$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer File: c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer (raw, json) Hash identifier: WGesQeNXQPosMxZsbHQC4mYUyNCGmF96YD23SvbWDaI= Subject key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584ADEC424BA1BAA3090235EEC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Aug 2025 00:45:25 +0000 Certificate not after: Fri 19 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 397750 IP: 23.141.220.0/24 IP: 104.232.42.0/24 IP: 2602:fc78::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:c4:24:ba:1b:aa:30:90:23:5e:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 16 00:45:25 2025 GMT Not After : Nov 19 01:45:25 2027 GMT Subject: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:ca:d2:a6:2d:42:67:11:78:f0:a5:a0:e8: 4d:85:58:e5:6a:a1:4e:0e:3f:f4:e4:19:ea:4a:3d: 60:e1:60:b2:79:0c:ac:91:6a:d8:bd:22:96:e3:06: a0:65:41:f7:1d:be:b7:fb:b8:cb:05:1d:4f:30:94: 61:4d:67:4f:23:04:4f:88:ef:ad:b3:61:9e:0f:20: 09:05:ad:9f:8c:53:b9:43:3d:f8:83:53:30:fe:a7: 0d:2f:6d:11:f4:21:ea:47:bf:43:11:d0:02:5a:f8: bf:20:68:ad:3e:28:1a:59:04:ca:d0:dc:e1:25:cf: d5:12:20:62:8c:e6:0b:ac:ca:16:66:d1:99:02:48: 9b:b1:0f:87:62:b6:9d:bc:8d:f5:4b:74:40:41:8b: a4:45:ae:c4:78:24:cb:a1:0c:4d:ba:db:6e:47:eb: b0:9f:7d:7a:e6:79:06:85:bf:13:96:50:e0:de:dc: f1:57:40:2e:f9:d5:2f:31:b4:62:66:7a:54:dd:72: 3b:4b:bd:f4:8b:37:6b:5f:68:42:09:96:c6:c4:00: e8:92:d7:80:52:dc:b6:ec:cd:82:78:2f:8f:6e:97: 0b:73:67:9d:98:35:55:b8:24:d1:b5:dd:a1:ed:a1: ef:66:07:9c:aa:a1:64:9a:5a:39:52:8c:d9:86:0d: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.141.220.0/24 104.232.42.0/24 IPv6: 2602:fc78::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397750 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cc:cc:12:a3:91:1c:6d:3c:cf:e2:15:20:b1:84:a0:29:31: 37:fd:e4:99:6e:8f:f4:c5:9f:ed:d7:15:e7:49:14:ab:b5:60: 57:5e:07:ed:1c:65:f0:27:00:a4:03:5e:19:8a:00:9f:ee:59: 15:29:2e:24:fd:cd:62:ab:49:80:36:f5:2b:1b:99:94:c2:70: 17:05:c5:ab:9c:69:9d:5e:99:7a:94:2a:09:6c:88:08:f3:a0: 24:62:71:e0:da:bb:c8:01:72:36:33:ac:4b:87:9e:e8:d6:b0: 8c:fb:45:3b:eb:16:71:2f:5c:7b:da:b5:63:94:82:80:6c:8c: 43:df:a1:02:19:44:f4:9b:c1:ab:ed:93:8a:90:84:c4:b0:a7: 66:ad:0f:45:a1:a5:b2:ea:26:fb:25:8d:3c:52:ee:85:64:11: af:24:9c:05:4a:15:a6:11:42:47:14:e7:91:b2:6d:ec:f0:2e: f4:ec:c4:b6:c8:96:da:4c:9f:fd:dd:1b:3d:9f:98:e3:b0:a4: 23:b3:d1:ed:e9:7b:97:2d:d4:1e:8f:b2:8b:31:dc:da:61:01: ef:74:9e:3b:4c:c1:f3:61:7e:c1:e5:93:bb:97:92:3a:3e:9f: ce:a5:60:0b:4a:2a:d8:19:94:8a:68:dc:c6:6e:92:4b:11:23: a4:2b:c7:9d -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWErexCS6G6owkCNe7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgxNjAwNDUyNVoXDTI3MTExOTAxNDUyNVowLzEtMCsGA1UEAxMk YzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdjODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8HK0qYtQmcRePCloOhNhVjlaqFODj/05Bnq Sj1g4WCyeQyskWrYvSKW4wagZUH3Hb63+7jLBR1PMJRhTWdPIwRPiO+ts2GeDyAJ Ba2fjFO5Qz34g1Mw/qcNL20R9CHqR79DEdACWvi/IGitPigaWQTK0NzhJc/VEiBi jOYLrMoWZtGZAkibsQ+HYradvI31S3RAQYukRa7EeCTLoQxNuttuR+uwn3165nkG hb8TllDg3tzxV0Au+dUvMbRiZnpU3XI7S730izdrX2hCCZbGxADokteAUty27M2C eC+PbpcLc2edmDVVuCTRtd2h7aHvZgecqqFkmlo5UozZhg0LMQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJbk7W6eP4uNrr+6uwgho8Ob0W7YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j M2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MzY2Q0NjI1LTYwMzQtNGIzYi05 ZDhiLTU0MTdjYTk3YzgzOS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5 N2M4MzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjdwDBABo6CowDgQCAAIwCAMGACYC/HgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYRtjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBszMwSo5EcbTzP4hUg sYSgKTE3/eSZbo/0xZ/t1xXnSRSrtWBXXgftHGXwJwCkA14ZigCf7lkVKS4k/c1i q0mANvUrG5mUwnAXBcWrnGmdXpl6lCoJbIgI86AkYnHg2rvIAXI2M6xLh57o1rCM +0U76xZxL1x72rVjlIKAbIxD36ECGUT0m8Gr7ZOKkITEsKdmrQ9FoaWy6ib7JY08 Uu6FZBGvJJwFShWmEUJHFOeRsm3s8C707MS2yJbaTJ/93Rs9n5jjsKQjs9Ht6XuX LdQej7KLMdzaYQHvdJ47TMHzYX7B5ZO7l5I6Pp/OpWALSirYGZSKaNzGbpJLESOk K8ed -----END CERTIFICATE-----Generated at Sat Aug 23 15:59:07 2025 by rpki-client