$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer File: 8cf8807c-494e-41ab-842c-c0672d6283b1.cer (raw, json) Hash identifier: eA9l4t12SOuFq5/b2r7x7p8q/w2HGBAaZPtBH+dDlNs= Subject key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B48DA21EACBD31CA2607B9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Sep 2025 00:45:25 +0000 Certificate not after: Mon 27 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 22251 IP: 208.68.24.0/22 IP: 2604:5ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:da:21:ea:cb:d3:1c:a2:60:7b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 23 00:45:25 2025 GMT Not After : Dec 27 01:45:25 2027 GMT Subject: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:03:ab:bb:c3:a0:00:f3:20:61:2b:a3:b1: 94:90:2b:a5:44:b9:36:2d:fc:db:38:59:2a:77:ca: aa:9a:f6:9d:59:75:7c:88:81:69:39:29:0e:b0:36: 56:8c:99:3b:e4:86:ef:15:33:ff:59:23:83:39:b9: 47:06:f4:46:2d:fe:ac:f1:8e:49:ce:43:6f:fc:c9: ed:8c:83:83:c1:87:ab:be:90:21:d9:c5:fe:50:8b: bf:14:91:0f:a3:76:c4:47:b0:b3:1b:56:ca:d5:bd: 19:c0:23:e1:06:52:55:ce:da:99:81:6a:3a:8d:9f: 15:9c:ea:f9:df:24:36:e8:b4:49:49:cd:34:22:f5: e0:82:f8:16:15:99:3b:db:f9:07:b3:2c:c9:d3:6b: e1:94:d3:e7:67:ad:e2:b4:a2:68:0b:2a:50:66:8b: 42:8d:9d:29:e3:e1:18:a1:47:50:4b:a2:e2:0d:69: b5:88:4c:ba:4f:d1:f1:db:35:ef:74:3f:20:92:b8: e0:1b:9f:e4:a9:53:4f:ad:79:00:4e:28:1a:8f:90: c4:aa:0a:4d:1b:62:39:f9:2c:ba:e7:c1:33:af:ac: 84:39:22:1f:b0:b6:82:fc:21:a9:7e:27:8a:1d:c8: 59:00:2d:03:f2:da:23:0a:4a:a2:24:a0:16:e1:f9: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 IPv6: 2604:5ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22251 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7b:c0:6e:31:df:00:0c:2d:f0:a3:e2:bc:e6:4c:85:32:f8: 82:e9:c1:30:87:6c:0d:50:50:bb:23:a6:b8:77:e7:6b:0b:2b: 1b:9f:2a:27:8f:d8:a0:22:78:58:c2:7a:58:b9:78:c4:db:17: 28:2a:1e:99:d9:b3:16:41:7d:0b:87:62:7a:aa:82:bd:d6:50: 65:79:6b:14:5d:fc:30:74:90:64:8a:23:86:f6:85:3a:4d:93: a1:3c:ff:62:d8:da:d4:c7:da:7f:21:d2:61:15:0a:63:74:b6: af:12:cf:84:50:d6:c6:35:9c:e8:f8:32:67:b2:09:5b:19:a8: e1:a8:84:30:c5:b6:46:e8:6c:b8:dd:aa:40:c6:b4:b3:6d:63: 48:01:81:a2:10:a1:02:7d:d8:9c:da:2b:70:f0:ca:53:78:f2: 25:37:8a:2b:35:c5:00:d2:0b:fe:c5:90:1a:1c:67:4d:16:9d: e5:26:77:fe:a0:20:db:90:46:1c:bc:6c:79:3c:19:c2:87:0d: 42:9c:02:bc:43:60:f4:b9:2e:9b:88:22:b6:b4:f1:b3:35:f1: e4:32:51:ad:8e:4d:d8:37:7b:be:70:7b:93:aa:9a:e4:d1:23: 0d:de:be:4d:3f:8c:35:e3:30:e9:72:88:e8:eb:67:15:8e:f4: 00:2c:fc:ba -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEtI2iHqy9McomB7m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyMzAwNDUyNVoXDTI3MTIyNzAxNDUyNVowLzEtMCsGA1UEAxMk OGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlQDq7vDoADzIGEro7GUkCulRLk2LfzbOFkq d8qqmvadWXV8iIFpOSkOsDZWjJk75IbvFTP/WSODOblHBvRGLf6s8Y5JzkNv/Mnt jIODwYervpAh2cX+UIu/FJEPo3bER7CzG1bK1b0ZwCPhBlJVztqZgWo6jZ8VnOr5 3yQ26LRJSc00IvXggvgWFZk72/kHsyzJ02vhlNPnZ63itKJoCypQZotCjZ0p4+EY oUdQS6LiDWm1iEy6T9Hx2zXvdD8gkrjgG5/kqVNPrXkATigaj5DEqgpNG2I5+Sy6 58Ezr6yEOSIfsLaC/CGpfieKHchZAC0D8tojCkqiJKAW4fk1SwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJkitMJTchfhPQUybk3uY2h0UYSYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhjZjg4MDdjLTQ5NGUtNDFhYi04 NDJjLWMwNjcyZDYyODNiMS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2 MjgzYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQRBgwDQQCAAIwBwMFACYEWsAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVuswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAenvAbjHfAAwt8KPivOZMhTL4gunB MIdsDVBQuyOmuHfnawsrG58qJ4/YoCJ4WMJ6WLl4xNsXKCoemdmzFkF9C4dieqqC vdZQZXlrFF38MHSQZIojhvaFOk2ToTz/Ytja1MfafyHSYRUKY3S2rxLPhFDWxjWc 6PgyZ7IJWxmo4aiEMMW2RuhsuN2qQMa0s21jSAGBohChAn3YnNorcPDKU3jyJTeK KzXFANIL/sWQGhxnTRad5SZ3/qAg25BGHLxseTwZwocNQpwCvENg9Lkum4gitrTx szXx5DJRrY5N2Dd7vnB7k6qa5NEjDd6+TT+MNeMw6XKI6OtnFY70ACz8ug== -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:22 2025 by rpki-client