$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer File: 25d202df-6bec-4085-8c1b-d1f141557cfe.cer (raw, json) Hash identifier: w1tp+6dz1jAKK+3H37D8NtR2x60jeWmIYOhj5BR7L30= Subject key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D8C23028C966124DDAE41C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Apr 2026 12:45:17 +0000 Certificate not after: Fri 21 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 11469 IP: 23.144.232.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:23:02:8c:96:61:24:dd:ae:41:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 18 12:45:17 2026 GMT Not After : Jul 21 12:45:17 2028 GMT Subject: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:2a:6e:17:9b:83:cc:9e:ba:d7:a5:9e:e0: da:7e:ab:c6:a0:1e:4d:01:c4:7a:38:40:5f:3f:d3: 4e:cd:8a:f3:15:5c:be:38:af:e6:fa:1b:15:10:26: ec:05:d5:cb:35:5a:af:11:88:21:03:5f:a1:0e:e4: 19:7d:6a:c8:3f:1f:68:21:17:26:ff:2e:d4:a3:02: e2:a9:f8:de:f9:75:e2:e7:56:a7:fa:9d:31:eb:df: ef:42:2f:31:94:95:d4:00:bf:e6:ca:01:14:99:14: 28:8b:6b:5b:96:8f:e8:98:e7:71:2b:03:6b:b3:dc: 0b:01:8f:a3:80:a3:81:4b:0f:90:26:ac:6c:5f:fb: 1c:17:ae:b1:e2:6c:e5:b3:bd:3c:21:f9:ea:4f:94: 20:15:c2:8e:74:89:7d:ab:3a:a8:c6:21:63:1c:4e: 42:b5:c6:95:33:7b:67:f4:73:e0:11:d1:e7:b5:a9: 98:01:37:93:bf:a0:d5:f9:ba:68:9f:eb:ce:1c:12: 73:f3:b8:30:56:c5:92:ed:82:26:82:20:c2:9f:66: 6e:ff:3e:81:40:0a:84:06:ed:80:d6:b1:a9:c5:ca: 6f:89:4c:d5:3e:28:7e:ad:89:ea:0b:f8:75:57:ba: 33:2a:ae:65:ce:ff:16:0d:a6:d0:9e:15:fb:23:a9: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11469 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:be:6c:8a:4f:8b:67:cd:fc:c2:ee:9f:ed:fe:57:12:84:ba: 95:a0:94:95:a9:a1:b7:59:89:8c:95:36:e3:81:06:5b:bf:c6: 2c:93:d4:49:b4:0b:57:0a:1c:08:54:13:4e:8d:04:bc:aa:ce: 7f:0c:49:7a:40:60:a9:e1:6d:93:fc:f3:3b:f7:28:df:1c:ef: 65:9b:f8:3b:0a:00:31:b8:89:1f:69:3a:c4:51:9f:67:2d:13: dc:b3:f1:1b:6d:84:74:9b:a5:23:ee:11:20:dd:d7:5a:1e:bd: 90:fd:4c:87:40:86:30:77:3d:25:3f:e5:32:68:09:09:76:9f: 4d:ed:7a:b5:9e:41:35:0c:03:b7:9f:6f:3f:c6:22:58:4d:2c: 66:ad:9b:90:7d:93:e5:3c:8f:a3:30:d2:b0:f4:67:1c:69:3d: e1:47:a5:b6:34:84:69:a4:62:e6:1d:d0:15:0e:5c:e7:ca:28: a4:73:12:23:83:8e:61:20:1e:a0:8b:d3:a3:e2:79:51:96:2d: 4f:2d:58:8b:ec:70:f2:d7:78:0d:65:e0:12:85:78:4e:52:ee: cb:b7:ba:c5:f3:f5:9f:58:8c:12:4a:8e:8f:20:4e:ac:9c:e6: 24:ba:d8:01:37:53:cd:2f:46:5e:14:73:f1:ed:75:42:91:b4: 7f:77:31:5c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2MIwKMlmEk3a5ByQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDQxODEyNDUxN1oXDTI4MDcyMTEyNDUxN1owLzEtMCsGA1UEAxMk MjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsqbhebg8yeutelnuDafqvGoB5NAcR6OEBf P9NOzYrzFVy+OK/m+hsVECbsBdXLNVqvEYghA1+hDuQZfWrIPx9oIRcm/y7UowLi qfje+XXi51an+p0x69/vQi8xlJXUAL/mygEUmRQoi2tblo/omOdxKwNrs9wLAY+j gKOBSw+QJqxsX/scF66x4mzls708IfnqT5QgFcKOdIl9qzqoxiFjHE5CtcaVM3tn 9HPgEdHntamYATeTv6DV+bpon+vOHBJz87gwVsWS7YImgiDCn2Zu/z6BQAqEBu2A 1rGpxcpviUzVPih+rYnqC/h1V7ozKq5lzv8WDabQnhX7I6nOyQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGIpNm9vuFH7bvmnoXER61hHBBHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI1ZDIwMmRmLTZiZWMtNDA4NS04 YzFiLWQxZjE0MTU1N2NmZS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1 NTdjZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXkOgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LM0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEACr5sik+LZ838wu6f7f5XEoS6laCUlamht1mJjJU244EGW7/G LJPUSbQLVwocCFQTTo0EvKrOfwxJekBgqeFtk/zzO/co3xzvZZv4OwoAMbiJH2k6 xFGfZy0T3LPxG22EdJulI+4RIN3XWh69kP1Mh0CGMHc9JT/lMmgJCXafTe16tZ5B NQwDt59vP8YiWE0sZq2bkH2T5TyPozDSsPRnHGk94UeltjSEaaRi5h3QFQ5c58oo pHMSI4OOYSAeoIvTo+J5UZYtTy1Yi+xw8td4DWXgEoV4TlLuy7e6xfP1n1iMEkqO jyBOrJzmJLrYATdTzS9GXhRz8e11QpG0f3cxXA== -----END CERTIFICATE-----Generated at Wed May 6 23:41:54 2026 by rpki-client