$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer File: f01c98d6-0a7e-47d2-9b33-584d06920624.cer (raw, json) Hash identifier: wSC6RflYBjEzg9uYRz/bxFfHc726NnqXkVnUBL5nFYA= Subject key identifier: 92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A8752F1F19644B02A48C2D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 17:02:01 +0000 Certificate not after: Mon 18 Oct 2027 17:02:01 +0000 Subordinate resources: AS: 401610 IP: 206.168.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:52:f1:f1:96:44:b0:2a:48:c2:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 15 17:02:01 2025 GMT Not After : Oct 18 17:02:01 2027 GMT Subject: CN=f01c98d6-0a7e-47d2-9b33-584d06920624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:de:ab:a7:2a:6b:76:46:0d:cd:52:ff:ba: e2:b8:8d:41:35:85:e2:3a:24:24:50:c1:c0:90:9c: 8b:4f:e3:88:7f:db:02:6a:a5:17:ee:ea:08:4d:0f: 52:1b:b0:eb:ed:8f:b7:be:1c:d1:a3:9e:e7:cd:67: 4a:5e:e7:bb:5a:aa:55:1b:07:f1:6c:80:dd:34:78: d8:a6:73:89:b4:10:63:5b:3b:8b:d4:de:8b:cd:29: b6:eb:29:90:2a:8d:bd:5d:ee:26:f2:90:7a:73:42: 10:26:1d:18:33:ff:8c:b8:72:15:bd:18:6e:ac:a8: 09:c6:00:48:d2:53:ac:f7:34:e9:fc:79:29:cd:66: 88:6a:38:e2:a7:ac:bd:84:a2:b5:c6:32:e2:1b:5b: dc:ea:00:a4:21:48:84:f6:6e:1f:f8:61:44:e1:aa: e3:0a:35:92:67:39:80:8e:b8:cd:3d:88:d3:47:f7: db:b3:8f:68:b0:d4:32:c8:a9:9d:2b:b3:9b:3b:92: 73:2d:b4:07:97:10:d5:0b:32:07:0c:04:0d:20:3f: 72:ca:a5:2e:fa:3c:b8:8a:a3:c1:d3:4f:ab:0a:4d: 94:c1:13:c2:86:52:64:47:72:b4:4b:ad:80:fa:ac: 8b:a5:b7:22:a8:1c:a3:7e:f9:eb:22:06:35:3b:04: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.104.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401610 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d7:7a:92:3a:53:d7:82:30:47:68:71:25:f0:ac:e1:52:da: 98:44:a0:ef:d9:9b:50:c3:5a:e9:29:06:f2:36:69:80:b9:50: b5:81:5f:08:77:d3:b8:a9:60:7a:08:22:c1:55:b7:af:c2:9d: ce:cd:09:2d:a9:2e:68:4f:ad:d5:ec:1f:b8:2d:4c:a0:4a:7b: ed:c9:b0:b2:80:15:b7:72:11:b3:de:ba:c5:3a:23:41:5c:ae: e6:06:d8:fd:8f:5c:0b:54:6e:6e:3e:7b:04:d9:53:41:75:74: 0c:f9:a1:b6:68:fa:30:dd:19:bc:c1:9e:f3:c1:4f:4c:ad:ec: 3f:a1:4d:a2:54:de:a1:65:d2:2f:d8:b4:fb:ef:91:1a:20:2e: d9:eb:65:4c:19:c3:79:27:4a:83:95:ea:3e:37:fe:84:4b:24: 65:36:5b:de:4e:3b:fb:1f:ac:0f:98:ad:fa:29:82:1a:73:34: 5d:ea:23:cb:f6:a5:87:2f:28:1d:d4:d6:35:ec:8f:01:f6:78: e0:74:ab:0e:d5:6e:e4:89:69:4a:da:12:f9:34:49:bb:d7:a2: 5d:18:33:12:af:5b:07:29:65:8c:81:61:73:c3:c3:7f:82:68: 5a:f4:8f:2f:a0:fd:da:3d:86:7d:8a:bd:92:32:a2:6f:48:f6: 81:05:dc:61 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqHUvHxlkSwKkjC0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxNTE3MDIwMVoXDTI3MTAxODE3MDIwMVowLzEtMCsGA1UEAxMk ZjAxYzk4ZDYtMGE3ZS00N2QyLTliMzMtNTg0ZDA2OTIwNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKreq6cqa3ZGDc1S/7riuI1BNYXiOiQkUMHA kJyLT+OIf9sCaqUX7uoITQ9SG7Dr7Y+3vhzRo57nzWdKXue7WqpVGwfxbIDdNHjY pnOJtBBjWzuL1N6LzSm26ymQKo29Xe4m8pB6c0IQJh0YM/+MuHIVvRhurKgJxgBI 0lOs9zTp/HkpzWaIajjip6y9hKK1xjLiG1vc6gCkIUiE9m4f+GFE4arjCjWSZzmA jrjNPYjTR/fbs49osNQyyKmdK7ObO5JzLbQHlxDVCzIHDAQNID9yyqUu+jy4iqPB 00+rCk2UwRPChlJkR3K0S62A+qyLpbciqByjfvnrIgY1OwRouwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJI9qIPoz5vkX6ORljQgZf0ils+KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m MDFjOThkNi0wYTdlLTQ3ZDItOWIzMy01ODRkMDY5MjA2MjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YwMWM5OGQ2LTBhN2UtNDdkMi05 YjMzLTU4NGQwNjkyMDYyNC9mMDFjOThkNi0wYTdlLTQ3ZDItOWIzMy01ODRkMDY5 MjA2MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPOqGgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiDKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABzXepI6U9eCMEdocSXwrOFS2phEoO/Zm1DDWukpBvI2aYC5 ULWBXwh307ipYHoIIsFVt6/Cnc7NCS2pLmhPrdXsH7gtTKBKe+3JsLKAFbdyEbPe usU6I0FcruYG2P2PXAtUbm4+ewTZU0F1dAz5obZo+jDdGbzBnvPBT0yt7D+hTaJU 3qFl0i/YtPvvkRogLtnrZUwZw3knSoOV6j43/oRLJGU2W95OO/sfrA+Yrfopghpz NF3qI8v2pYcvKB3U1jXsjwH2eOB0qw7VbuSJaUraEvk0SbvXol0YMxKvWwcpZYyB YXPDw3+CaFr0jy+g/do9hn2KvZIyom9I9oEF3GE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:24 2025 by rpki-client