$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer File: ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer (raw, json) Hash identifier: PDxDZNrSyfWRLGXFxgHjOqqswMnI6S91dWbsbwuR1GY= Subject key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A3A0DDE6B463B214C9E117000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 00:45:35 +0000 Certificate not after: Tue 21 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 32402 IP: 64.251.214.0/23 IP: 141.193.137.0/24 IP: 173.242.208.0/20 IP: 199.7.184.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:0d:de:6b:46:3b:21:4c:9e:11:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 18 00:45:35 2025 GMT Not After : Sep 21 00:45:35 2027 GMT Subject: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:78:23:6d:7a:95:11:04:ca:7f:4f:6b:da: 52:cf:ce:c4:94:f1:e5:93:20:47:f1:2a:56:4d:bd: 49:3a:ef:7c:fe:70:00:e5:8d:d5:fe:d0:48:46:f5: 75:67:55:ef:c3:62:d8:43:48:ec:9a:f1:f4:59:22: df:6a:34:26:50:a1:9a:4a:62:88:89:19:c8:ab:48: 05:fb:92:05:e8:56:5a:b2:a4:c3:55:39:c5:f7:76: 4e:7f:29:8b:41:dc:fa:6c:23:9f:ff:86:43:59:d6: 35:bf:5b:9c:f2:b9:c7:be:6d:86:2c:8a:a4:6b:7f: c2:57:bd:f6:0c:c5:5e:7d:d4:80:5a:fe:e0:0b:f2: e0:24:40:2a:82:68:43:5d:1f:08:3d:57:80:d3:7d: 38:7b:9b:34:36:6d:be:b3:36:ab:8a:ce:92:c3:f2: 41:d5:96:c2:73:bb:08:e2:6a:e4:3a:6e:a5:27:16: b0:8c:17:0d:2f:74:a8:38:6f:c3:eb:e7:10:2e:c0: 1a:30:11:35:e4:78:14:5f:e3:74:a1:4c:af:93:ea: 48:aa:06:25:35:b6:61:87:d2:96:cf:38:a9:72:dd: 86:13:65:40:27:31:7f:8d:02:6e:a6:d4:4d:49:89: db:40:47:c4:66:25:68:57:1f:9d:fd:17:94:c1:d4: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.251.214.0/23 141.193.137.0/24 173.242.208.0/20 199.7.184.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9b:14:78:07:5e:29:31:d6:4e:2f:b3:63:79:2a:a1:b0:30: 8a:44:d6:d1:3e:86:c1:a2:1d:62:36:29:17:29:41:f1:3d:d6: 1a:fd:c8:d0:58:96:82:b2:24:9c:b6:b6:98:b8:56:b6:ab:b4: 53:e9:80:c6:10:8f:df:c4:3e:a7:61:ff:c5:ae:d7:59:a1:15: 14:44:49:cd:a5:77:2a:44:58:35:12:12:dc:eb:87:43:c5:06: 13:5d:bd:5d:b7:1c:fd:b4:14:fb:8c:f5:b1:cc:d5:fd:96:ae: e6:5f:23:76:7a:83:55:fd:dc:83:72:06:ed:6b:fe:c4:f9:fc: 2e:fa:d7:18:d7:ce:cd:c8:a8:25:8a:d1:8a:e8:9d:89:56:2d: 6e:57:7b:bc:26:98:8e:da:d1:db:55:43:48:91:06:c5:fc:bd: ed:6e:bd:75:e2:7c:56:1e:31:04:c7:30:10:25:2a:13:98:38: b0:1d:0d:90:5b:0e:48:20:55:4f:36:c5:cb:86:10:13:87:24: ab:91:f1:e0:03:af:23:8a:b8:45:cf:a6:f4:b9:0e:c5:13:49: 5f:6d:17:e3:9c:1e:a6:ef:1e:d8:93:a2:11:4a:96:e5:c1:f9: 72:aa:96:2b:b0:9e:18:0f:1d:96:34:0e:78:4e:fb:db:02:e1: f1:08:11:6a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEo6Dd5rRjshTJ4RcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxODAwNDUzNVoXDTI3MDkyMTAwNDUzNVowLzEtMCsGA1UEAxMk ZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNmN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTZ4I216lREEyn9Pa9pSz87ElPHlkyBH8SpW Tb1JOu98/nAA5Y3V/tBIRvV1Z1Xvw2LYQ0jsmvH0WSLfajQmUKGaSmKIiRnIq0gF +5IF6FZasqTDVTnF93ZOfymLQdz6bCOf/4ZDWdY1v1uc8rnHvm2GLIqka3/CV732 DMVefdSAWv7gC/LgJEAqgmhDXR8IPVeA0304e5s0Nm2+szaris6Sw/JB1ZbCc7sI 4mrkOm6lJxawjBcNL3SoOG/D6+cQLsAaMBE15HgUX+N0oUyvk+pIqgYlNbZhh9KW zzipct2GE2VAJzF/jQJuptRNSYnbQEfEZiVoVx+d/ReUwdTWdQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNkdGa8/kwRtTVk2Tdcc6YcbXYTrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l ZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VkOGU0ZGZhLWU5MGUtNGUzZC1h NTE1LTkwMTcwOGMzZjdmOC9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhj M2Y3ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAFA+9YDBACNwYkDBASt8tADBAPHB7gwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICfpIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVJsUeAdeKTHWTi+zY3kqobAw ikTW0T6GwaIdYjYpFylB8T3WGv3I0FiWgrIknLa2mLhWtqu0U+mAxhCP38Q+p2H/ xa7XWaEVFERJzaV3KkRYNRIS3OuHQ8UGE129Xbcc/bQU+4z1sczV/Zau5l8jdnqD Vf3cg3IG7Wv+xPn8LvrXGNfOzcioJYrRiuidiVYtbld7vCaYjtrR21VDSJEGxfy9 7W69deJ8Vh4xBMcwECUqE5g4sB0NkFsOSCBVTzbFy4YQE4ckq5Hx4AOvI4q4Rc+m 9LkOxRNJX20X45wepu8e2JOiEUqW5cH5cqqWK7CeGA8dljQOeE772wLh8QgRag== -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:52 2025 by rpki-client