$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer File: 73d32729-3efa-4a4c-a5ce-85790b40d100.cer (raw, json) Hash identifier: jiLIizSshoWHzgxeDoxW2h2Fl79Ie3TpCigyeUjq690= Subject key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7A1EC6273EE7A421764F2000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 16:18:19 +0000 Certificate not after: Fri 05 Nov 2027 12:45:24 +0000 Subordinate resources: IP: 23.175.72.0/24 IP: 142.248.160.0/22 IP: 2602:f91e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:1e:c6:27:3e:e7:a4:21:76:4f:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 10 16:18:19 2025 GMT Not After : Nov 5 12:45:24 2027 GMT Subject: CN=73d32729-3efa-4a4c-a5ce-85790b40d100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:2b:8d:f7:ab:4d:16:eb:22:61:73:84:60: a0:de:21:04:c5:e6:12:34:c5:01:c1:c4:5e:d3:29: 96:a0:9a:17:82:ef:b2:dd:8d:1f:3b:bc:3b:5f:d4: 6a:ca:29:3b:1c:2e:f3:86:ab:c5:aa:03:4d:e6:b4: 88:23:27:9e:88:86:2a:e4:2a:6a:4a:15:ca:f0:81: 75:69:90:7d:8d:0f:4f:8d:72:59:89:0a:cd:9d:93: 99:c9:f3:62:2f:d0:42:43:1e:b5:84:76:48:c8:6d: 2e:02:5c:c7:1b:79:6b:fd:2d:77:1c:67:3b:99:74: de:9c:9d:43:3d:55:a1:7b:7b:4e:71:ae:c4:b0:a4: 0d:d9:94:46:7b:71:e7:c0:8c:8e:e1:83:5d:6a:0c: b2:08:57:8a:03:b2:bb:d2:ae:9e:d8:04:1f:3d:6a: f1:3e:b4:c7:8f:ec:e8:33:cc:90:1c:9e:a0:a9:fd: c0:ee:48:af:41:25:0b:ab:9d:02:fc:73:ef:48:d8: ee:47:8c:fa:95:73:8e:ad:9a:2b:8a:e4:92:aa:b7: 69:1a:f8:76:ee:f4:1c:28:6b:b5:52:c7:56:74:6a: a9:18:ad:66:c6:f0:0d:5c:85:5f:3d:cf:04:91:f6: d3:5c:1c:e6:38:ba:de:08:34:9a:83:ca:78:ec:61: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.175.72.0/24 142.248.160.0/22 IPv6: 2602:f91e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:36:9d:00:89:9e:02:0d:bb:08:8d:b3:6d:f1:6e:1b:7b:37: 00:2f:eb:59:b0:7e:f2:04:02:2a:c5:c7:81:5b:35:e0:9b:42: 8e:95:bb:6b:ac:e8:ff:e7:d3:4c:ad:40:3b:7d:75:09:88:81: a6:e9:d6:01:6d:26:aa:14:af:03:94:af:92:cf:da:81:e6:ae: 04:29:6c:5a:58:a5:7c:5f:aa:95:c0:b5:29:e6:0b:e8:af:f6: 15:f9:a0:f6:c9:59:4b:49:73:6c:1b:b4:d9:b4:38:18:64:6c: a4:2e:38:67:4b:9a:bc:d4:f4:34:e3:a1:9d:fb:ae:30:30:99: 5f:3a:51:a2:2d:db:2b:5b:81:f6:65:69:b7:69:80:1e:83:28: 68:d5:dd:2c:1f:f1:28:ba:26:77:02:58:71:6f:96:c1:8b:ca: 43:4f:ea:8d:26:82:1e:89:58:44:08:07:e8:ec:cf:af:0f:94: cb:8b:5c:2c:d8:7c:71:73:98:73:0b:cf:ac:8b:e8:be:d7:ce: 53:2d:58:e9:4f:28:dc:47:3c:5e:27:5d:fd:31:dc:3f:0e:f6: 15:61:f3:8c:eb:e4:98:90:79:da:76:55:ba:ec:d5:32:76:c4: 76:49:ad:03:b9:78:50:6b:a1:ee:f2:69:cb:3b:30:c2:74:bf: ed:f0:0b:be -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt6HsYnPuekIXZPIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMDE2MTgxOVoXDTI3MTEwNTEyNDUyNFowLzEtMCsGA1UEAxMk NzNkMzI3MjktM2VmYS00YTRjLWE1Y2UtODU3OTBiNDBkMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdMrjferTRbrImFzhGCg3iEExeYSNMUBwcRe 0ymWoJoXgu+y3Y0fO7w7X9Rqyik7HC7zhqvFqgNN5rSIIyeeiIYq5CpqShXK8IF1 aZB9jQ9PjXJZiQrNnZOZyfNiL9BCQx61hHZIyG0uAlzHG3lr/S13HGc7mXTenJ1D PVWhe3tOca7EsKQN2ZRGe3HnwIyO4YNdagyyCFeKA7K70q6e2AQfPWrxPrTHj+zo M8yQHJ6gqf3A7kivQSULq50C/HPvSNjuR4z6lXOOrZoriuSSqrdpGvh27vQcKGu1 UsdWdGqpGK1mxvANXIVfPc8EkfbTXBzmOLreCDSag8p47GE6wQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFN7kVxiarGsobiagFOCLTPMpuY6JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 M2QzMjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5MGI0MGQxMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzczZDMyNzI5LTNlZmEtNGE0Yy1h NWNlLTg1NzkwYjQwZDEwMC83M2QzMjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5MGI0 MGQxMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXr0gDBAKO+KAwDgQCAAIwCAMGACYC+R4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM2nQCJngINuwiNs23xbht7NwAv61mwfvIEAirFx4FbNeCbQo6Vu2us 6P/n00ytQDt9dQmIgabp1gFtJqoUrwOUr5LP2oHmrgQpbFpYpXxfqpXAtSnmC+iv 9hX5oPbJWUtJc2wbtNm0OBhkbKQuOGdLmrzU9DTjoZ37rjAwmV86UaIt2ytbgfZl abdpgB6DKGjV3Swf8Si6JncCWHFvlsGLykNP6o0mgh6JWEQIB+jsz68PlMuLXCzY fHFzmHMLz6yL6L7XzlMtWOlPKNxHPF4nXf0x3D8O9hVh84zr5JiQedp2Vbrs1TJ2 xHZJrQO5eFBroe7yacs7MMJ0v+3wC74= -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:15 2025 by rpki-client