$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a.cer File: 831d13c8-9b54-481a-a121-9cef07bbce7a.cer (raw, json) Hash identifier: ENHuwKsD59nSKdjE6T/vzOzTAWGsbEH21nto+FGrtKM= Subject key identifier: A2:0D:7D:B1:28:A3:01:69:67:9C:F2:4E:2A:C7:57:3D:14:81:39:D1 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B2378291010F493719446B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/831d13c8-9b54-481a-a121-9cef07bbce7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 15:23:06 +0000 Certificate not after: Mon 13 Dec 2027 16:23:06 +0000 Subordinate resources: AS: 53450 IP: 74.122.220.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:78:29:10:10:f4:93:71:94:46:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 9 15:23:06 2025 GMT Not After : Dec 13 16:23:06 2027 GMT Subject: CN=831d13c8-9b54-481a-a121-9cef07bbce7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:a3:b4:ee:ce:a8:0b:a6:2d:93:02:62:d9: 79:e0:b0:73:e0:55:d1:dc:ce:98:34:33:a7:92:ee: e2:31:9b:f9:63:5e:c4:1d:ae:64:da:0a:a2:14:2b: f3:ba:19:62:1c:1f:79:6a:96:9b:d9:eb:aa:0f:49: 7b:41:fc:48:8b:4a:59:18:45:e9:ff:07:c1:42:61: 06:15:2f:aa:cb:f3:bc:73:f7:68:5e:a5:ec:fa:6e: 72:ef:d2:64:f1:93:09:fc:6e:a2:ef:c8:24:02:fe: 9c:8d:80:d7:29:de:5d:73:87:de:a1:4b:bf:9f:22: 64:65:c2:5f:fd:dd:90:09:a6:21:20:a6:9d:88:9f: 10:87:3f:e7:c9:0d:06:95:ba:72:fb:c7:11:34:f2: d9:9a:ba:55:b3:28:fa:59:93:5d:9a:8f:42:5b:c5: 2d:19:f3:88:19:35:b7:d6:a2:45:63:ad:6d:e4:12: 78:4e:82:b3:7e:c4:d7:e0:fc:f1:c4:e0:b3:16:46: b2:ad:67:47:d5:99:3a:f2:46:5a:5b:6b:a0:1d:dd: 61:3f:b0:f7:72:c6:d6:40:59:8c:f6:28:f3:37:f8: d8:d1:78:43:1a:19:87:93:14:67:55:e4:bb:90:95: 31:df:17:0e:c4:5f:2b:25:52:fd:69:ec:79:d5:21: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0D:7D:B1:28:A3:01:69:67:9C:F2:4E:2A:C7:57:3D:14:81:39:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/831d13c8-9b54-481a-a121-9cef07bbce7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 74.122.220.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53450 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:54:52:cc:9a:56:4f:b2:db:22:e7:5c:49:12:32:f5:b1:49: 99:fe:d8:37:eb:53:49:bf:6e:73:cf:04:e3:a3:ba:77:d2:6c: b9:29:af:70:ee:a9:e4:b2:e6:11:2c:7b:db:23:f9:aa:cd:34: 36:51:be:af:27:a4:bf:c0:90:1f:ca:8a:7b:21:57:71:01:e9: f2:6b:4e:eb:9a:15:91:59:e3:ef:22:85:6e:17:52:9b:d4:58: a1:0e:95:6c:28:19:70:10:c4:0a:37:27:1f:40:ad:0e:d1:de: 3f:62:92:41:dd:1d:4a:2c:e1:66:45:9e:96:82:da:b4:6e:11: 28:44:95:d2:20:2a:5d:7c:35:3d:1f:0b:af:19:4f:4f:d0:85: 92:74:58:6d:4c:48:c4:51:f1:bd:51:20:50:d8:c7:b3:3e:b8: 33:de:24:9d:46:ac:ad:74:a9:21:3e:36:a7:4e:94:a5:77:c6: 9c:ff:53:a4:b2:b4:4c:23:d1:99:82:3e:64:d8:06:80:76:2a: 9c:f2:9a:50:68:1c:7f:2e:c4:51:9f:95:e8:fe:ad:98:c8:ee: ee:fc:48:58:60:74:c6:04:83:31:1c:08:d4:16:47:fc:6c:78: 94:7d:86:4a:3e:e5:e8:fc:42:ce:78:01:25:64:91:53:62:49: 97:e3:b2:5f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsjeCkQEPSTcZRGtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkwOTE1MjMwNloXDTI3MTIxMzE2MjMwNlowLzEtMCsGA1UEAxMk ODMxZDEzYzgtOWI1NC00ODFhLWExMjEtOWNlZjA3YmJjZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0GjtO7OqAumLZMCYtl54LBz4FXR3M6YNDOn ku7iMZv5Y17EHa5k2gqiFCvzuhliHB95apab2euqD0l7QfxIi0pZGEXp/wfBQmEG FS+qy/O8c/doXqXs+m5y79Jk8ZMJ/G6i78gkAv6cjYDXKd5dc4feoUu/nyJkZcJf /d2QCaYhIKadiJ8Qhz/nyQ0Glbpy+8cRNPLZmrpVsyj6WZNdmo9CW8UtGfOIGTW3 1qJFY61t5BJ4ToKzfsTX4PzxxOCzFkayrWdH1Zk68kZaW2ugHd1hP7D3csbWQFmM 9ijzN/jY0XhDGhmHkxRnVeS7kJUx3xcOxF8rJVL9aex51SEQgQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKINfbEoowFpZ5zyTirHVz0UgTnRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 MzFkMTNjOC05YjU0LTQ4MWEtYTEyMS05Y2VmMDdiYmNlN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgzMWQxM2M4LTliNTQtNDgxYS1h MTIxLTljZWYwN2JiY2U3YS84MzFkMTNjOC05YjU0LTQ4MWEtYTEyMS05Y2VmMDdi YmNlN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKetwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANDKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADJUUsyaVk+y2yLnXEkSMvWxSZn+2DfrU0m/bnPPBOOjunfS bLkpr3DuqeSy5hEse9sj+arNNDZRvq8npL/AkB/KinshV3EB6fJrTuuaFZFZ4+8i hW4XUpvUWKEOlWwoGXAQxAo3Jx9ArQ7R3j9ikkHdHUos4WZFnpaC2rRuEShEldIg Kl18NT0fC68ZT0/QhZJ0WG1MSMRR8b1RIFDYx7M+uDPeJJ1GrK10qSE+NqdOlKV3 xpz/U6SytEwj0ZmCPmTYBoB2KpzymlBoHH8uxFGflej+rZjI7u78SFhgdMYEgzEc CNQWR/xseJR9hko+5ej8Qs54ASVkkVNiSZfjsl8= -----END CERTIFICATE-----Generated at Tue Sep 16 21:20:55 2025 by rpki-client