32:82:5e:8f:0e:be:c7:29:4b:e5:d1:8c:c2:96: c7:37:fc:90:60:d8:3a:9a:d4:cd:e6:a6:01:f7:e4:e9:4d:29: 55:d2:0a:53:3c:cf:f5:81:b6:8f:76:da:a6:90:37:19:4f:79: 84:91:1f:8e:c5:71:22:e1:67:2d:a7:3e:99:34:6a:a1:7f:d7: d7:37:c0:50:ce:6d:ec:d3:28:f1:8b:db:46:f4:bd:1a:6c:3d: e5:bd:cf:73:57:c2:67:a1:d9:23:0e:83:ef:d6:90:df:c3:28: 98:aa:b7:98:5b:42:10:bd:12:c2:80:7d:82:c1:e6:16:07:5b: af:07:dc:09:d8:2f:b1:1d:85:6b:74:35:25:ed:cb:57:7d:ac: cc:d0:70:4d:e2:5f:25:b5:f2:e8:48:85:84:2a:a0:5c:2a:b9: e4:7d:61:75:d7:ab:24:98:8e:70:ea:01:b7:eb:5c:78:84:20: 76:39:72:67:0e:69:3d:82:e7:10:c6:62:69:6a:23:99:04:71: c9:84:31:ff:41:93:fe:f4:39:f8:50:9e:63:4b:bc:07:94:7e: 33:2c:1c:52 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWErWfMyc31F3HC2YjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxMzAxMzUxMloXDTI3MTExNjAyMzUxMlowLzEtMCsGA1UEAxMk ZDI5YzExYWItYzQ3Ny00YzNjLThhNWQtYWE0YWM0MjMzMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jwZrDI0IrVuZJPCaWpg4ufVVMUU0aDBLX/O 9pxjUnJ8khHOWLMw7RPmLhRhGocYv5IgPq0NM2jhgNOGG7x0PMIuuSAaMb/Ec/1o i8bPRNlJCxc7shB5ZCfXjD/r4XqqAiKWkD6MsY0E7z+X0cNPglJ/hf03iH+45P0F cI3eonspXwDVXcMXwwONMl4o4zJgOAillsHUK1g2xM3EJvLXIIoiqt8/guRUL+R3 cads0lv+Q2uURzauolpqYdT1GNoXy3MMGQWrpRdVuXfTluRgBQNnHpjbDzqNgHhV Zjpeq+bydccpr/x0NabIjOON0bOmN5IT58z1i+BHYLFDhc+NqwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFM4zAht87fN2w6CCMTz81Wzw6Im8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k MjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQyMzMxMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QyOWMxMWFiLWM0NzctNGMzYy04 YTVkLWFhNGFjNDIzMzEzMi9kMjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQy MzMxMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHHubgwDwQCAAIwCQMHBCYgASGQADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGA6UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZDXEpSwlq0ERXGUgSjWpJaLP mBppVJdL7OGY0AbRtn+C2/yct8MiHDKCXo8OvscpS+XRjMKWxzf8kGDYOprUzeam Affk6U0pVdIKUzzP9YG2j3bappA3GU95hJEfjsVxIuFnLac+mTRqoX/X1zfAUM5t 7NMo8YvbRvS9Gmw95b3Pc1fCZ6HZIw6D79aQ38MomKq3mFtCEL0SwoB9gsHmFgdb rwfcCdgvsR2Fa3Q1Je3LV32szNBwTeJfJbXy6EiFhCqgXCq55H1hdderJJiOcOoB t+tceIQgdjlyZw5pPYLnEMZiaWojmQRxyYQx/0GT/vQ5+FCeY0u8B5R+MywcUg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:23 2025 by rpki-client