$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer File: 8ad56193-8e33-4786-9a64-949338fc325a.cer (raw, json) Hash identifier: H8NN2AnhbU3qkT7Rs6OtpqI9jR4F49BgninO+clRWDs= Subject key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B99CFF50ABD949CE31215A440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 10386 IP: 209.114.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:0a:bd:94:9c:e3:12:15:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=8ad56193-8e33-4786-9a64-949338fc325a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:c2:6a:09:fd:c1:19:5a:09:cc:8d:af:59: 1e:09:34:83:a0:c6:23:0e:8d:72:96:80:77:cc:3e: d2:fe:bd:05:2a:9b:4a:93:dd:e2:d1:26:51:09:cf: 61:9f:f8:e5:48:70:6e:8b:30:f6:d3:18:82:2d:8a: 7d:17:df:11:23:9b:2d:6c:a4:9e:53:d6:44:fb:5c: 89:f2:20:ca:e0:87:85:41:45:14:8c:e5:68:7f:3f: dc:e7:f8:03:a6:96:99:46:9e:61:80:d4:13:94:ff: 86:64:98:71:ce:8d:71:25:25:13:02:65:5d:64:5c: 40:91:70:05:eb:3b:e6:b1:18:7d:82:d0:a5:dd:74: 88:1b:04:fa:70:09:a0:2c:03:c4:69:02:94:d1:da: b8:7f:72:19:0e:a2:c3:ee:4d:5c:20:05:6f:07:37: 17:3c:74:a3:da:29:62:c6:71:4a:02:f3:2c:cc:a2: d9:e4:62:d9:bf:4e:5a:75:8e:e7:e9:a0:8c:61:21: 24:8b:97:ec:8d:d7:b3:1e:72:ca:da:a3:96:4e:7a: ae:56:9b:92:2c:c5:65:c5:0c:da:31:97:5e:0f:c3: c8:ad:75:07:f2:78:7f:72:3f:1a:13:42:8f:b0:8a: 84:95:e2:b1:3e:27:76:64:f2:ee:fd:e5:6f:4f:da: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10386 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c3:3e:01:73:7e:8d:b4:9d:99:65:14:01:d5:e1:b9:8b:4c: 2b:42:8e:68:c1:20:77:b5:0d:d7:ce:23:69:33:44:1c:9a:a2: 9e:81:fd:16:40:7a:cb:2c:54:d3:c8:5a:a8:7b:c2:f7:c9:5c: ee:ef:33:cc:84:1c:09:58:b3:2d:dd:79:89:f3:bd:18:ea:db: 11:2a:2b:3f:90:5c:9d:66:37:0c:68:cb:0a:d5:d8:da:18:58: ec:ea:d7:29:6a:75:b5:67:4f:be:19:11:86:69:38:53:ba:e7: 2d:ea:70:97:a9:ce:2d:d6:e0:8e:7e:a1:61:a2:d0:6f:4a:0b: 41:d6:ac:80:61:af:b3:1a:54:33:43:d4:a9:6a:12:56:b2:51: be:de:b7:bb:38:6e:cf:a2:25:86:53:89:49:67:cf:30:18:ac: d2:78:56:bd:69:ac:de:1f:6f:47:ca:7b:76:88:1c:b2:bc:b7: a0:d1:49:ea:7a:06:0c:63:bb:aa:4b:e5:9e:8f:51:5a:f9:71: 2d:35:12:76:f1:80:a4:ce:a2:5a:f1:81:91:c5:7b:22:5f:16: df:66:f7:ad:d2:28:60:c4:44:55:d4:77:57:c6:3b:8a:03:e4: c9:32:7e:68:8b:a1:09:23:29:da:6e:da:a5:dd:39:4b:1a:67: cc:d5:1a:83 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuZz/UKvZSc4xIVpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk OGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMzMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNrCagn9wRlaCcyNr1keCTSDoMYjDo1yloB3 zD7S/r0FKptKk93i0SZRCc9hn/jlSHBuizD20xiCLYp9F98RI5stbKSeU9ZE+1yJ 8iDK4IeFQUUUjOVofz/c5/gDppaZRp5hgNQTlP+GZJhxzo1xJSUTAmVdZFxAkXAF 6zvmsRh9gtCl3XSIGwT6cAmgLAPEaQKU0dq4f3IZDqLD7k1cIAVvBzcXPHSj2ili xnFKAvMszKLZ5GLZv05adY7n6aCMYSEki5fsjdezHnLK2qOWTnquVpuSLMVlxQza MZdeD8PIrXUH8nh/cj8aE0KPsIqEleKxPid2ZPLu/eVvT9qP7QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEpsTzfTKrGOcBy9Busbw/ttTlftMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhhZDU2MTkzLThlMzMtNDc4Ni05 YTY0LTk0OTMzOGZjMzI1YS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhm YzMyNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXRcgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC KJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEMM+AXN+jbSdmWUUAdXhuYtMK0KOaMEgd7UN184jaTNEHJqi noH9FkB6yyxU08haqHvC98lc7u8zzIQcCVizLd15ifO9GOrbESorP5BcnWY3DGjL CtXY2hhY7OrXKWp1tWdPvhkRhmk4U7rnLepwl6nOLdbgjn6hYaLQb0oLQdasgGGv sxpUM0PUqWoSVrJRvt63uzhuz6IlhlOJSWfPMBis0nhWvWms3h9vR8p7dogcsry3 oNFJ6noGDGO7qkvlno9RWvlxLTUSdvGApM6iWvGBkcV7Il8W32b3rdIoYMREVdR3 V8Y7igPkyTJ+aIuhCSMp2m7apd05SxpnzNUagw== -----END CERTIFICATE-----Generated at Sun Oct 26 14:42:24 2025 by rpki-client