$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer File: 643914aa-5306-4352-8a01-3ac381827191.cer (raw, json) Hash identifier: hF7w4tXXSrCrq8N0f5RZ9bCNGjSaMh+pWa9fLpfn0Ds= Subject key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B513A2F0F40E59BD7E1CD3B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 00:45:25 +0000 Certificate not after: Thu 30 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 400442 IP: 23.133.168.0/24 IP: 205.236.99.0/24 IP: 2602:fbc7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:3a:2f:0f:40:e5:9b:d7:e1:cd:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 26 00:45:25 2025 GMT Not After : Dec 30 01:45:25 2027 GMT Subject: CN=643914aa-5306-4352-8a01-3ac381827191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:94:41:52:c9:4a:8a:9c:27:38:57:74:41: 37:fc:48:6d:50:3a:c7:d3:87:61:3b:66:2b:ca:73: 05:a7:6e:69:a7:1d:be:48:c5:3b:7b:c8:01:86:87: 2f:48:01:0d:b9:cf:12:a3:7d:6c:83:b3:41:19:3c: 4e:da:df:16:0f:1e:83:eb:f2:ae:fb:cf:cd:55:69: f7:2b:26:a1:74:d9:f7:ca:a7:45:b7:f0:8a:65:45: 67:9a:bb:4a:5a:7f:b3:e9:f9:00:49:f2:9e:a2:d1: 1e:da:dd:8c:96:a6:03:29:d9:fd:c5:aa:45:19:46: a9:d3:fd:55:74:61:94:6a:32:c6:32:dc:13:f5:f5: af:16:28:b4:13:80:30:57:0e:5e:59:ac:4f:07:10: 0a:b2:97:fb:9b:f7:51:c7:a6:af:00:03:56:0a:4b: 96:14:58:80:9f:3a:6b:e8:95:f3:3a:ac:b7:c3:34: a0:37:01:14:ca:3b:f6:fe:26:78:c9:67:2a:c4:86: 4b:c6:c1:fd:dc:81:cc:28:c0:6a:2f:d2:df:23:08: 45:2e:d5:13:d8:9b:8b:71:c9:ab:54:bf:ee:3f:74: 54:22:d7:6e:96:6e:54:53:9f:2c:fd:71:20:46:de: 48:8d:61:10:07:32:37:c2:b1:7c:9c:cf:85:6b:75: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.133.168.0/24 205.236.99.0/24 IPv6: 2602:fbc7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8b:2a:5b:31:74:a6:10:fb:40:f7:34:b6:d3:65:5f:30:a7: bb:a3:3c:6c:32:0f:7c:fc:1d:60:25:d1:59:5d:d5:de:4c:f6: 73:e6:56:88:cf:38:34:22:8e:c3:96:2e:ae:98:43:42:95:08: 59:b4:c2:5b:06:15:cd:aa:7e:cc:5f:8e:24:ee:a6:f6:9b:a4: aa:74:58:c6:b0:e4:74:99:9c:01:df:ea:12:66:e6:c7:f2:7b: 94:c7:ca:f2:95:fe:bd:50:82:53:e2:5d:82:3c:a6:40:69:df: 29:9c:8d:45:7b:15:7f:b9:54:bb:b4:d1:b6:d7:6e:e7:1b:74: 47:8f:59:db:40:50:f7:c3:0b:da:21:dd:bf:90:55:38:ef:92: ad:4a:a1:33:9c:77:52:5b:57:77:c0:f9:6a:3b:41:77:70:2c: 9c:7f:26:9b:4a:89:d4:8d:82:85:f3:eb:a2:85:6a:6b:81:4a: 06:be:80:54:b7:4c:ea:5d:2d:77:1e:3c:ef:60:8f:b4:ee:b7: 66:12:92:37:db:92:3e:41:17:6c:b7:ae:7e:cd:ee:e2:de:b6: 79:33:93:16:93:b1:41:cd:b1:86:ca:08:0d:31:6a:a0:84:ce: e4:83:6b:9e:6f:fa:c5:a5:3a:3e:45:c9:77:07:0e:4e:06:49: 02:81:4a:de -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtROi8PQOWb1+HNOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyNjAwNDUyNVoXDTI3MTIzMDAxNDUyNVowLzEtMCsGA1UEAxMk NjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3MTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhyUQVLJSoqcJzhXdEE3/EhtUDrH04dhO2Yr ynMFp25ppx2+SMU7e8gBhocvSAENuc8So31sg7NBGTxO2t8WDx6D6/Ku+8/NVWn3 KyahdNn3yqdFt/CKZUVnmrtKWn+z6fkASfKeotEe2t2MlqYDKdn9xapFGUap0/1V dGGUajLGMtwT9fWvFii0E4AwVw5eWaxPBxAKspf7m/dRx6avAANWCkuWFFiAnzpr 6JXzOqy3wzSgNwEUyjv2/iZ4yWcqxIZLxsH93IHMKMBqL9LfIwhFLtUT2JuLccmr VL/uP3RUItdulm5UU58s/XEgRt5IjWEQBzI3wrF8nM+Fa3W8vQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOsqR0nlzvCF3hrXksmpLbTlcxdxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY0MzkxNGFhLTUzMDYtNDM1Mi04 YTAxLTNhYzM4MTgyNzE5MS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4 MjcxOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhagDBADN7GMwDgQCAAIwCAMGBCYC+8cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYcOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3iypbMXSmEPtA9zS2 02VfMKe7ozxsMg98/B1gJdFZXdXeTPZz5laIzzg0Io7Dli6umENClQhZtMJbBhXN qn7MX44k7qb2m6SqdFjGsOR0mZwB3+oSZubH8nuUx8rylf69UIJT4l2CPKZAad8p nI1FexV/uVS7tNG2127nG3RHj1nbQFD3wwvaId2/kFU475KtSqEznHdSW1d3wPlq O0F3cCycfyabSonUjYKF8+uihWprgUoGvoBUt0zqXS13HjzvYI+07rdmEpI325I+ QRdst65+ze7i3rZ5M5MWk7FBzbGGyggNMWqghM7kg2ueb/rFpTo+Rcl3Bw5OBkkC gUre -----END CERTIFICATE-----Generated at Mon Oct 20 11:16:56 2025 by rpki-client