$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer File: 3d318897-eed6-4fd9-a18c-91026968b3e2.cer (raw, json) Hash identifier: tUFS7Qa1blherv4ldKgI8f24Ujk1akhrAPWnMDDmUgY= Subject key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584ACE040A18E352DF1D60E3A920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 800 IP: 23.160.32.0/24 IP: 162.120.72.0/23 IP: 207.32.208.0/22 IP: 2604:fdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:0a:18:e3:52:df:1d:60:e3:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:ce:7c:d1:f8:6e:e4:94:34:8d:99:5e:69: aa:54:da:68:47:ce:3e:15:b1:ea:e2:92:f8:85:c2: 06:7b:fb:3f:fe:38:0a:c5:a6:00:13:1f:0d:1b:c8: 18:43:be:92:6f:9d:44:74:10:9e:bf:3d:5d:6c:84: 53:2e:55:3b:70:e7:14:c3:3a:60:db:1e:24:df:83: 87:3f:37:8e:43:3a:a4:73:ec:6a:dc:66:f3:06:ed: e5:f0:0d:a4:ed:1a:f2:9c:98:f3:7f:bb:73:86:e7: 21:5e:46:bd:c6:e4:9e:f4:ff:7f:5b:f0:d2:c4:f8: 1f:6c:b8:92:7d:b6:21:fe:e5:a1:65:58:4a:85:c4: 47:de:5a:a8:a0:8c:ef:ce:ab:cb:33:15:45:bc:3e: 58:fe:79:90:06:9a:1a:d1:53:56:3a:64:ce:60:fc: 65:88:f2:09:28:bb:cf:ba:9a:20:d5:22:32:ff:33: c8:68:84:55:a0:fc:71:7b:c8:52:3a:4f:7b:12:5b: 57:fb:f4:20:db:0f:66:f6:20:f9:9a:ec:ad:1a:5d: 7f:45:f0:33:d6:c0:7a:e8:03:88:1f:c3:e2:ca:f1: 50:77:bc:2f:2e:af:ba:9a:e4:cf:88:20:1c:01:ed: 4b:23:f8:d4:36:a8:e4:e8:e7:c5:07:91:2d:61:69: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.160.32.0/24 162.120.72.0/23 207.32.208.0/22 IPv6: 2604:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 800 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e7:04:17:2f:13:1b:af:2a:f9:49:04:7d:89:11:b5:94:c0: 76:bb:93:f5:9a:55:f7:fb:54:d5:68:80:41:8a:1d:b5:3e:c4: 83:a1:8e:df:59:6a:c5:72:4c:ab:09:c1:f6:d5:f1:12:4a:12: 2b:da:af:2f:7e:db:42:d6:8c:92:b7:32:7a:0b:70:5c:56:71: 6e:a7:08:3b:46:5f:48:15:6d:84:86:95:b5:2a:d1:e6:85:a3: 7e:bc:53:1b:1f:81:4e:d4:75:62:3f:34:47:c0:ee:1b:ac:46: e8:37:de:a8:9e:04:f2:79:dc:4f:9d:59:00:0c:fd:86:55:85: aa:ff:8a:92:44:8d:92:de:44:8c:96:75:5e:e0:2f:4d:da:c4: 38:f7:c6:70:a4:38:68:4c:6f:6f:e3:bd:21:8b:6d:d7:47:78: 16:63:ae:85:3b:6a:46:40:23:99:51:54:0b:b7:e1:c5:4d:04: c0:7b:71:db:2f:c2:70:02:13:2f:79:06:a6:f8:49:28:1e:19: 8f:fc:a5:dc:dd:f8:d2:67:fa:16:f0:bf:e5:7c:e9:20:13:a1: f2:eb:9e:ea:53:13:50:48:f0:db:af:91:c2:76:69:0a:21:10: 3c:3f:6d:1b:9c:4a:6c:23:38:92:07:55:8d:c1:4e:6d:6e:d7: 5f:a3:c9:c5 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWErOBAoY41LfHWDjqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk M2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5NjhiM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSXOfNH4buSUNI2ZXmmqVNpoR84+FbHq4pL4 hcIGe/s//jgKxaYAEx8NG8gYQ76Sb51EdBCevz1dbIRTLlU7cOcUwzpg2x4k34OH PzeOQzqkc+xq3GbzBu3l8A2k7RrynJjzf7tzhuchXka9xuSe9P9/W/DSxPgfbLiS fbYh/uWhZVhKhcRH3lqooIzvzqvLMxVFvD5Y/nmQBpoa0VNWOmTOYPxliPIJKLvP upog1SIy/zPIaIRVoPxxe8hSOk97EltX+/Qg2w9m9iD5muytGl1/RfAz1sB66AOI H8PiyvFQd7wvLq+6muTPiCAcAe1LI/jUNqjk6OfFB5EtYWk2vwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFHPE0Cw2kaPqn8z+1arA4CKIwzylMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z ZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNkMzE4ODk3LWVlZDYtNGZkOS1h MThjLTkxMDI2OTY4YjNlMi8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2 OGIzZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXoCADBAGieEgDBALPINAwDQQCAAIwBwMFACYE /cAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICAyAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN+cEFy8TG68q +UkEfYkRtZTAdruT9ZpV9/tU1WiAQYodtT7Eg6GO31lqxXJMqwnB9tXxEkoSK9qv L37bQtaMkrcyegtwXFZxbqcIO0ZfSBVthIaVtSrR5oWjfrxTGx+BTtR1Yj80R8Du G6xG6DfeqJ4E8nncT51ZAAz9hlWFqv+KkkSNkt5EjJZ1XuAvTdrEOPfGcKQ4aExv b+O9IYtt10d4FmOuhTtqRkAjmVFUC7fhxU0EwHtx2y/CcAITL3kGpvhJKB4Zj/yl 3N340mf6FvC/5XzpIBOh8uue6lMTUEjw26+RwnZpCiEQPD9tG5xKbCM4kgdVjcFO bW7XX6PJxQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:14 2025 by rpki-client