$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer File: a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer (raw, json) Hash identifier: YjYfK/I14gLXjlBzbQLUqWEjry4Dzi5m5zSVMyUmTr8= Subject key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B4AF0A4BF8BC7CAD7D9DA1560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Sep 2025 18:42:23 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 18503 IP: 161.108.122.0/24 IP: 199.34.241.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:f0:a4:bf:8b:c7:ca:d7:d9:da:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 23 18:42:23 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:3b:78:9a:5c:4c:48:e4:82:2c:be:94:fb: 30:af:2b:df:b6:1a:68:3f:93:5c:e5:f4:6c:b5:b1: 8c:56:bd:92:a6:ec:59:37:08:10:d0:96:8b:63:8a: 6a:ad:55:91:14:6c:31:8e:0b:91:32:d2:f2:3a:9b: 43:74:59:c0:1a:c8:00:94:cc:da:47:ac:e7:ca:ca: 44:e5:8e:48:31:41:9b:8a:1a:a2:11:c1:91:69:c6: 4e:c5:70:22:de:80:3e:cb:5b:2c:1d:ba:3c:29:bb: 56:15:e7:0f:03:f4:e2:7f:1c:9e:6b:f4:b2:5b:e2: 5e:ab:af:a7:c4:0c:30:c0:15:69:90:c1:f5:45:b4: cf:1d:b2:3e:ea:50:f5:d5:f9:04:11:41:b5:15:bd: 15:0f:4f:36:ec:e7:14:43:8b:7e:64:f9:96:d6:96: d4:bf:b8:16:da:2c:77:9f:27:b0:e1:d4:b1:f8:f9: 15:ff:92:54:28:4b:2c:2b:f3:25:45:6a:04:48:7c: c0:90:f3:b3:eb:74:87:14:ce:8e:cd:f5:2c:01:4f: c2:1c:50:2b:c6:ad:b0:92:85:b7:75:64:51:bb:42: 29:af:16:65:7b:98:17:38:8e:9f:63:59:7f:a6:57: e3:a0:53:0b:fe:44:5f:19:70:ec:f6:79:0d:b2:87: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 161.108.122.0/24 199.34.241.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18503 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:28:57:ae:54:1a:8c:a9:50:4c:c7:e4:70:97:9b:62:80:64: 9c:3e:da:6a:f3:f6:b9:c8:9f:c0:bd:33:0b:6e:d2:89:66:9f: 2f:d2:4f:7c:eb:a2:1e:94:07:60:82:87:05:97:31:c4:13:df: 76:6b:1f:58:31:11:8f:71:32:5e:85:26:9d:f7:55:2b:80:0f: 1a:ef:11:07:50:61:f3:39:f0:a7:46:d6:b4:9a:cb:06:84:6d: bc:21:0f:17:40:81:b9:3b:13:73:92:3f:21:7a:17:03:8a:cd: f6:44:da:eb:cb:ad:36:cd:f2:a6:b0:d5:17:14:20:42:3e:c8: ab:86:57:6c:00:f8:12:0d:d4:6a:5d:42:c8:d6:54:65:d6:e5: 5b:b6:5b:f4:bd:df:63:43:7e:e2:70:82:26:e5:47:ea:e6:5b: 39:12:74:41:21:95:02:b4:8d:4e:bf:c6:e7:f4:03:f3:b6:14: cd:bf:7e:54:47:7b:49:29:eb:1d:60:4b:67:6a:e3:38:cd:bd: 20:49:e1:8d:17:0a:9f:75:38:08:76:64:86:a6:35:7d:83:d4: fe:0d:67:ab:ad:e7:c6:87:71:8d:da:6b:ab:7c:ec:88:97:b5: 4f:61:d9:15:39:64:55:7c:fa:95:00:44:40:49:aa:dc:81:c8: f3:00:6b:46 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEtK8KS/i8fK19naFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyMzE4NDIyM1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk YTUzYWMwYjEtODNhMy00N2YyLWIyOGUtYjJiMTk3N2RjMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV07eJpcTEjkgiy+lPswryvfthpoP5Nc5fRs tbGMVr2SpuxZNwgQ0JaLY4pqrVWRFGwxjguRMtLyOptDdFnAGsgAlMzaR6znyspE 5Y5IMUGbihqiEcGRacZOxXAi3oA+y1ssHbo8KbtWFecPA/Tifxyea/SyW+Jeq6+n xAwwwBVpkMH1RbTPHbI+6lD11fkEEUG1Fb0VD0827OcUQ4t+ZPmW1pbUv7gW2ix3 nyew4dSx+PkV/5JUKEssK/MlRWoESHzAkPOz63SHFM6OzfUsAU/CHFArxq2wkoW3 dWRRu0IprxZle5gXOI6fY1l/plfjoFML/kRfGXDs9nkNsocZ0QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFKzEKxn9e2SU8b6NbwzoirTUfPKDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h NTNhYzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIxOTc3ZGMzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E1M2FjMGIxLTgzYTMtNDdmMi1i MjhlLWIyYjE5NzdkYzM3NS9hNTNhYzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIxOTc3 ZGMzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAChbHoDBADHIvEwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICSEcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEASihXrlQajKlQTMfkcJebYoBknD7aavP2ucifwL0z C27SiWafL9JPfOuiHpQHYIKHBZcxxBPfdmsfWDERj3EyXoUmnfdVK4APGu8RB1Bh 8znwp0bWtJrLBoRtvCEPF0CBuTsTc5I/IXoXA4rN9kTa68utNs3yprDVFxQgQj7I q4ZXbAD4Eg3Ual1CyNZUZdblW7Zb9L3fY0N+4nCCJuVH6uZbORJ0QSGVArSNTr/G 5/QD87YUzb9+VEd7SSnrHWBLZ2rjOM29IEnhjRcKn3U4CHZkhqY1fYPU/g1nq63n xodxjdprq3zsiJe1T2HZFTlkVXz6lQBEQEmq3IHI8wBrRg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:39 2025 by rpki-client