$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer File: ef238680-20ad-47df-89b5-7a55fae68594.cer (raw, json) Hash identifier: K5i+WD8JQzj3suM35N/fLOilNvNPlUODB4Y4ouS7k/o= Subject key identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B407A155B76BF63B685CB0300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Sep 2025 00:45:25 +0000 Certificate not after: Fri 24 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 53283 IP: 23.149.72.0/23 IP: 23.157.104.0/23 IP: 140.235.232.0/22 IP: 2607:33c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:7a:15:5b:76:bf:63:b6:85:cb:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 20 00:45:25 2025 GMT Not After : Dec 24 01:45:25 2027 GMT Subject: CN=ef238680-20ad-47df-89b5-7a55fae68594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:f8:df:d0:ec:44:78:f1:2b:e5:c4:52:e4: 26:c8:88:e6:d9:85:c5:f5:ab:63:ad:17:21:43:1d: 62:f9:78:ee:25:28:05:94:07:c2:98:ce:93:3e:f9: 75:7c:1a:45:7a:0a:3d:66:7f:d3:03:22:44:d7:bc: 78:10:4b:90:8d:95:35:66:6e:f4:65:79:41:79:01: 98:52:9e:52:c8:10:b0:6a:a7:69:f9:c2:e0:ec:48: 92:40:8d:3c:e8:b2:11:b1:99:09:31:ed:73:eb:61: d8:da:b3:c2:c8:05:7c:f8:dc:85:bc:c8:fc:8f:b5: f8:30:90:4c:27:c9:26:5c:67:7b:33:53:9f:48:a3: 8a:6e:34:e6:1c:3f:54:70:7d:b3:4b:e3:1c:c1:d2: fd:b5:d8:43:76:d1:f2:e9:5a:c6:35:22:b8:15:f2: f0:4c:99:56:16:63:64:f9:f6:c9:16:fc:02:b3:f2: a5:b4:7b:2f:e7:ae:e1:3b:4b:ff:88:71:9c:9d:59: 71:e4:2c:cc:c1:2c:7f:9a:61:fd:a8:b6:88:2c:de: 40:96:57:cf:7d:81:7d:79:d7:40:f5:52:7c:d4:b8: ea:da:d0:9e:52:02:89:89:c1:85:8b:8a:af:f7:a0: a2:5a:1c:e9:0b:e8:d5:97:40:4c:53:87:fc:72:ea: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.72.0/23 23.157.104.0/23 140.235.232.0/22 IPv6: 2607:33c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53283 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1d:f7:65:8f:c8:55:cf:d3:18:62:62:c2:75:59:fa:e1:db: a6:10:d7:c4:f6:63:86:a8:ba:66:ff:47:15:50:a3:ac:f3:43: 0d:38:8f:fe:7f:aa:60:81:a8:b3:f3:7b:35:2b:8f:97:ce:7a: 98:56:32:86:b0:65:39:6d:1b:40:b4:2e:8e:a5:11:66:3e:00: ad:12:16:aa:80:d5:e1:b3:b7:18:16:7a:2a:51:87:12:e9:6f: aa:da:58:39:21:39:18:b4:9f:6f:51:8c:37:49:42:5d:2f:8e: 63:2e:54:2b:f7:01:f8:90:db:31:d5:4f:89:8e:3e:d9:78:71: ac:f3:c3:64:63:c6:69:3a:7e:d8:0d:2d:5e:66:b4:ae:2c:4d: a8:07:72:b9:f3:16:5b:47:ae:66:4e:d5:1f:a1:f7:de:04:48: a8:65:0b:92:f0:e0:5c:49:6f:5b:02:9e:97:b4:06:d7:23:8c: 36:d4:d4:26:56:11:cc:fb:05:54:9f:15:90:5c:76:9b:d5:cd: 44:0f:b7:21:4c:be:a1:f6:51:a6:cb:7c:7b:0d:e0:15:ce:88: 0b:db:f6:d5:62:7d:57:41:66:2d:61:26:cc:f6:41:52:f9:b6: b2:70:98:54:95:5a:f3:b2:28:17:a5:87:9b:81:95:07:0b:7e: 84:5e:d4:ab -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEtAehVbdr9jtoXLAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyMDAwNDUyNVoXDTI3MTIyNDAxNDUyNVowLzEtMCsGA1UEAxMk ZWYyMzg2ODAtMjBhZC00N2RmLTg5YjUtN2E1NWZhZTY4NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM7439DsRHjxK+XEUuQmyIjm2YXF9atjrRch Qx1i+XjuJSgFlAfCmM6TPvl1fBpFego9Zn/TAyJE17x4EEuQjZU1Zm70ZXlBeQGY Up5SyBCwaqdp+cLg7EiSQI086LIRsZkJMe1z62HY2rPCyAV8+NyFvMj8j7X4MJBM J8kmXGd7M1OfSKOKbjTmHD9UcH2zS+McwdL9tdhDdtHy6VrGNSK4FfLwTJlWFmNk +fbJFvwCs/KltHsv567hO0v/iHGcnVlx5CzMwSx/mmH9qLaILN5AllfPfYF9eddA 9VJ81Ljq2tCeUgKJicGFi4qv96CiWhzpC+jVl0BMU4f8cuq3/wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFHz/c6ydbrwdJX7Nj87pUbK3avSTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l ZjIzODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1ZmFlNjg1OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VmMjM4NjgwLTIwYWQtNDdkZi04 OWI1LTdhNTVmYWU2ODU5NC9lZjIzODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1ZmFl Njg1OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXlUgDBAEXnWgDBAKM6+gwDQQCAAIwBwMFACYH M8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANAjMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACId92WPyFXP 0xhiYsJ1Wfrh26YQ18T2Y4aoumb/RxVQo6zzQw04j/5/qmCBqLPzezUrj5fOephW MoawZTltG0C0Lo6lEWY+AK0SFqqA1eGztxgWeipRhxLpb6raWDkhORi0n29RjDdJ Ql0vjmMuVCv3AfiQ2zHVT4mOPtl4cazzw2Rjxmk6ftgNLV5mtK4sTagHcrnzFltH rmZO1R+h994ESKhlC5Lw4FxJb1sCnpe0BtcjjDbU1CZWEcz7BVSfFZBcdpvVzUQP tyFMvqH2UabLfHsN4BXOiAvb9tVifVdBZi1hJsz2QVL5trJwmFSVWvOyKBelh5uB lQcLfoRe1Ks= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:07 2025 by rpki-client