$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer File: 355b6459-d3e6-4569-b278-aef1a714f5bf.cer (raw, json) Hash identifier: spvxfWU51uKV+Ml4Nn2px4+kQzYVtiWbHoYT779LBuA= Subject key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B56CF8D2A6BD45F6347D45A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Sep 2025 00:45:24 +0000 Certificate not after: Sat 01 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 26336 IP: 204.63.133.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:cf:8d:2a:6b:d4:5f:63:47:d4:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 28 00:45:24 2025 GMT Not After : Jan 1 01:45:24 2028 GMT Subject: CN=355b6459-d3e6-4569-b278-aef1a714f5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:38:52:a4:42:a0:4f:54:5b:c5:2f:f0:03: 7d:ab:d4:a9:b4:2d:9e:77:15:a7:cb:9c:d5:43:98: ba:94:98:72:a0:53:5b:36:5d:ab:b4:8d:21:03:b8: 41:db:63:0e:83:27:84:a7:77:9b:2f:b4:a9:54:6b: 2e:34:80:07:b1:aa:9d:38:96:f4:23:57:11:4e:f2: a9:20:eb:b4:05:4f:1d:9c:f5:6e:7b:70:aa:21:dd: 7a:57:0a:dc:fc:c7:dc:a2:a2:c5:c0:45:1f:78:f2: ac:de:e3:64:2a:78:26:06:15:3f:51:86:15:01:d7: a3:63:72:67:59:e2:15:42:7c:e8:87:00:b6:75:59: e8:ef:3e:94:b2:a6:ce:e6:80:43:09:85:5b:19:e8: 1f:83:c9:f9:e2:a7:44:3a:2d:5e:97:69:4a:cd:6f: 28:60:b3:c6:a7:61:3a:21:1c:1b:29:5d:38:fe:48: c7:08:0f:df:27:c8:3f:03:15:61:8c:2a:4c:dc:9c: 5e:d9:2c:a5:40:82:da:1c:e8:31:c1:63:7c:38:81: 47:d4:ad:79:45:36:a2:bd:dc:f9:63:27:dd:00:6b: 52:2a:48:18:45:1e:a9:f5:1a:ce:7b:83:d0:18:50: ad:e6:ba:ba:86:bc:48:f5:c0:b9:c3:3d:af:5c:90: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.63.133.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26336 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2b:e4:a7:e0:ec:27:35:06:9a:e5:2d:fa:24:92:7e:75:78: aa:af:a9:c6:71:4c:27:81:4f:1e:3b:06:ce:54:16:0c:31:6c: 84:11:83:db:6e:ad:89:45:3f:18:f5:b0:e4:e7:8d:ad:f0:c4: 2b:c6:ec:ac:da:17:78:ca:93:31:66:c4:7a:f7:26:70:b1:d2: 2a:ad:23:2a:61:b2:b9:11:d9:cf:28:5b:c8:c5:78:f0:9b:b9: 92:c6:1c:26:e3:7a:23:cd:0f:a5:00:d4:60:55:dd:f0:61:ee: 8a:d3:0d:3a:fa:97:bb:4f:92:c4:a0:1f:7b:f4:74:59:a5:88: 80:39:75:14:99:13:fc:9a:1f:13:76:d5:98:c8:b4:8d:f9:d7: 9a:9b:73:c3:67:be:f7:6b:45:eb:73:14:49:82:d9:73:78:f8: 83:ef:66:77:4b:30:ec:a4:8e:49:9c:c3:9c:c1:36:05:1a:f1: 65:c2:8f:c1:4c:25:8f:fa:fe:bf:d3:73:cf:8c:09:9b:3d:cb: 3c:e6:c0:02:bf:ab:d1:ab:ec:75:d0:fd:e8:43:38:28:89:9e: 6b:bf:fe:49:d8:65:e5:45:00:a2:29:be:27:c7:9f:ad:74:03: ed:45:aa:f7:0e:41:71:d8:5a:a7:c1:94:6d:be:2a:01:2e:33: 3d:45:4b:6c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEtWz40qa9RfY0fUWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyODAwNDUyNFoXDTI4MDEwMTAxNDUyNFowLzEtMCsGA1UEAxMk MzU1YjY0NTktZDNlNi00NTY5LWIyNzgtYWVmMWE3MTRmNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo04UqRCoE9UW8Uv8AN9q9SptC2edxWny5zV Q5i6lJhyoFNbNl2rtI0hA7hB22MOgyeEp3ebL7SpVGsuNIAHsaqdOJb0I1cRTvKp IOu0BU8dnPVue3CqId16Vwrc/MfcoqLFwEUfePKs3uNkKngmBhU/UYYVAdejY3Jn WeIVQnzohwC2dVno7z6UsqbO5oBDCYVbGegfg8n54qdEOi1el2lKzW8oYLPGp2E6 IRwbKV04/kjHCA/fJ8g/AxVhjCpM3Jxe2SylQILaHOgxwWN8OIFH1K15RTaivdz5 YyfdAGtSKkgYRR6p9RrOe4PQGFCt5rq6hrxI9cC5wz2vXJAASQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFMqrEXKbgMKIr8mQgx3rjARGBBjFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NTViNjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYxYTcxNGY1YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM1NWI2NDU5LWQzZTYtNDU2OS1i Mjc4LWFlZjFhNzE0ZjViZi8zNTViNjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYxYTcx NGY1YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMP4UwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAByvkp+DsJzUGmuUt+iSSfnV4qq+pxnFMJ4FPHjsGzlQWDDFs hBGD226tiUU/GPWw5OeNrfDEK8bsrNoXeMqTMWbEevcmcLHSKq0jKmGyuRHZzyhb yMV48Ju5ksYcJuN6I80PpQDUYFXd8GHuitMNOvqXu0+SxKAfe/R0WaWIgDl1FJkT /JofE3bVmMi0jfnXmptzw2e+92tF63MUSYLZc3j4g+9md0sw7KSOSZzDnME2BRrx ZcKPwUwlj/r+v9Nzz4wJmz3LPObAAr+r0avsddD96EM4KImea7/+Sdhl5UUAoim+ J8efrXQD7UWq9w5Bcdhap8GUbb4qAS4zPUVLbA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:03 2025 by rpki-client