$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer File: f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer (raw, json) Hash identifier: T2kNRJI2+LVmmxOILEZGOCK8V11IqM1eDbfQb7r8lBI= Subject key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B2CEF4DA4D1DA824EA3162580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 00:45:26 +0000 Certificate not after: Fri 17 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 14464 IP: 131.109.0.0/16 IP: 2604:a700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:ef:4d:a4:d1:da:82:4e:a3:16:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 13 00:45:26 2025 GMT Not After : Dec 17 01:45:26 2027 GMT Subject: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:07:73:9e:93:f7:8a:ae:5f:19:00:8d:38: f8:27:5d:f9:1d:b1:43:f4:65:99:5c:ad:12:1f:3f: f5:58:25:13:51:87:30:60:c6:9b:64:87:e5:c1:ca: aa:82:68:b6:1a:87:32:9c:89:7f:db:6b:70:1f:a9: 5a:a8:54:cf:e0:29:76:85:88:ef:b0:d9:84:8f:0e: 4f:34:23:8e:9d:4e:c3:72:45:99:0e:c2:a0:d8:0e: aa:71:1e:89:1d:f1:a3:f0:df:a3:a5:5b:f5:3b:47: 41:23:35:f9:90:5a:5a:6c:8b:0f:9e:07:07:02:c4: a4:e1:a9:f0:55:a6:f6:26:2d:6b:f9:2d:ec:34:df: 81:fb:7f:ee:e6:6f:62:82:7e:2a:97:87:6e:99:cd: 84:bf:2b:30:6c:24:8f:a9:7d:ef:ed:bb:51:71:16: eb:45:45:06:18:ab:1c:20:bb:9b:df:d7:30:6d:82: 0a:dd:eb:3d:59:fe:d9:9e:f9:4e:fd:89:71:ef:7f: b3:66:cc:0d:7f:0c:77:09:8e:e6:e2:98:6c:2a:c3: e0:13:ea:a1:b0:0c:00:6c:14:72:64:b1:e5:a8:ce: 0e:53:de:54:ed:f0:65:83:cb:2f:87:86:21:c7:b2: bc:c4:1c:b4:ac:59:f9:57:b2:2f:64:4b:4e:70:01: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 131.109.0.0/16 IPv6: 2604:a700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ba:31:77:18:e0:05:37:f5:bc:4f:a8:f2:12:d9:34:69:1c: 07:9c:22:4c:f2:84:73:94:56:d0:93:60:57:6f:7d:e8:9b:09: af:51:2a:d2:08:ee:3e:94:c4:cf:07:13:af:c1:94:d3:7c:5a: e0:e2:6a:72:1a:08:03:ac:2e:d8:f7:b1:57:e2:7b:43:df:a7: e2:76:2e:38:5a:bf:6c:ea:8e:38:42:e5:1b:bf:ac:01:4b:0a: fa:4a:4f:4f:fd:52:1c:f6:4a:fa:5f:c6:fc:a3:75:d1:f6:e4: f4:59:f8:d7:91:e2:24:b8:de:c2:ab:b8:47:9d:d7:a4:70:31: 34:11:ce:21:4f:76:ba:2d:ad:2a:d6:bd:80:fc:40:4b:81:87: 61:2d:86:db:7f:1c:35:fc:05:8a:23:49:0f:b1:b9:14:69:d5: 86:6c:2a:2a:b0:85:68:44:d7:06:cd:cf:36:bd:41:91:0c:5e: f8:d5:20:f8:b7:19:89:4b:dc:4a:b4:f8:de:4b:f6:44:76:e8: 27:6f:33:dc:52:95:35:89:fa:5d:09:d3:3d:68:27:db:98:5c: 82:65:09:1a:6d:c9:22:91:f0:64:96:f4:f1:f1:77:31:fe:76: 9d:2c:a6:60:f4:73:50:2b:97:6b:eb:1b:12:f1:95:f4:bb:8b: a0:01:21:88 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEss702k0dqCTqMWJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkxMzAwNDUyNloXDTI3MTIxNzAxNDUyNlowLzEtMCsGA1UEAxMk ZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhjNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNcHc56T94quXxkAjTj4J135HbFD9GWZXK0S Hz/1WCUTUYcwYMabZIflwcqqgmi2GocynIl/22twH6laqFTP4Cl2hYjvsNmEjw5P NCOOnU7DckWZDsKg2A6qcR6JHfGj8N+jpVv1O0dBIzX5kFpabIsPngcHAsSk4anw Vab2Ji1r+S3sNN+B+3/u5m9ign4ql4dumc2EvyswbCSPqX3v7btRcRbrRUUGGKsc ILub39cwbYIK3es9Wf7ZnvlO/Ylx73+zZswNfwx3CY7m4phsKsPgE+qhsAwAbBRy ZLHlqM4OU95U7fBlg8svh4Yhx7K8xBy0rFn5V7IvZEtOcAGDFwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFGs/rcZ4NWVPGE+7qo57JAjeMtq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m M2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YzZTA5NjczLTVjNmUtNDM0MC1h ZDExLTRkYThkZmI4Yzc3Ny9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZi OGM3NzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCDbTANBAIAAjAHAwUAJgSnADAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgI4gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxujF3GOAFN/W8T6jyEtk0aRwHnCJM 8oRzlFbQk2BXb33omwmvUSrSCO4+lMTPBxOvwZTTfFrg4mpyGggDrC7Y97FX4ntD 36fidi44Wr9s6o44QuUbv6wBSwr6Sk9P/VIc9kr6X8b8o3XR9uT0WfjXkeIkuN7C q7hHndekcDE0Ec4hT3a6La0q1r2A/EBLgYdhLYbbfxw1/AWKI0kPsbkUadWGbCoq sIVoRNcGzc82vUGRDF741SD4txmJS9xKtPjeS/ZEdugnbzPcUpU1ifpdCdM9aCfb mFyCZQkabckikfBklvTx8Xcx/nadLKZg9HNQK5dr6xsS8ZX0u4ugASGI -----END CERTIFICATE-----Generated at Sat Oct 11 13:00:45 2025 by rpki-client