$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer File: b93a0e00-9040-44f1-b95b-7f094433ae50.cer (raw, json) Hash identifier: FYBQOadceZ8b5DKAZOoS4upMuIiIgxAAsGRkN+x32Y4= Subject key identifier: 82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A6C4E31C9988A7F4287AF3780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 13820 IP: 84.247.2.0/23 IP: 104.232.43.0/24 IP: 107.161.155.0/24 IP: 2605:b240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:31:c9:98:8a:7f:42:87:af:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=b93a0e00-9040-44f1-b95b-7f094433ae50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:2c:15:1e:3b:4a:7a:d6:52:bf:2b:c5:06: ca:d0:c9:a5:ae:9d:28:aa:60:fa:31:0b:fc:7e:7e: 7f:f3:f4:8a:a5:94:9b:09:ab:91:28:03:45:4c:5a: e9:d1:90:d5:be:84:09:4e:7d:0e:d5:17:63:af:8a: f8:b7:e9:bb:81:c9:e6:9c:a6:13:03:ed:f8:b4:61: f0:4c:cc:a3:5e:35:1f:5d:34:c8:44:c0:85:6e:3a: 2c:85:03:d3:68:c5:d0:db:b1:5e:61:13:b3:46:20: c2:e8:7f:1a:a8:eb:d6:2d:4a:84:ba:bc:0b:e3:fa: d0:51:70:33:bc:0e:11:a1:63:a6:84:83:b8:32:03: 4b:68:6f:b1:62:f6:bf:84:d3:3b:c4:bc:5d:26:46: e3:23:30:bd:50:49:74:0e:d8:db:f4:81:26:51:00: 91:59:79:1b:96:41:0a:7f:dc:fb:82:11:60:cb:b6: e9:2c:53:02:ac:fb:f5:0a:01:43:9f:bd:af:41:b2: d6:c8:93:d1:ba:a6:78:87:15:72:6a:48:fa:e3:28: c7:b3:e9:57:45:04:a4:5d:73:99:11:d5:46:f2:03: 04:5c:f9:d2:ff:8a:6b:e0:5e:05:ad:1e:1c:18:3d: ec:20:67:5d:45:64:c8:e3:20:af:a8:3e:8f:2e:6d: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 84.247.2.0/23 104.232.43.0/24 107.161.155.0/24 IPv6: 2605:b240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13820 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:62:c9:03:fa:1b:a4:3b:26:6d:09:13:e5:6b:64:fd:51:df: 4c:86:58:3c:eb:a0:2f:95:70:ff:ba:46:e7:9e:97:a2:6d:eb: 0f:0f:c7:eb:f5:67:6b:b7:6f:bb:e9:c1:26:21:42:e4:a6:f2: 05:7c:49:86:1e:17:45:e9:5f:54:27:c1:a1:2c:9a:47:da:f0: cd:26:1b:0b:60:b0:81:23:6a:fc:e7:5c:2d:0f:46:c8:b0:33: 39:ff:5c:8a:0a:eb:3f:6d:02:a4:ae:ad:ad:aa:e4:59:9e:3e: d2:c6:9a:9b:ec:84:fc:a2:e5:05:d9:45:2c:ff:da:e1:51:eb: bb:e3:d5:ef:f3:93:c9:54:0a:b7:f4:b2:87:f0:3e:f0:18:8e: 87:de:d9:f0:33:81:7a:3d:f3:e4:eb:27:de:3c:f1:5f:24:ac: 2f:79:dc:c0:bd:03:3e:1a:a3:e5:65:ea:94:16:cc:2b:c5:e9: 3e:0a:04:3c:a4:81:35:34:9f:c8:43:45:1f:7a:10:f9:4b:c6: 76:5b:b0:ff:9c:03:12:c7:aa:98:01:e3:12:c2:b5:a1:0b:55: 79:a7:55:25:88:fd:42:92:38:a9:68:fc:15:18:46:50:13:86: 35:f8:67:66:12:50:62:bc:ae:5f:4c:38:cc:11:67:99:0a:30: 16:91:f7:63 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEpsTjHJmIp/QoevN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk YjkzYTBlMDAtOTA0MC00NGYxLWI5NWItN2YwOTQ0MzNhZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjessFR47SnrWUr8rxQbK0Mmlrp0oqmD6MQv8 fn5/8/SKpZSbCauRKANFTFrp0ZDVvoQJTn0O1Rdjr4r4t+m7gcnmnKYTA+34tGHw TMyjXjUfXTTIRMCFbjoshQPTaMXQ27FeYROzRiDC6H8aqOvWLUqEurwL4/rQUXAz vA4RoWOmhIO4MgNLaG+xYva/hNM7xLxdJkbjIzC9UEl0Dtjb9IEmUQCRWXkblkEK f9z7ghFgy7bpLFMCrPv1CgFDn72vQbLWyJPRuqZ4hxVyakj64yjHs+lXRQSkXXOZ EdVG8gMEXPnS/4pr4F4FrR4cGD3sIGddRWTI4yCvqD6PLm0XtwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFIKx4VUKQnLTeMnMgnJTKNN9bRmjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i OTNhMGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5NDQzM2FlNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I5M2EwZTAwLTkwNDAtNDRmMS1i OTViLTdmMDk0NDMzYWU1MC9iOTNhMGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5NDQz M2FlNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAFU9wIDBABo6CsDBABroZswDQQCAAIwBwMFACYF skAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICNfwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA2LJA/obpDsm bQkT5Wtk/VHfTIZYPOugL5Vw/7pG556Xom3rDw/H6/Vna7dvu+nBJiFC5KbyBXxJ hh4XRelfVCfBoSyaR9rwzSYbC2CwgSNq/OdcLQ9GyLAzOf9cigrrP20CpK6trark WZ4+0saam+yE/KLlBdlFLP/a4VHru+PV7/OTyVQKt/Syh/A+8BiOh97Z8DOBej3z 5Osn3jzxXySsL3ncwL0DPhqj5WXqlBbMK8XpPgoEPKSBNTSfyENFH3oQ+UvGdluw /5wDEseqmAHjEsK1oQtVeadVJYj9QpI4qWj8FRhGUBOGNfhnZhJQYryuX0w4zBFn mQowFpH3Yw== -----END CERTIFICATE-----Generated at Sat Jul 12 00:33:46 2025 by rpki-client