$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer File: b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer (raw, json) Hash identifier: UN2DNXKhZwq8jvb7Mv8RfB/B7PYRU/3mVztN+LP7m5w= Subject key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BA4FAB0050F267EE45F70EE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Oct 2025 00:45:22 +0000 Certificate not after: Sat 29 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 29909 IP: 50.21.160.0/20 IP: 63.250.48.0/22 IP: 64.21.184.0/21 IP: 216.157.152.0/22 IP: 2607:2a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:fa:b0:05:0f:26:7e:e4:5f:70:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 26 00:45:22 2025 GMT Not After : Jan 29 01:45:22 2028 GMT Subject: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:cd:9d:a6:34:fa:25:3e:97:41:f8:b1:7f: d6:00:88:18:b6:4b:8b:f9:a7:bd:04:65:d9:ca:8b: 5e:43:90:41:8e:16:fe:78:81:1f:91:87:a2:a5:b4: dc:d8:47:89:6d:ef:34:bf:67:77:5c:25:c5:b3:d9: 06:6c:47:dd:fe:6c:d3:6f:ac:d9:db:25:75:b8:38: 4f:05:0e:31:b2:3e:02:21:58:d3:97:82:9a:4a:14: de:bd:8f:d0:58:46:52:62:7d:24:8b:4a:40:92:5f: 7a:db:25:63:38:b5:fa:ca:9c:a3:8e:16:b1:51:16: 1a:7a:23:b1:e0:59:be:cc:91:1f:e1:45:3d:a9:ff: d9:14:9e:a0:2f:d3:47:29:df:65:d0:3b:87:64:c7: ee:98:24:bc:ed:3b:42:ad:fb:44:e6:cf:f9:c8:b1: bf:d5:17:90:de:79:48:8e:8f:d3:d9:86:4d:19:2b: d8:4c:dd:1f:0b:77:54:f4:8c:6a:d8:02:be:15:b1: 27:9f:2f:9d:a1:aa:d7:fd:dd:dd:13:9f:27:55:e4: 8b:03:9f:99:3c:0b:bb:33:9f:91:73:91:3b:d9:62: 69:f7:f5:a3:d6:f1:57:79:52:be:0f:c6:84:b8:88: bb:d1:eb:43:cd:7d:b4:28:a2:4a:7e:19:e1:ac:3c: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 50.21.160.0/20 63.250.48.0/22 64.21.184.0/21 216.157.152.0/22 IPv6: 2607:2a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2a:50:30:7d:66:13:f5:f4:4f:43:ac:13:2a:fc:d6:bf:ac: f9:42:7b:ba:71:63:79:7f:19:38:cf:61:0c:fd:1f:fc:4f:e6: 07:0a:7c:48:a6:3b:18:eb:c3:8e:7b:af:ca:90:18:aa:3a:97: 69:b5:8b:ea:fc:c4:83:70:eb:2b:ae:13:c7:26:7b:42:3f:3b: 9f:b6:93:3c:00:e5:6f:a1:c3:30:b1:20:ff:5d:34:10:f5:b5: 2f:b2:4f:b4:83:69:c1:59:2a:61:84:a2:b0:ef:ac:73:06:8d: e6:a0:70:45:41:16:84:4c:1c:99:e1:38:e5:b2:12:a9:35:71: 28:a1:8d:3b:a4:ea:02:72:a7:b7:63:c3:f1:db:7a:9b:c0:58: fc:5d:be:eb:fb:93:ec:3a:9e:f1:bf:f1:53:80:16:ea:82:b8: b2:46:5b:fb:22:fd:5c:30:18:b9:83:40:03:55:7f:eb:0b:58: 83:f1:68:4e:7b:1d:92:42:47:cf:de:09:aa:20:01:b7:f9:c3: d8:3b:fa:9c:d3:bd:81:1b:f1:bd:3c:9e:11:0f:1b:4f:ac:cd: 90:bd:ab:8f:91:58:87:3e:09:0a:6e:17:ec:1a:e4:4b:b3:14: bb:6b:8c:3a:b7:3d:80:0d:0e:93:76:e3:31:da:58:91:bb:5e: 7e:5d:57:8c -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEuk+rAFDyZ+5F9w7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAyNjAwNDUyMloXDTI4MDEyOTAxNDUyMlowLzEtMCsGA1UEAxMk YjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcLNnaY0+iU+l0H4sX/WAIgYtkuL+ae9BGXZ yoteQ5BBjhb+eIEfkYeipbTc2EeJbe80v2d3XCXFs9kGbEfd/mzTb6zZ2yV1uDhP BQ4xsj4CIVjTl4KaShTevY/QWEZSYn0ki0pAkl962yVjOLX6ypyjjhaxURYaeiOx 4Fm+zJEf4UU9qf/ZFJ6gL9NHKd9l0DuHZMfumCS87TtCrftE5s/5yLG/1ReQ3nlI jo/T2YZNGSvYTN0fC3dU9Ixq2AK+FbEnny+doarX/d3dE58nVeSLA5+ZPAu7M5+R c5E72WJp9/Wj1vFXeVK+D8aEuIi70etDzX20KKJKfhnhrDx9gwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFLtElF8Bck3uuSK46tAuogduTiM7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IwYzQzYjc1LTEwNmYtNDllNy1i ZjNhLTRhZWI5NDU2NmU5MC9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1 NjZlOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAQyFaADBAI/+jADBANAFbgDBALYnZgwDQQCAAIw BwMFACYHKgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdNUwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfCpQ MH1mE/X0T0OsEyr81r+s+UJ7unFjeX8ZOM9hDP0f/E/mBwp8SKY7GOvDjnuvypAY qjqXabWL6vzEg3DrK64TxyZ7Qj87n7aTPADlb6HDMLEg/100EPW1L7JPtINpwVkq YYSisO+scwaN5qBwRUEWhEwcmeE45bISqTVxKKGNO6TqAnKnt2PD8dt6m8BY/F2+ 6/uT7Dqe8b/xU4AW6oK4skZb+yL9XDAYuYNAA1V/6wtYg/FoTnsdkkJHz94JqiAB t/nD2Dv6nNO9gRvxvTyeEQ8bT6zNkL2rj5FYhz4JCm4X7BrkS7MUu2uMOrc9gA0O k3bjMdpYkbtefl1XjA== -----END CERTIFICATE-----Generated at Mon Nov 3 13:50:22 2025 by rpki-client