$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer File: f08438f2-f343-4b2c-b0be-ac56b734d48d.cer (raw, json) Hash identifier: kXZJ/CXRg0sgvUgK0hxU2REfuP1cNoI389sD3J0Gg1I= Subject key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BBD4BDBEC07C03D21F3781080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 17:48:19 +0000 Certificate not after: Mon 11 Jan 2027 17:05:31 +0000 Subordinate resources: AS: 17303 AS: 46933 IP: 74.188.240.0/22 IP: 185.212.4.0/24 IP: 195.85.116.0/24 IP: 206.55.212.0/24 IP: 208.67.108.0/22 IP: 216.250.99.0/24 IP: 2605:dec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:4b:db:ec:07:c0:3d:21:f3:78:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 3 17:48:19 2025 GMT Not After : Jan 11 17:05:31 2027 GMT Subject: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:77:3c:fe:db:6a:3a:1f:b1:ef:2f:14:4f: bf:5d:15:cb:7c:28:04:f9:d5:50:3b:c4:6f:1c:32: a3:b1:ea:a7:9d:8b:73:fd:6a:64:57:59:90:81:dc: 56:b9:57:f5:67:4a:e8:f9:81:36:41:c8:a4:18:95: cd:49:fa:96:cc:65:f0:03:a7:9a:47:41:e4:50:fe: da:6b:15:09:f2:98:da:92:57:1f:3a:07:d0:24:89: 2d:2f:2a:f7:bd:e2:d0:2f:36:c3:60:14:2d:81:c5: 1b:db:24:ea:e3:ec:8d:9d:a5:09:95:31:9f:93:89: 3e:95:85:01:85:71:de:bd:e0:61:28:89:e0:5b:0a: 5f:2f:05:c6:21:52:4a:e2:1a:cc:68:83:b4:35:0f: e1:8a:23:f0:db:87:c9:4b:8f:f9:c2:a6:79:ef:12: 98:32:c8:1f:7d:11:cc:7f:16:40:dc:ed:72:99:db: 5b:40:02:80:3f:05:36:24:cb:e2:97:2d:86:a5:2b: ed:25:cf:7c:8e:b8:e6:6f:37:bf:cc:ca:d2:7c:d4: 49:0c:7e:cb:62:a3:d5:1d:12:f2:a5:7f:e1:a5:7c: 64:b2:f3:5d:a9:db:02:b2:79:c1:f1:f7:22:fd:0e: 2a:d2:7b:d3:50:a3:5b:9b:ad:1a:22:cf:04:17:17: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 74.188.240.0/22 185.212.4.0/24 195.85.116.0/24 206.55.212.0/24 208.67.108.0/22 216.250.99.0/24 IPv6: 2605:dec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17303 46933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d1:5a:c1:0c:9a:5f:4e:d7:8f:58:21:38:5c:e1:16:6f:be: 29:ce:d4:1f:ea:65:d3:5b:fb:35:22:73:10:51:f3:57:6b:55: fc:d9:36:bb:14:59:f0:85:44:e3:1b:36:19:71:25:1b:ad:a2: d5:72:2b:e2:55:19:1e:ce:b6:f3:a5:a7:09:c1:be:72:e7:11: cc:34:f4:09:30:b0:56:32:03:b7:98:8a:82:b3:3e:13:aa:0b: 5e:da:d4:e5:9c:41:24:04:93:df:e6:ad:c3:0e:e1:a4:9a:c0: d6:34:69:84:37:7b:cf:fb:d6:79:dc:b6:b1:c6:49:e4:1e:46: 03:48:b2:b6:83:26:ea:b5:7a:c7:ef:23:ae:af:9f:d7:bc:86: b4:6d:d4:ef:03:24:35:bc:08:ac:71:5e:b1:f3:68:53:7a:2f: 54:eb:61:02:16:46:89:72:1e:c6:62:40:4e:f6:de:2a:a4:50: b6:3d:ae:b2:a9:d3:ba:07:7a:06:16:65:ef:06:08:a5:70:46: a6:98:9f:bb:9d:eb:90:7e:69:4f:a4:8d:2a:94:ad:1f:4c:43: ec:2a:8c:67:91:30:d9:3e:bb:53:9a:c2:d0:6d:bc:7b:39:d3: b8:23:8b:40:dc:ac:4a:47:83:f8:47:19:27:57:88:da:2d:7e: 23:db:ef:0e -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEu9S9vsB8A9IfN4EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTEwMzE3NDgxOVoXDTI3MDExMTE3MDUzMVowLzEtMCsGA1UEAxMk ZjA4NDM4ZjItZjM0My00YjJjLWIwYmUtYWM1NmI3MzRkNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bZ3PP7bajofse8vFE+/XRXLfCgE+dVQO8Rv HDKjseqnnYtz/WpkV1mQgdxWuVf1Z0ro+YE2QcikGJXNSfqWzGXwA6eaR0HkUP7a axUJ8pjaklcfOgfQJIktLyr3veLQLzbDYBQtgcUb2yTq4+yNnaUJlTGfk4k+lYUB hXHeveBhKIngWwpfLwXGIVJK4hrMaIO0NQ/hiiPw24fJS4/5wqZ57xKYMsgffRHM fxZA3O1ymdtbQAKAPwU2JMvily2GpSvtJc98jrjmbze/zMrSfNRJDH7LYqPVHRLy pX/hpXxksvNdqdsCsnnB8fci/Q4q0nvTUKNbm60aIs8EFxd4LwIDAQABo4IETDCC BEgwHQYDVR0OBBYEFAwZuQcWzhv4JEfgBZwCwDCWphdnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m MDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2YjczNGQ0OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YwODQzOGYyLWYzNDMtNGIyYy1i MGJlLWFjNTZiNzM0ZDQ4ZC9mMDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2Yjcz NGQ0OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJKvPADBAC51AQDBADDVXQDBADON9QDBALQQ2wD BADY+mMwDQQCAAIwBwMFACYF3sAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICQ5cC AwC3VTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBu0VrBDJpfTtePWCE4XOEWb74pztQf6mXTW/s1InMQUfNX a1X82Ta7FFnwhUTjGzYZcSUbraLVciviVRkezrbzpacJwb5y5xHMNPQJMLBWMgO3 mIqCsz4Tqgte2tTlnEEkBJPf5q3DDuGkmsDWNGmEN3vP+9Z53LaxxknkHkYDSLK2 gybqtXrH7yOur5/XvIa0bdTvAyQ1vAiscV6x82hTei9U62ECFkaJch7GYkBO9t4q pFC2Pa6yqdO6B3oGFmXvBgilcEammJ+7neuQfmlPpI0qlK0fTEPsKoxnkTDZPrtT msLQbbx7OdO4I4tA3KxKR4P4RxknV4jaLX4j2+8O -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:01 2025 by rpki-client