$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer File: d3bf923d-6c9d-4713-887f-1f30075cf850.cer (raw, json) Hash identifier: 79SzqS2mwMPdXyhmiMn9yHX8iX8PE+Y7z6L7nc5OgBQ= Subject key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B3284A86665FD93E34E73E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 00:45:24 +0000 Certificate not after: Sun 19 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 32746 AS: 53281 AS: 63427 IP: 199.175.56.0/22 IP: 199.201.96.0/21 IP: 204.8.88.0/22 IP: 208.86.40.0/22 IP: 216.129.152.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:84:a8:66:65:fd:93:e3:4e:73:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 15 00:45:24 2025 GMT Not After : Dec 19 01:45:24 2027 GMT Subject: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:f9:0f:f6:20:a3:d4:db:43:43:37:5a:be: 35:25:72:34:87:c9:13:38:42:6a:60:5c:9a:97:77: ba:a9:55:9b:c2:f8:59:fc:39:a9:65:c2:a6:29:63: 65:00:a8:05:92:37:df:26:13:7d:ae:4d:03:c6:1c: be:03:fc:08:c9:e9:2c:55:c7:e7:70:29:26:70:8f: 55:f7:23:c7:56:4d:a0:bb:f4:cd:dd:b5:8c:56:35: a4:0c:b2:e8:54:a4:16:40:ae:ee:0c:d9:c7:2a:ac: 11:91:94:04:2f:b9:07:03:06:1d:7c:15:21:f6:c3: e3:44:6d:5e:1c:39:2b:da:ae:4f:d7:95:53:33:cb: 47:81:bf:df:17:84:b3:17:4e:a4:cc:ea:e5:d2:c9: 37:d4:f0:4e:0e:51:15:55:9b:26:7a:eb:55:c6:69: 71:b8:87:22:17:d9:a2:8b:98:4e:dc:fd:af:fd:c0: da:37:6e:e6:28:98:d4:1e:3b:49:46:72:72:33:2d: de:54:09:18:2e:04:e4:1e:67:d8:b4:d4:35:a5:22: 4f:44:c4:64:06:fa:43:0a:14:58:71:d4:5b:d9:70: f2:e5:1f:8b:e8:cc:79:12:4c:e3:4e:b0:61:b1:e5: 28:1f:00:6a:a2:2f:74:4e:74:23:7e:30:56:06:1b: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.175.56.0/22 199.201.96.0/21 204.8.88.0/22 208.86.40.0/22 216.129.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32746 53281 63427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9a:9f:bc:4b:5d:48:78:dd:a6:f7:8f:f9:c6:de:8a:b3:16: 4c:66:eb:97:6b:29:f8:8a:04:0b:5b:1c:a0:d7:87:16:6f:3e: 89:f3:19:76:ca:f0:85:01:32:57:bc:3d:bd:bf:aa:07:c7:fe: 81:9b:99:eb:7a:aa:37:bb:f0:47:ae:da:a1:91:cf:16:04:fe: 18:49:46:2f:f4:f5:65:bc:21:3c:1e:02:a9:a2:23:16:df:22: 18:1c:8d:be:1e:14:bb:66:ea:39:9f:f8:d8:d0:31:92:e3:34: 54:d0:4a:8c:45:d9:84:e3:c3:c0:57:f5:a6:da:5a:70:1b:8c: 89:cf:30:0b:fc:6f:c0:9e:f3:e8:d9:36:e3:bc:6c:e8:6c:2c: 20:f1:76:55:2d:35:97:63:b2:e7:59:6d:32:84:37:e7:8d:6b: 95:11:c9:3f:be:33:04:eb:87:51:c2:1a:cf:1e:76:26:00:85: 89:7b:15:d5:ed:62:94:3f:18:70:1b:f3:e1:a9:8a:46:38:bc: df:1f:81:a8:6f:91:9e:cf:64:03:26:8e:29:f3:93:57:b1:86: 3e:67:24:94:8e:e9:5f:3c:97:6b:cb:e4:28:ad:03:61:26:9b: e6:30:60:e6:2b:ef:c6:7b:9c:86:f4:6e:f4:4c:5f:de:90:d0: 77:60:c4:20 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEsyhKhmZf2T405z5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkxNTAwNDUyNFoXDTI3MTIxOTAxNDUyNFowLzEtMCsGA1UEAxMk ZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNmODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEr5D/Ygo9TbQ0M3Wr41JXI0h8kTOEJqYFya l3e6qVWbwvhZ/DmpZcKmKWNlAKgFkjffJhN9rk0Dxhy+A/wIyeksVcfncCkmcI9V 9yPHVk2gu/TN3bWMVjWkDLLoVKQWQK7uDNnHKqwRkZQEL7kHAwYdfBUh9sPjRG1e HDkr2q5P15VTM8tHgb/fF4SzF06kzOrl0sk31PBODlEVVZsmeutVxmlxuIciF9mi i5hO3P2v/cDaN27mKJjUHjtJRnJyMy3eVAkYLgTkHmfYtNQ1pSJPRMRkBvpDChRY cdRb2XDy5R+L6Mx5EkzjTrBhseUoHwBqoi90TnQjfjBWBhvNkQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFt+lGn7jxY/zMklUlRF+2272sW7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k M2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QzYmY5MjNkLTZjOWQtNDcxMy04 ODdmLTFmMzAwNzVjZjg1MC9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1 Y2Y4NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBALHrzgDBAPHyWADBALMCFgDBALQVigDBAPYgZgw IwYIKwYBBQUHAQgBAf8EFDASoBAwDgICf+oCAwDQIQIDAPfDMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB2a n7xLXUh43ab3j/nG3oqzFkxm65drKfiKBAtbHKDXhxZvPonzGXbK8IUBMle8Pb2/ qgfH/oGbmet6qje78Eeu2qGRzxYE/hhJRi/09WW8ITweAqmiIxbfIhgcjb4eFLtm 6jmf+NjQMZLjNFTQSoxF2YTjw8BX9abaWnAbjInPMAv8b8Ce8+jZNuO8bOhsLCDx dlUtNZdjsudZbTKEN+eNa5URyT++MwTrh1HCGs8ediYAhYl7FdXtYpQ/GHAb8+Gp ikY4vN8fgahvkZ7PZAMmjinzk1exhj5nJJSO6V88l2vL5CitA2Emm+YwYOYr78Z7 nIb0bvRMX96Q0HdgxCA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:40:13 2025 by rpki-client