$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer File: de57fd18-3c65-43a3-96c1-a6fe61028c72.cer (raw, json) Hash identifier: mnDdciJ/3VZFgRRKrx1OSabS7EOauRr6YbWmTCDGpKY= Subject key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B96676DC8D8DBDFC4DF69D180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 19:27:21 +0000 Certificate not after: Tue 15 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 400304 IP: 23.147.152.0/23 IP: 167.17.72.0/21 IP: 193.149.164.0/24 IP: 216.181.107.0/24 IP: 2606:a8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:67:6d:c8:d8:db:df:c4:df:69:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 20 19:27:21 2025 GMT Not After : Dec 15 01:45:26 2026 GMT Subject: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:81:30:14:98:fb:7b:30:8a:da:68:ad:81: a3:7a:d4:2f:4c:37:56:60:54:6d:2d:e3:ae:9f:22: c2:2c:e6:47:7b:eb:1e:a3:9f:1b:03:a4:ae:52:44: d2:4a:67:ee:88:93:02:a2:85:70:39:0d:91:78:23: b7:10:3c:6a:db:ae:7f:28:9d:65:bf:16:36:04:a8: ac:30:30:16:3f:6a:58:a2:30:ec:12:35:23:c9:75: ae:cb:2e:05:41:45:8e:6a:74:54:36:ec:43:ff:b6: 8c:24:93:aa:8a:cd:6c:e3:84:5d:6a:97:1d:44:82: e5:d0:d8:38:32:6b:e6:e8:b2:70:cc:45:43:48:c9: 9f:b1:77:11:02:58:a6:ea:3f:c4:c3:87:96:41:d8: 7e:1e:ff:5e:bd:78:ca:3e:99:a6:2c:80:e5:4f:b0: 76:63:04:62:2b:75:13:ad:6e:10:5a:27:83:15:c9: 45:5d:85:a7:96:18:2b:8e:6d:9b:37:d4:1e:ac:de: 7f:8d:d8:ae:24:6b:d3:d9:5c:de:c0:13:93:3d:ea: 94:c6:1f:65:aa:73:01:9c:12:93:e9:ac:b0:fa:9e: bf:86:57:6a:d0:3b:be:28:97:e6:19:ad:b2:fa:ea: ce:30:5a:72:bb:c6:00:fa:50:da:83:e9:a4:da:90: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/23 167.17.72.0/21 193.149.164.0/24 216.181.107.0/24 IPv6: 2606:a8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ed:39:aa:fc:51:c4:26:5c:51:68:df:32:d1:9c:ab:6c:0a: e6:ee:47:7f:32:93:4c:71:ba:3d:cb:fe:6b:a5:cf:8c:5b:5e: 7b:b2:4d:72:cb:19:0e:48:0e:65:88:4f:c8:ea:8e:b6:8c:9c: f2:a6:bf:cf:59:70:bf:2a:1c:fb:ac:63:e1:1c:98:86:9e:e5: 6f:ba:db:fe:c8:00:64:7a:95:6f:5f:be:91:61:aa:02:01:6a: 54:62:4a:03:8d:66:3c:5d:f9:e8:96:7a:0c:42:60:d6:ec:b1: 6d:66:43:77:54:b9:e0:af:3e:45:1d:6b:af:2e:e4:cb:30:db: c9:a4:f1:96:a4:a5:77:99:95:57:76:b5:8c:15:2d:29:ae:b5: bc:42:3b:b7:a5:33:db:5c:fa:d4:6e:10:3d:59:41:4c:1c:8b: 67:1a:3d:b4:85:95:94:9c:90:ee:e5:11:6c:34:10:1d:54:50: 9f:5b:f8:aa:c0:f6:b1:7f:1d:c7:cf:38:7f:39:13:96:15:a2: 8c:71:50:59:0b:de:34:fc:63:b4:4a:64:af:71:81:6b:75:2b: 73:f6:fd:d8:fe:1a:dd:0a:2a:36:97:4d:86:22:76:61:0c:49: b3:cf:75:ae:e6:d4:30:6e:13:f0:84:2c:be:52:53:b7:34:31: 38:b5:36:3d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEuWZ23I2NvfxN9p0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAyMDE5MjcyMVoXDTI2MTIxNTAxNDUyNlowLzEtMCsGA1UEAxMk ZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XiBMBSY+3switporYGjetQvTDdWYFRtLeOu nyLCLOZHe+seo58bA6SuUkTSSmfuiJMCooVwOQ2ReCO3EDxq265/KJ1lvxY2BKis MDAWP2pYojDsEjUjyXWuyy4FQUWOanRUNuxD/7aMJJOqis1s44RdapcdRILl0Ng4 Mmvm6LJwzEVDSMmfsXcRAlim6j/Ew4eWQdh+Hv9evXjKPpmmLIDlT7B2YwRiK3UT rW4QWieDFclFXYWnlhgrjm2bN9QerN5/jdiuJGvT2VzewBOTPeqUxh9lqnMBnBKT 6ayw+p6/hldq0Du+KJfmGa2y+urOMFpyu8YA+lDag+mk2pAsDwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMi8G/UvUulPlct6/BgMAmRATII9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RlNTdmZDE4LTNjNjUtNDNhMy05 NmMxLWE2ZmU2MTAyOGM3Mi9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEw MjhjNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAEXk5gDBAOnEUgDBADBlaQDBADYtWswDQQCAAIw BwMFACYGqMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuwMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB/t Oar8UcQmXFFo3zLRnKtsCubuR38yk0xxuj3L/mulz4xbXnuyTXLLGQ5IDmWIT8jq jraMnPKmv89ZcL8qHPusY+EcmIae5W+62/7IAGR6lW9fvpFhqgIBalRiSgONZjxd +eiWegxCYNbssW1mQ3dUueCvPkUda68u5Msw28mk8ZakpXeZlVd2tYwVLSmutbxC O7elM9tc+tRuED1ZQUwci2caPbSFlZSckO7lEWw0EB1UUJ9b+KrA9rF/HcfPOH85 E5YVooxxUFkL3jT8Y7RKZK9xgWt1K3P2/dj+Gt0KKjaXTYYidmEMSbPPda7m1DBu E/CELL5SU7c0MTi1Nj0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:10 2025 by rpki-client