$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer File: 3416eb84-d1fa-4d16-850d-b6024c13b511.cer (raw, json) Hash identifier: +uTbitXXAAbQ4TmFJl+RnjcQgIrh5MR1X9voQe1Ytvs= Subject key identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B80AFCD06BA91B72DAF9F0290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 21930 IP: 198.202.141.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:06:ba:91:b7:2d:af:9f:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=3416eb84-d1fa-4d16-850d-b6024c13b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:d9:99:eb:82:e9:4e:fe:0e:e2:a3:e3:8b: 61:0c:0b:1a:2d:18:e1:f6:4d:4c:18:11:81:2e:d1: 2f:ff:7c:f2:21:4c:4b:d6:e5:b5:58:7c:ec:b7:f7: 75:11:3b:de:56:0b:dd:1a:cf:07:19:d5:08:88:bb: 5c:dc:2c:14:0d:e7:73:59:32:5d:0e:17:74:55:af: 6b:01:40:7d:44:62:91:20:39:1b:8e:a0:2a:65:7c: 1c:54:ce:19:5b:24:17:31:73:89:fc:aa:ff:2b:c2: 9d:5f:0d:3f:00:f1:24:07:73:d2:9f:a3:4a:70:18: 25:f8:52:18:eb:8e:db:82:16:15:04:96:b1:26:78: d3:5c:67:a4:fa:6d:ce:6b:b4:62:bf:70:a5:06:77: 43:d8:4c:16:56:a4:e8:f0:f5:24:23:16:04:59:ea: a6:7b:98:ae:db:25:ce:15:48:9a:10:bf:60:60:c7: 5c:cc:2c:51:2a:34:06:e0:69:14:32:ad:5d:9c:cd: b3:9f:5f:de:59:17:04:7d:14:49:2c:bd:d5:99:71: 34:e1:a5:e1:fe:aa:d6:11:dc:e1:a7:09:d6:31:e1: 7e:cd:ac:e7:c3:4a:77:15:78:79:2b:76:85:7e:b5: d2:9f:2b:8d:14:bb:69:47:01:d1:a1:88:12:4a:af: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 198.202.141.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21930 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8e:be:d9:80:24:eb:97:61:6d:48:95:c5:0c:98:99:78:7e: 6a:03:7e:f9:79:20:5b:8c:2a:a6:1f:c4:b8:a0:a4:ed:8a:5e: f7:b8:6e:be:17:91:af:89:c1:df:07:b3:30:3f:43:62:f8:52: 26:4d:c6:04:ab:cc:e7:76:d6:b4:4f:88:e9:48:2a:9e:b8:67: 31:6e:47:b0:85:ab:82:41:f9:5b:a3:eb:d8:a5:b1:6e:51:b8: a1:f3:66:42:df:c1:7e:4c:8f:3d:6d:0c:0d:42:74:a7:c8:ac: dd:31:da:96:05:83:91:01:c9:76:a7:90:a3:6b:dc:a4:b6:23: e9:75:a2:00:78:ef:e1:aa:e9:31:2c:6d:7d:74:ab:1a:3d:fa: 48:00:7d:71:8d:06:37:7c:b6:f7:6f:d4:c7:7a:92:ef:c9:4e: 7d:f3:c4:8c:07:10:8d:60:c9:5e:63:20:01:69:53:b2:2b:a0: a2:65:b8:ca:23:01:ef:85:d9:6b:06:b8:9e:48:42:df:e7:cd: 6c:8c:fb:33:e8:76:fd:e5:20:bb:d9:d1:2d:3b:78:a0:69:9e: 4b:e7:b0:d1:2b:6e:67:6e:10:5c:35:c8:c6:6f:9f:a8:d7:54: 5f:b5:7a:51:0a:c8:e2:14:e3:3e:60:fa:e6:69:37:51:f7:e9: 76:54:22:54 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuAr80GupG3La+fApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk MzQxNmViODQtZDFmYS00ZDE2LTg1MGQtYjYwMjRjMTNiNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPvZmeuC6U7+DuKj44thDAsaLRjh9k1MGBGB LtEv/3zyIUxL1uW1WHzst/d1ETveVgvdGs8HGdUIiLtc3CwUDedzWTJdDhd0Va9r AUB9RGKRIDkbjqAqZXwcVM4ZWyQXMXOJ/Kr/K8KdXw0/APEkB3PSn6NKcBgl+FIY 647bghYVBJaxJnjTXGek+m3Oa7Riv3ClBndD2EwWVqTo8PUkIxYEWeqme5iu2yXO FUiaEL9gYMdczCxRKjQG4GkUMq1dnM2zn1/eWRcEfRRJLL3VmXE04aXh/qrWEdzh pwnWMeF+zaznw0p3FXh5K3aFfrXSnyuNFLtpRwHRoYgSSq+bBwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFMfF1bgDo+K0NLL+RCa1OspT0kwZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NDE2ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAyNGMxM2I1MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM0MTZlYjg0LWQxZmEtNGQxNi04 NTBkLWI2MDI0YzEzYjUxMS8zNDE2ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAyNGMx M2I1MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGyo0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VaowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASY6+2YAk65dhbUiVxQyYmXh+agN++XkgW4wqph/EuKCk7Ype 97huvheRr4nB3wezMD9DYvhSJk3GBKvM53bWtE+I6UgqnrhnMW5HsIWrgkH5W6Pr 2KWxblG4ofNmQt/BfkyPPW0MDUJ0p8is3THalgWDkQHJdqeQo2vcpLYj6XWiAHjv 4arpMSxtfXSrGj36SAB9cY0GN3y292/Ux3qS78lOffPEjAcQjWDJXmMgAWlTsiug omW4yiMB74XZawa4nkhC3+fNbIz7M+h2/eUgu9nRLTt4oGmeS+ew0StuZ24QXDXI xm+fqNdUX7V6UQrI4hTjPmD65mk3UffpdlQiVA== -----END CERTIFICATE-----Generated at Tue Oct 21 06:52:20 2025 by rpki-client