$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer File: 88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer (raw, json) Hash identifier: WqNBlIPJuf4y4mrCvaW6Ktg5NmwJaJQGXk6fiPrfO4w= Subject key identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AA15933618FBFFE887CE5D180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Jul 2025 00:45:38 +0000 Certificate not after: Thu 28 Oct 2027 00:45:38 +0000 Subordinate resources: AS: 53427 IP: 23.128.100.0/24 IP: 2602:fa91::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:59:33:61:8f:bf:fe:88:7c:e5:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 25 00:45:38 2025 GMT Not After : Oct 28 00:45:38 2027 GMT Subject: CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:2a:85:1d:28:90:a4:20:bb:2f:76:a5:54: 3e:c9:72:f0:71:41:8c:93:74:12:96:ae:19:2a:7a: 98:ae:e3:32:43:7f:2d:a5:3a:66:ca:ed:a4:bb:a4: 04:5e:61:16:6d:e9:7f:5d:9f:f1:8f:05:3b:26:e4: b5:e3:87:19:89:20:6a:e4:9f:36:6c:41:01:3c:e7: bc:50:0b:d9:84:ae:a8:9d:c2:f8:d1:c0:3f:c4:9f: 01:43:94:13:81:fc:2e:17:15:b2:b4:be:87:a4:2a: 81:b8:7d:6e:90:19:c6:35:03:52:c5:91:48:da:1b: fb:b2:74:1c:37:8e:3f:d9:57:61:70:60:54:cf:68: ff:f5:f4:22:cf:df:20:d9:60:62:1b:b7:c0:2e:37: 74:70:eb:91:0e:53:7f:2e:64:bb:f1:dc:20:fb:e3: 2f:15:fe:4b:57:23:1f:db:20:e1:88:01:c2:b0:f0: ce:15:11:cf:5d:a5:e5:fa:30:a4:33:78:81:c8:78: 77:a6:f5:61:a5:68:08:04:9e:a0:cc:47:95:46:4b: 7f:d4:7f:76:b7:28:fe:96:a7:da:10:99:88:89:55: 12:80:26:cd:72:eb:83:1a:6c:fa:78:d5:7e:eb:69: 44:7c:5b:45:30:b1:1d:a2:25:45:f1:7b:76:ba:e0: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.128.100.0/24 IPv6: 2602:fa91::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ba:69:41:9f:fb:79:7b:91:be:bb:4f:3d:d5:01:ea:5a:d2: a4:10:9c:62:ff:8a:1d:85:fb:16:06:f4:a5:8a:34:b6:1c:2a: 28:6d:81:59:e0:09:7a:57:11:46:05:96:28:1a:42:27:d3:18: 26:5b:5e:d0:d5:c0:51:5d:1e:a4:f2:3d:d4:87:1f:58:3c:54: f1:51:20:e9:4d:15:ea:ff:a7:9c:45:89:48:ca:55:15:07:0d: c2:ad:4a:5d:85:66:e8:cc:4e:61:a5:b6:e3:72:c1:04:d0:82: bc:06:27:c5:2e:7e:3b:a5:83:04:86:de:9f:61:a9:50:19:94: b9:2f:35:7c:a6:30:94:0c:64:32:97:cc:76:16:55:7c:b5:c7: f1:8b:da:e5:3a:5e:db:c1:70:3b:b5:de:22:b2:88:e3:79:cb: c4:e0:d9:be:f8:0e:53:49:30:ec:56:5d:7d:4a:52:a8:b7:3a: dc:ee:8a:9c:a5:2c:4e:a1:6d:95:53:66:52:28:c1:7d:ee:31: 1a:4c:02:da:7b:88:cf:4b:e1:1c:90:7f:46:20:ef:31:6d:a7: 85:e1:2a:26:9e:aa:0d:f5:10:50:84:b3:d8:fd:0c:64:58:cd: f3:53:a3:bf:85:8f:46:1f:4a:35:34:07:63:6a:ad:03:a7:ad: 52:84:fe:d3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqhWTNhj7/+iHzl0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcyNTAwNDUzOFoXDTI3MTAyODAwNDUzOFowLzEtMCsGA1UEAxMk ODhjNjk0ODYtM2UxNC00ZjI2LTlmOTktMDJjZjdhYWFiN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFUqhR0okKQguy92pVQ+yXLwcUGMk3QSlq4Z KnqYruMyQ38tpTpmyu2ku6QEXmEWbel/XZ/xjwU7JuS144cZiSBq5J82bEEBPOe8 UAvZhK6oncL40cA/xJ8BQ5QTgfwuFxWytL6HpCqBuH1ukBnGNQNSxZFI2hv7snQc N44/2VdhcGBUz2j/9fQiz98g2WBiG7fALjd0cOuRDlN/LmS78dwg++MvFf5LVyMf 2yDhiAHCsPDOFRHPXaXl+jCkM3iByHh3pvVhpWgIBJ6gzEeVRkt/1H92tyj+lqfa EJmIiVUSgCbNcuuDGmz6eNV+62lEfFtFMLEdoiVF8Xt2uuDFiQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAws2+iX7JMnJyAYSBttP8fGOb5zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 OGM2OTQ4Ni0zZTE0LTRmMjYtOWY5OS0wMmNmN2FhYWI3YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4YzY5NDg2LTNlMTQtNGYyNi05 Zjk5LTAyY2Y3YWFhYjdiZi84OGM2OTQ4Ni0zZTE0LTRmMjYtOWY5OS0wMmNmN2Fh YWI3YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgGQwDgQCAAIwCAMGACYC+pEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDQszBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcumlBn/t5e5G+u0891QHqWtKk EJxi/4odhfsWBvSlijS2HCoobYFZ4Al6VxFGBZYoGkIn0xgmW17Q1cBRXR6k8j3U hx9YPFTxUSDpTRXq/6ecRYlIylUVBw3CrUpdhWbozE5hpbbjcsEE0IK8BifFLn47 pYMEht6fYalQGZS5LzV8pjCUDGQyl8x2FlV8tcfxi9rlOl7bwXA7td4isojjecvE 4Nm++A5TSTDsVl19SlKotzrc7oqcpSxOoW2VU2ZSKMF97jEaTALae4jPS+EckH9G IO8xbaeF4SomnqoN9RBQhLPY/QxkWM3zU6O/hY9GH0o1NAdjaq0Dp61ShP7T -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:31 2025 by rpki-client