$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer File: 7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer (raw, json) Hash identifier: UrjMAjkMNaHYTNlNhfOwhoT7ITeru3RI4k22PFK6YFk= Subject key identifier: C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B3284A8407207CCF7571EF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 00:45:24 +0000 Certificate not after: Sun 19 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 401162 IP: 130.51.120.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:84:a8:40:72:07:cc:f7:57:1e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 15 00:45:24 2025 GMT Not After : Dec 19 01:45:24 2027 GMT Subject: CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:70:24:a4:c4:e9:7e:e1:bb:00:b8:06:2d: 2f:bb:a9:67:51:a5:c6:67:1d:8c:99:45:b1:60:72: bc:81:c9:78:7c:8c:94:c6:1c:8b:4b:a7:4b:8e:b7: 94:ee:90:b3:92:15:b2:68:53:82:18:f1:74:28:c9: f1:f5:50:ec:ce:e1:d5:10:33:90:b9:31:b5:57:21: 5d:8f:bf:1f:77:ed:9d:71:4c:f6:8f:80:ed:57:75: a0:37:13:d2:67:a7:20:ee:32:b5:70:80:31:06:40: 8c:08:f0:d4:3f:f3:11:4c:45:94:14:a9:33:ea:51: 3c:c7:04:14:0d:36:44:bc:ae:98:d0:b2:4f:9d:1a: dd:9c:b7:88:b5:69:ef:d4:b3:87:af:d8:1c:a8:57: 7d:b7:61:13:a6:c3:a9:ee:9c:ae:22:01:94:31:48: 97:0d:da:a1:1a:ff:c4:48:e7:68:41:68:98:50:bd: 02:96:bf:74:c0:d9:ce:d7:d2:f8:7f:8a:2a:c6:c7: 22:56:81:b4:50:d6:84:9e:73:e4:06:4d:ba:16:7f: 04:20:cf:34:dc:4e:36:db:20:55:fc:bd:35:e0:e4: 67:bc:54:75:54:d1:d3:71:8c:b3:52:9c:fc:69:2c: 93:cb:db:48:71:ec:4a:93:22:da:be:a7:61:bd:17: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.120.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401162 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:05:9f:2e:2e:9b:39:af:29:b7:cb:14:e3:07:52:7e:8b:1c: 72:5a:84:29:0d:f9:b7:a7:52:ac:d4:6f:36:ee:dd:84:cf:6e: 8a:53:05:ec:3b:8d:cc:e0:8f:a6:9b:93:92:cc:2a:26:cf:47: fe:b0:e1:61:f9:41:b7:e7:05:3e:7d:90:0d:c7:a9:70:4b:e6: 1c:1d:7a:cb:c4:b5:7a:51:7e:04:76:26:e4:0e:4c:5e:67:c8: 3d:52:1c:9d:9a:bd:05:71:c6:fb:0e:50:e8:90:97:85:4d:e6: 7f:e2:89:c0:05:12:4a:ae:6c:c1:ce:11:dd:74:61:c0:cb:f4: 72:db:b0:1d:f8:4b:2d:c3:06:85:35:98:5a:87:93:6e:d2:ec: 7d:b7:65:be:1a:e8:5a:a6:04:e9:7b:c8:f5:cd:d5:91:a1:24: 25:53:e8:cf:58:f2:3f:f1:00:60:7c:fa:4c:67:6e:81:15:45: 65:df:eb:5e:42:70:49:af:b5:98:b9:05:86:bc:4c:fc:70:80: 6f:1d:65:46:ec:d2:33:20:01:42:00:52:5b:54:d6:22:2c:a1: 82:f4:bd:8a:c0:4e:66:93:46:b6:d8:c8:8d:f8:18:52:b6:c4: 13:d0:1a:a9:83:e5:30:6d:32:6b:2d:cb:6c:9a:fd:0b:4e:f9: 60:68:bf:cd -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsyhKhAcgfM91ce84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkxNTAwNDUyNFoXDTI3MTIxOTAxNDUyNFowLzEtMCsGA1UEAxMk N2FlNjU2MzQtZWE2MC00ZTgxLWI0ZjEtMzA5YzlhYTZiYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj51wJKTE6X7huwC4Bi0vu6lnUaXGZx2MmUWx YHK8gcl4fIyUxhyLS6dLjreU7pCzkhWyaFOCGPF0KMnx9VDszuHVEDOQuTG1VyFd j78fd+2dcUz2j4DtV3WgNxPSZ6cg7jK1cIAxBkCMCPDUP/MRTEWUFKkz6lE8xwQU DTZEvK6Y0LJPnRrdnLeItWnv1LOHr9gcqFd9t2ETpsOp7pyuIgGUMUiXDdqhGv/E SOdoQWiYUL0Clr90wNnO19L4f4oqxsciVoG0UNaEnnPkBk26Fn8EIM803E422yBV /L014ORnvFR1VNHTcYyzUpz8aSyTy9tIcexKkyLavqdhvRf2vQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMEpezaOqDeynMACLTdBRuSktgcbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 YWU2NTYzNC1lYTYwLTRlODEtYjRmMS0zMDljOWFhNmJjMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzdhZTY1NjM0LWVhNjAtNGU4MS1i NGYxLTMwOWM5YWE2YmMyYS83YWU2NTYzNC1lYTYwLTRlODEtYjRmMS0zMDljOWFh NmJjMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACCM3gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh8KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAgFny4umzmvKbfLFOMHUn6LHHJahCkN+benUqzUbzbu3YTP bopTBew7jczgj6abk5LMKibPR/6w4WH5QbfnBT59kA3HqXBL5hwdesvEtXpRfgR2 JuQOTF5nyD1SHJ2avQVxxvsOUOiQl4VN5n/iicAFEkqubMHOEd10YcDL9HLbsB34 Sy3DBoU1mFqHk27S7H23Zb4a6FqmBOl7yPXN1ZGhJCVT6M9Y8j/xAGB8+kxnboEV RWXf615CcEmvtZi5BYa8TPxwgG8dZUbs0jMgAUIAUltU1iIsoYL0vYrATmaTRrbY yI34GFK2xBPQGqmD5TBtMmsty2ya/QtO+WBov80= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:06 2025 by rpki-client