$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer File: 94f0eda7-0771-41a2-8806-38174b050cc8.cer (raw, json) Hash identifier: 0vWdL/mzUHCnSNWwl0JgTpShNGYP7p130vKnAJnvdGM= Subject key identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B1699D473D632447C146F6460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Sep 2025 00:45:26 +0000 Certificate not after: Thu 09 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 32549 IP: 216.168.132.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:99:d4:73:d6:32:44:7c:14:6f:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 5 00:45:26 2025 GMT Not After : Dec 9 01:45:26 2027 GMT Subject: CN=94f0eda7-0771-41a2-8806-38174b050cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:20:b5:5e:84:e4:bd:54:a0:5c:ef:2a:09: 65:9e:91:a3:3a:61:11:be:6f:2b:60:dc:b9:eb:f9: 6d:d2:71:56:77:ac:d2:c9:1d:fd:9a:60:41:3e:68: 08:ab:c5:c4:8b:42:fc:e6:1b:6f:6a:4d:c7:f4:6a: c1:f5:b6:76:7d:60:e9:f2:ee:ff:d7:b4:4e:2a:f2: eb:84:c4:5b:3e:33:06:7f:7a:1f:e6:52:39:47:a3: 87:bc:a1:ef:b0:0a:04:a9:a2:ed:ea:f8:53:af:b1: fb:85:c7:f0:ff:a2:77:35:42:28:4e:de:dc:cc:eb: e8:4e:23:3a:fa:f1:e6:44:64:13:93:82:e7:f5:cc: f4:00:ba:b4:7a:52:05:f6:69:86:71:cb:8b:c7:8b: 69:5a:6e:b6:88:08:62:79:db:c3:15:b8:ca:77:5e: 38:75:58:ee:56:19:51:80:6a:76:1a:99:ea:83:a0: 70:44:56:18:b7:c0:fb:e9:f5:49:5f:7b:ce:30:78: b9:0b:3c:05:23:fe:97:10:ac:8e:4c:3e:e7:a5:79: e7:37:1f:21:c7:03:46:19:62:73:ba:5e:8e:a0:fb: 03:51:2c:76:52:7e:65:3c:a8:2a:6a:f1:8f:cc:af: c5:e4:ee:46:82:3c:bb:b4:e2:9d:bc:db:83:47:62: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 216.168.132.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32549 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7a:47:1f:be:89:55:c2:49:b5:db:68:a7:08:b0:b6:20:30: 25:5c:b4:38:6b:55:bf:c3:98:6b:10:0e:02:6e:47:30:e4:81: 34:a1:d4:ac:7b:13:00:8e:df:60:35:e5:83:00:b6:2a:97:e6: 54:10:e3:f9:85:59:a8:3f:b2:03:2c:3c:c4:ec:1a:c9:07:88: 66:3f:d9:b0:03:58:98:a9:ae:b0:38:4a:e1:31:d3:32:a9:f4: 05:a5:ec:10:7a:15:a8:04:90:52:fd:f7:43:85:d1:de:f3:6d: cc:ed:d1:b3:0f:32:27:fb:78:98:6e:af:03:cb:ad:1b:1a:30: 4a:64:6d:3d:07:36:13:3e:39:09:ca:bf:6c:c3:89:c4:ab:be: b6:ca:79:7c:4d:39:2e:78:3e:e3:e0:d2:12:23:96:36:42:bd: 08:3b:0d:dd:6d:de:53:05:3f:da:8b:bd:9b:b3:46:80:9a:8b: a1:f7:8a:0e:7d:05:ed:e7:64:45:02:fb:4d:5c:13:66:ae:42: 43:1f:06:c8:d9:df:70:cf:3e:92:f8:aa:e0:13:48:f5:1f:c3: 0d:9f:74:8d:0a:33:2c:64:fc:e6:e4:50:9f:6f:92:74:d0:66: 05:72:5d:29:c8:90:e7:bd:b8:33:28:8b:95:6b:23:ec:38:11: da:d0:0b:03 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEsWmdRz1jJEfBRvZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkwNTAwNDUyNloXDTI3MTIwOTAxNDUyNlowLzEtMCsGA1UEAxMk OTRmMGVkYTctMDc3MS00MWEyLTg4MDYtMzgxNzRiMDUwY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrggtV6E5L1UoFzvKgllnpGjOmERvm8rYNy5 6/lt0nFWd6zSyR39mmBBPmgIq8XEi0L85htvak3H9GrB9bZ2fWDp8u7/17ROKvLr hMRbPjMGf3of5lI5R6OHvKHvsAoEqaLt6vhTr7H7hcfw/6J3NUIoTt7czOvoTiM6 +vHmRGQTk4Ln9cz0ALq0elIF9mmGccuLx4tpWm62iAhiedvDFbjKd144dVjuVhlR gGp2Gpnqg6BwRFYYt8D76fVJX3vOMHi5CzwFI/6XEKyOTD7npXnnNx8hxwNGGWJz ul6OoPsDUSx2Un5lPKgqavGPzK/F5O5Ggjy7tOKdvNuDR2Kh5QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHQpjdvFT2uQXyEYC4X82jYnseFTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 NGYwZWRhNy0wNzcxLTQxYTItODgwNi0zODE3NGIwNTBjYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk0ZjBlZGE3LTA3NzEtNDFhMi04 ODA2LTM4MTc0YjA1MGNjOC85NGYwZWRhNy0wNzcxLTQxYTItODgwNi0zODE3NGIw NTBjYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHYqIQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fyUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAc3pHH76JVcJJtdtopwiwtiAwJVy0OGtVv8OYaxAOAm5HMOSB NKHUrHsTAI7fYDXlgwC2KpfmVBDj+YVZqD+yAyw8xOwayQeIZj/ZsANYmKmusDhK 4THTMqn0BaXsEHoVqASQUv33Q4XR3vNtzO3Rsw8yJ/t4mG6vA8utGxowSmRtPQc2 Ez45Ccq/bMOJxKu+tsp5fE05Lng+4+DSEiOWNkK9CDsN3W3eUwU/2ou9m7NGgJqL ofeKDn0F7edkRQL7TVwTZq5CQx8GyNnfcM8+kviq4BNI9R/DDZ90jQozLGT85uRQ n2+SdNBmBXJdKciQ5724MyiLlWsj7DgR2tALAw== -----END CERTIFICATE-----Generated at Wed Sep 17 14:39:15 2025 by rpki-client