$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer File: e64236ac-e54b-4545-b57e-b971e5d37968.cer (raw, json) Hash identifier: vaOKmacBDQtXF5WxO7ROVnlRvvMMoOj/9ou3ovbMQEg= Subject key identifier: 1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A9E8E7E4A76219E6B245F1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Jul 2025 00:45:35 +0000 Certificate not after: Wed 27 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 16478 IP: 216.162.112.0/20 IP: 2620:11f:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:8e:7e:4a:76:21:9e:6b:24:5f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 24 00:45:35 2025 GMT Not After : Oct 27 00:45:35 2027 GMT Subject: CN=e64236ac-e54b-4545-b57e-b971e5d37968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:e2:16:42:83:c1:da:07:8c:e9:10:18:ca: ad:36:15:1d:6c:bc:e3:5e:ba:99:10:f2:54:0c:16: 3a:9b:8a:2f:5f:db:4b:13:9f:3d:76:35:ba:9c:55: f4:32:0d:f8:c1:46:f4:f8:74:9b:ee:a2:8b:cc:fd: 13:8e:ea:70:3f:7e:65:2d:9d:69:79:8e:23:1a:17: 47:38:12:e7:12:f0:7f:f9:09:ed:a3:cb:25:35:78: 6c:63:96:fa:69:50:3a:0c:16:43:ea:cb:ff:15:79: a0:81:09:37:83:20:a5:97:d9:e8:96:74:f2:92:1f: 93:09:67:80:3f:94:83:13:8a:14:97:d6:e7:b7:6b: 62:31:a5:77:68:74:d3:1a:1e:00:64:0c:a1:3b:ae: 29:e3:4c:e4:79:5d:72:4a:8b:3d:ca:42:c5:f5:31: 9e:a9:ce:41:1f:85:bc:93:49:6c:01:1f:74:49:cf: f0:07:d6:87:82:41:c5:e3:1e:32:a6:75:88:97:e1: 2d:d9:1e:1b:b6:2e:d5:71:a0:8b:cc:f5:c2:7c:a6: 8c:1b:ff:26:67:e1:56:d1:50:8e:d7:80:37:3c:6e: f8:75:26:be:2f:1c:cb:e5:f4:b6:1c:04:30:b5:6b: bb:86:7d:a2:6a:cd:47:a5:91:17:d9:a3:18:84:89: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 216.162.112.0/20 IPv6: 2620:11f:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:05:d2:13:45:64:e5:af:83:ae:28:88:cb:29:90:62:d6:d8: 07:56:30:e6:dd:2a:3c:0b:a6:cb:98:2f:a3:a3:28:b6:8c:d6: f3:cc:22:22:3f:d1:01:4d:bb:bc:d1:06:12:a1:52:44:2e:cf: cb:41:77:28:c5:fd:0a:77:d4:64:f5:a8:14:7f:cd:56:59:a1: f7:c2:f5:af:5b:d6:53:f2:00:13:1b:84:48:2f:69:a7:9f:2d: 7c:fc:09:9c:a5:68:0f:66:e7:59:df:cb:17:05:f0:99:aa:e9: 19:d1:a5:2e:fe:18:48:4e:ed:42:5d:29:39:e2:28:93:2b:78: 95:23:87:99:7e:04:f0:f7:04:51:f7:63:02:c4:7d:5f:12:48: 35:24:4d:98:69:8b:57:e6:3c:de:43:5b:e7:51:96:2c:4c:75: 2d:5c:b6:87:d3:db:95:4c:69:fd:0e:fd:30:05:1f:e0:e9:e0: 4d:93:48:11:6e:58:6e:15:02:27:32:10:a5:48:2b:83:3f:39: ab:44:5e:fe:6e:f6:42:b7:45:af:e3:b2:2d:20:e2:11:f2:de: 9d:f0:44:85:96:6b:15:7f:5b:97:a1:d0:23:b2:1e:1d:17:fb: 28:23:b2:c3:e5:f7:dd:b8:86:fb:fb:7a:2c:e8:3e:a1:b5:db: 8c:8c:f8:1d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEqejn5KdiGeayRfFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcyNDAwNDUzNVoXDTI3MTAyNzAwNDUzNVowLzEtMCsGA1UEAxMk ZTY0MjM2YWMtZTU0Yi00NTQ1LWI1N2UtYjk3MWU1ZDM3OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaniFkKDwdoHjOkQGMqtNhUdbLzjXrqZEPJU DBY6m4ovX9tLE589djW6nFX0Mg34wUb0+HSb7qKLzP0TjupwP35lLZ1peY4jGhdH OBLnEvB/+Qnto8slNXhsY5b6aVA6DBZD6sv/FXmggQk3gyCll9nolnTykh+TCWeA P5SDE4oUl9bnt2tiMaV3aHTTGh4AZAyhO64p40zkeV1ySos9ykLF9TGeqc5BH4W8 k0lsAR90Sc/wB9aHgkHF4x4ypnWIl+Et2R4bti7VcaCLzPXCfKaMG/8mZ+FW0VCO 14A3PG74dSa+LxzL5fS2HAQwtWu7hn2ias1HpZEX2aMYhInswQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB8e+9O9DE1+TspeGGwhoAuqDw50MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NjQyMzZhYy1lNTRiLTQ1NDUtYjU3ZS1iOTcxZTVkMzc5NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U2NDIzNmFjLWU1NGItNDU0NS1i NTdlLWI5NzFlNWQzNzk2OC9lNjQyMzZhYy1lNTRiLTQ1NDUtYjU3ZS1iOTcxZTVk Mzc5NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBATYonAwDgQCAAIwCAMGACYgAR9AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkBeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFsF0hNFZOWvg64oiMspkGLW2AdW MObdKjwLpsuYL6OjKLaM1vPMIiI/0QFNu7zRBhKhUkQuz8tBdyjF/Qp31GT1qBR/ zVZZoffC9a9b1lPyABMbhEgvaaefLXz8CZylaA9m51nfyxcF8Jmq6RnRpS7+GEhO 7UJdKTniKJMreJUjh5l+BPD3BFH3YwLEfV8SSDUkTZhpi1fmPN5DW+dRlixMdS1c tofT25VMaf0O/TAFH+Dp4E2TSBFuWG4VAicyEKVIK4M/OatEXv5u9kK3Ra/jsi0g 4hHy3p3wRIWWaxV/W5eh0COyHh0X+ygjssPl9924hvv7eizoPqG124yM+B0= -----END CERTIFICATE-----Generated at Wed Aug 6 11:08:48 2025 by rpki-client