$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer File: d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer (raw, json) Hash identifier: dwqvOOm3Q/uVvfDFwZhdH7yw6x9hpwFa23VsDC+BuDw= Subject key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584ADBF9753AAE4579B22D4F3F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 15 Aug 2025 00:45:25 +0000 Certificate not after: Thu 18 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 7257 IP: 23.149.248.0/24 IP: 149.112.53.0/24 IP: 2602:fa90::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:f9:75:3a:ae:45:79:b2:2d:4f:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 15 00:45:25 2025 GMT Not After : Nov 18 01:45:25 2027 GMT Subject: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:d4:ff:61:ea:f1:09:67:74:99:6c:75:bb: 52:c5:29:53:dc:53:d5:64:33:e6:21:df:d7:f6:46: e3:db:b0:49:4d:03:cd:a3:1a:c7:d5:5d:8e:0a:49: 54:f8:1c:70:ef:67:35:2f:ba:5f:d5:08:df:0b:46: 8d:97:21:1d:01:62:e5:69:19:4c:e4:34:06:54:47: af:96:82:bd:a5:6f:ec:81:f5:8c:df:a3:77:5e:c3: 10:76:4d:9c:1a:c2:92:a6:01:79:4d:d4:c4:03:77: 77:2d:83:df:60:6a:cd:33:1d:74:05:84:b7:e0:29: a0:bd:11:11:1e:57:db:ac:29:4d:48:0a:41:dd:37: c9:1b:ad:7e:fc:75:59:38:0b:75:ef:4c:bd:7c:8e: 09:0b:0e:8f:9c:d0:1f:53:7b:a7:93:37:67:3c:53: 55:bd:37:36:38:37:b8:dd:c5:c4:2d:ec:cc:36:76: d7:d3:a7:fd:64:2d:1b:da:6c:6b:db:58:17:81:2b: 9e:e8:25:d6:3f:b9:ff:6c:c0:b0:ba:e2:e2:47:fc: be:35:72:1a:98:a8:8e:c2:ae:4b:b1:2e:f2:e4:c9: 6d:56:59:b5:53:89:69:45:b8:35:a6:9e:63:3c:d0: e9:89:1c:5c:e1:f1:66:03:18:34:64:4c:88:8f:a1: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.248.0/24 149.112.53.0/24 IPv6: 2602:fa90::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7257 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a0:af:ad:e7:78:28:ff:40:ce:9e:fe:95:5a:eb:92:83:b4: c7:2a:9d:6d:d9:7e:18:f1:a5:10:4a:f5:af:6f:08:d1:fd:4f: d2:00:45:dd:20:da:c6:80:ee:42:e3:73:28:09:50:cd:18:70: 08:a9:32:84:a3:50:10:af:a7:82:03:90:10:19:7e:00:6d:62: 4e:a3:79:5e:41:57:ac:ff:fb:1d:3e:ed:9f:d3:92:1b:b0:27: 4e:7b:ff:bc:55:91:08:76:f1:fe:1b:a3:74:c4:1f:46:45:de: bc:41:93:98:2e:26:d2:1b:35:2a:71:77:b2:7c:f2:66:b2:d7: 88:59:32:f9:35:7f:de:c2:6f:04:bc:56:fa:b5:a2:58:4a:fe: d8:40:b0:dc:e7:c7:43:9a:b3:13:0c:7c:e1:20:01:8b:d9:76: 4b:f4:9a:45:c5:39:dd:15:cd:db:79:dc:70:1a:ee:52:81:59: 9c:d2:52:08:16:73:7a:6a:9e:b0:ad:d2:9e:a6:23:0a:b6:15: d4:ff:65:be:e9:3e:29:26:3c:88:25:a7:b8:9f:b5:d8:0e:87: 0f:39:b3:16:dd:c8:16:06:c2:04:8f:6d:4a:f0:b1:95:69:92: b5:03:34:80:2a:a1:3b:11:30:a8:bb:39:52:f2:d9:bc:02:f7: c2:fb:b4:9a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWErb+XU6rkV5si1PPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxNTAwNDUyNVoXDTI3MTExODAxNDUyNVowLzEtMCsGA1UEAxMk ZDhlYTEwODEtYmNjYi00MWQ1LWIwZmUtMWI5NzI0Y2NlZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODU/2Hq8QlndJlsdbtSxSlT3FPVZDPmId/X 9kbj27BJTQPNoxrH1V2OCklU+Bxw72c1L7pf1QjfC0aNlyEdAWLlaRlM5DQGVEev loK9pW/sgfWM36N3XsMQdk2cGsKSpgF5TdTEA3d3LYPfYGrNMx10BYS34CmgvRER HlfbrClNSApB3TfJG61+/HVZOAt170y9fI4JCw6PnNAfU3unkzdnPFNVvTc2ODe4 3cXELezMNnbX06f9ZC0b2mxr21gXgSue6CXWP7n/bMCwuuLiR/y+NXIamKiOwq5L sS7y5MltVlm1U4lpRbg1pp5jPNDpiRxc4fFmAxg0ZEyIj6GxNwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFINmz3vf10Bscg5VPwJemM0N48z4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k OGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRjY2VkM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i MGZlLTFiOTcyNGNjZWQzZi9kOGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRj Y2VkM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlfgDBACVcDUwDgQCAAIwCAMGBCYC+pAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGGgr63neCj/QM6e/pVa 65KDtMcqnW3ZfhjxpRBK9a9vCNH9T9IARd0g2saA7kLjcygJUM0YcAipMoSjUBCv p4IDkBAZfgBtYk6jeV5BV6z/+x0+7Z/TkhuwJ057/7xVkQh28f4bo3TEH0ZF3rxB k5guJtIbNSpxd7J88may14hZMvk1f97CbwS8Vvq1olhK/thAsNznx0OasxMMfOEg AYvZdkv0mkXFOd0Vzdt53HAa7lKBWZzSUggWc3pqnrCt0p6mIwq2FdT/Zb7pPikm PIglp7iftdgOhw85sxbdyBYGwgSPbUrwsZVpkrUDNIAqoTsRMKi7OVLy2bwC98L7 tJo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:12 2025 by rpki-client