$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer File: c75c2a49-d4ec-49ef-affc-f07717c14231.cer (raw, json) Hash identifier: haCLfAShIpSjtg6HDoHgLyaF+SY4CXIrjNcvecagsRo= Subject key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B615DEBAF6386C77E16017100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 19:30:21 +0000 Certificate not after: Sun 28 Feb 2027 01:45:35 +0000 Subordinate resources: AS: 941 AS: 1022 IP: 64.7.244.0/22 IP: 170.205.4.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:5d:eb:af:63:86:c7:7e:16:01:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 1 19:30:21 2025 GMT Not After : Feb 28 01:45:35 2027 GMT Subject: CN=c75c2a49-d4ec-49ef-affc-f07717c14231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:43:b6:a4:83:14:74:a0:2f:c3:bd:16:f6: 01:ee:16:e7:10:d3:b9:10:54:df:36:45:ec:26:38: 3b:2c:72:e1:6c:15:74:fb:30:81:f2:f8:d7:37:19: b1:07:8e:35:95:22:86:53:11:75:c6:16:fc:61:1f: 31:de:13:f8:f2:68:aa:87:9c:a5:9b:01:67:a6:3a: 8b:73:70:9d:b7:ae:fa:e9:62:ff:5d:b2:0b:f5:f9: 1f:fa:fa:be:7c:de:70:8b:f0:ae:57:a1:5b:25:d2: ad:92:53:ae:ee:00:e1:fc:4f:c7:d0:97:64:09:95: 47:28:00:f6:03:49:4d:ab:4d:e9:5a:1a:83:e9:ff: f3:d4:76:d5:e5:9c:30:e6:d7:8f:a6:fe:53:a0:c9: 12:a8:f9:2b:4a:7e:50:09:63:3b:af:ec:aa:15:11: 8b:0b:76:68:e0:3d:9b:ef:a7:1a:29:2e:85:c6:80: e2:ec:fe:2b:06:63:06:46:80:b3:5a:b0:12:b7:bb: 61:99:b6:fe:c7:e8:62:96:d1:e5:d1:2e:b6:43:ae: 93:a8:d4:41:ac:94:b9:c7:70:75:6d:99:c3:cb:56: a9:f7:c0:25:15:66:19:27:aa:51:ad:02:6a:cf:da: 32:6e:8e:69:b2:fb:e3:38:1e:30:e2:a8:90:3e:75: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.7.244.0/22 170.205.4.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 941 1022 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:eb:aa:06:4a:e3:5a:83:48:51:97:65:09:04:ca:b2:ec:20: b7:49:70:96:b5:d5:4c:56:e9:8f:b0:ac:8f:67:35:6d:45:41: e3:43:85:0b:83:3c:1e:cb:75:90:d1:e3:3c:3e:13:94:24:67: ed:d6:2d:ce:d4:23:85:08:5c:c3:1c:25:7b:70:c4:75:0d:c3: ef:53:f3:7c:ad:10:4c:30:e6:44:3d:74:fb:68:7e:15:ef:4d: 50:a5:a4:ba:37:5f:4a:cc:36:f5:0b:8e:dd:74:4d:af:48:d1: d6:d0:af:47:9d:ef:1e:11:02:b6:63:34:0f:38:2a:2d:ed:2a: 6a:ab:67:ed:a0:4f:6b:b7:db:08:c3:49:08:84:68:e1:22:58: a5:49:bd:7d:c6:40:b2:63:d1:a1:41:72:56:f0:49:a6:27:d5: 7b:c3:73:25:1d:2c:7e:d3:e1:08:74:a0:d4:c6:91:1b:57:a2: 36:c5:f9:3c:cf:a9:3f:01:db:dd:f3:c5:7e:60:a1:d1:6a:e6: b9:e5:d1:d7:b5:d5:53:30:03:e4:89:23:b4:b1:f3:40:41:21: 3f:17:48:ba:6d:97:cf:53:d4:7c:d5:40:dd:35:a6:4e:58:f4: 43:7b:92:1e:17:08:8d:19:50:73:2e:6b:47:46:a7:fe:46:4f: 1f:4e:03:bd -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEthXeuvY4bHfhYBcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAwMTE5MzAyMVoXDTI3MDIyODAxNDUzNVowLzEtMCsGA1UEAxMk Yzc1YzJhNDktZDRlYy00OWVmLWFmZmMtZjA3NzE3YzE0MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9dDtqSDFHSgL8O9FvYB7hbnENO5EFTfNkXs Jjg7LHLhbBV0+zCB8vjXNxmxB441lSKGUxF1xhb8YR8x3hP48miqh5ylmwFnpjqL c3Cdt6766WL/XbIL9fkf+vq+fN5wi/CuV6FbJdKtklOu7gDh/E/H0JdkCZVHKAD2 A0lNq03pWhqD6f/z1HbV5Zww5tePpv5ToMkSqPkrSn5QCWM7r+yqFRGLC3Zo4D2b 76caKS6FxoDi7P4rBmMGRoCzWrASt7thmbb+x+hiltHl0S62Q66TqNRBrJS5x3B1 bZnDy1ap98AlFWYZJ6pRrQJqz9oybo5psvvjOB4w4qiQPnUC4wIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFB2rpmBbkerB1PcZ0SP8wDjBWhLSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j NzVjMmE0OS1kNGVjLTQ5ZWYtYWZmYy1mMDc3MTdjMTQyMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M3NWMyYTQ5LWQ0ZWMtNDllZi1h ZmZjLWYwNzcxN2MxNDIzMS9jNzVjMmE0OS1kNGVjLTQ5ZWYtYWZmYy1mMDc3MTdj MTQyMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJAB/QDBAKqzQQwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICA60CAgP+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAnrqgZK41qDSFGXZQkEyrLsILdJcJa11UxW 6Y+wrI9nNW1FQeNDhQuDPB7LdZDR4zw+E5QkZ+3WLc7UI4UIXMMcJXtwxHUNw+9T 83ytEEww5kQ9dPtofhXvTVClpLo3X0rMNvULjt10Ta9I0dbQr0ed7x4RArZjNA84 Ki3tKmqrZ+2gT2u32wjDSQiEaOEiWKVJvX3GQLJj0aFBclbwSaYn1XvDcyUdLH7T 4Qh0oNTGkRtXojbF+TzPqT8B293zxX5godFq5rnl0de11VMwA+SJI7Sx80BBIT8X SLptl89T1HzVQN01pk5Y9EN7kh4XCI0ZUHMua0dGp/5GTx9OA70= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:53 2025 by rpki-client