$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer File: e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer (raw, json) Hash identifier: pXCqcBCsNZ2ySC7G198UwAovza4V37+HlPC4SAsoeOM= Subject key identifier: DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A25C45613A18F8F88D4E2A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Jun 2025 18:21:16 +0000 Certificate not after: Mon 13 Sep 2027 18:21:16 +0000 Subordinate resources: AS: 401760 IP: 23.140.20.0/24 IP: 2620:d9:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:c4:56:13:a1:8f:8f:88:d4:e2:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 10 18:21:16 2025 GMT Not After : Sep 13 18:21:16 2027 GMT Subject: CN=e91c6482-7261-4772-b3f7-fd5fa4ae995c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:95:74:09:18:6c:d2:e2:52:0a:2f:e5:a3: 15:c7:e8:f5:3a:aa:f5:4c:a0:0b:f7:8b:47:ca:04: 86:8b:30:bb:43:d3:63:4f:d8:60:39:2f:26:14:ea: 9a:6b:b6:34:70:d9:09:81:82:c7:31:ad:dc:1a:92: 11:2f:ac:aa:2e:60:3b:69:3a:cd:6c:df:d7:3d:45: 17:b8:63:cb:a3:9c:fc:8e:38:7f:7f:f8:54:b5:7e: 9f:1c:9d:ab:d7:bf:f8:98:9d:6b:96:fc:f8:df:16: 00:ae:db:f8:08:ef:66:ba:58:4f:61:86:e8:23:74: c5:6f:fb:f7:b4:6d:32:15:82:0e:7f:ba:8e:59:4b: 51:98:82:51:06:80:e9:79:a4:5a:77:33:27:69:9b: 38:47:5f:35:56:27:b3:38:dd:bf:1e:61:31:68:4b: d9:b8:fb:31:8b:91:05:e1:61:6b:76:91:98:99:da: 14:63:62:5b:67:95:3b:ca:f6:34:af:fc:29:5d:a0: bc:2c:e9:7c:89:b1:75:15:23:24:7d:77:6a:d7:80: a6:4c:7e:f8:0e:29:5f:bf:36:e9:a1:61:be:02:bf: ae:85:8f:57:48:8d:07:45:bc:47:1a:66:50:c6:37: c7:94:e5:8b:42:89:6a:28:09:e7:e1:ad:0f:af:83: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.20.0/24 IPv6: 2620:d9:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8a:1a:b0:9b:d5:f6:59:4e:37:b4:81:de:51:dc:69:78:6c: ef:5b:29:d4:38:2a:60:19:8d:56:49:f5:20:f9:02:0d:cf:6c: 34:60:00:63:7d:68:f2:d3:7b:6b:b3:cf:a8:30:71:26:25:c8: f5:e2:63:76:e6:82:ee:c3:96:6f:20:9a:ec:ee:be:39:cc:d8: 43:ea:0d:68:ab:e7:52:b3:85:df:5b:51:f8:da:59:df:37:26: ea:de:7a:49:aa:b7:f3:98:92:9e:c6:8a:1e:04:92:36:18:07: a4:37:8c:1e:b9:f0:a2:68:21:78:b0:b1:4c:e5:7d:da:b4:73: c4:f4:ca:50:14:85:e7:4d:26:f4:5e:d8:d5:06:cd:43:b9:f4: 8b:83:fc:54:1a:0f:d8:b3:ad:e7:88:e0:4d:79:d0:c7:c3:e4: 98:22:63:f7:57:b4:7f:e3:10:e4:55:be:60:5f:7a:b6:ec:d7: 7a:9e:b2:11:c7:04:d4:7d:28:b3:7e:0d:51:0f:f6:10:99:4e: 7a:04:26:df:41:30:d3:ee:f3:5d:a5:99:76:fc:41:14:ef:0f: e8:c0:ed:80:21:50:01:cc:c8:53:42:4e:1b:8a:17:64:da:34: 37:be:ce:28:df:f6:3a:6c:52:7a:5f:91:ad:8c:b8:24:31:2c: 5a:ed:dc:95 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEolxFYToY+PiNTioIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxMDE4MjExNloXDTI3MDkxMzE4MjExNlowLzEtMCsGA1UEAxMk ZTkxYzY0ODItNzI2MS00NzcyLWIzZjctZmQ1ZmE0YWU5OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEyVdAkYbNLiUgov5aMVx+j1Oqr1TKAL94tH ygSGizC7Q9NjT9hgOS8mFOqaa7Y0cNkJgYLHMa3cGpIRL6yqLmA7aTrNbN/XPUUX uGPLo5z8jjh/f/hUtX6fHJ2r17/4mJ1rlvz43xYArtv4CO9mulhPYYboI3TFb/v3 tG0yFYIOf7qOWUtRmIJRBoDpeaRadzMnaZs4R181ViezON2/HmExaEvZuPsxi5EF 4WFrdpGYmdoUY2JbZ5U7yvY0r/wpXaC8LOl8ibF1FSMkfXdq14CmTH74Dilfvzbp oWG+Ar+uhY9XSI0HRbxHGmZQxjfHlOWLQolqKAnn4a0Pr4OxrwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFN4vQ7bEhebcM7AednyrPJrQbG9xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l OTFjNjQ4Mi03MjYxLTQ3NzItYjNmNy1mZDVmYTRhZTk5NWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5MWM2NDgyLTcyNjEtNDc3Mi1i M2Y3LWZkNWZhNGFlOTk1Yy9lOTFjNjQ4Mi03MjYxLTQ3NzItYjNmNy1mZDVmYTRh ZTk5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXjBQwDwQCAAIwCQMHACYgANkgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGIoasJvV9llON7SB3lHcaXhs 71sp1DgqYBmNVkn1IPkCDc9sNGAAY31o8tN7a7PPqDBxJiXI9eJjduaC7sOWbyCa 7O6+OczYQ+oNaKvnUrOF31tR+NpZ3zcm6t56Saq385iSnsaKHgSSNhgHpDeMHrnw omgheLCxTOV92rRzxPTKUBSF500m9F7Y1QbNQ7n0i4P8VBoP2LOt54jgTXnQx8Pk mCJj91e0f+MQ5FW+YF96tuzXep6yEccE1H0os34NUQ/2EJlOegQm30Ew0+7zXaWZ dvxBFO8P6MDtgCFQAczIU0JOG4oXZNo0N77OKN/2OmxSel+RrYy4JDEsWu3clQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:50 2025 by rpki-client