$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer File: c3a36226-716b-451a-a34c-4a9038599291.cer (raw, json) Hash identifier: Dm1D6lwn7nC96tq0uhZLluC+cbBASeXbojFSBA5Vb5k= Subject key identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849B6D7B7B38A807F2633D7F800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 400516 IP: 66.220.37.0/24 IP: 74.80.195.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b7:b3:8a:80:7f:26:33:d7:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=c3a36226-716b-451a-a34c-4a9038599291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:21:dc:95:99:7e:90:aa:80:9b:fe:52:b7: 1c:97:f1:31:53:48:7f:c4:d8:c1:e5:65:b7:4d:41: 40:da:ca:9e:79:58:13:0b:33:2e:24:fd:f3:91:1f: ba:3a:10:6e:d2:8e:e3:7e:13:89:7b:4a:a1:07:27: 07:66:45:36:0c:14:f9:62:32:b4:9b:07:48:4a:60: 37:4a:07:5e:0b:f8:60:d8:a3:df:92:a6:42:37:93: 41:4c:5e:1c:c5:41:a5:20:a8:14:e5:ae:d0:aa:d3: a5:e7:f1:91:09:a8:ff:a1:fd:fe:13:e0:77:e8:cf: 1f:e3:38:9f:ae:cd:d7:bc:a7:8a:3b:2e:34:6a:be: 49:7d:74:22:63:8a:74:5c:c1:12:f2:ea:66:a5:c7: b4:f7:9e:23:6e:40:8d:31:fb:f7:6b:72:f3:c4:c0: ec:ee:6c:d3:2f:bf:54:a1:e2:4c:3e:3a:76:96:3d: 8a:32:ae:c6:e3:c6:f2:5f:c3:85:a4:f5:76:5c:6b: 9c:2c:00:37:57:13:73:ae:95:f2:97:85:3a:c3:2e: d4:51:60:a1:1a:af:73:71:57:7a:9f:69:ef:ae:7d: 37:3f:46:04:1e:65:ec:5e:95:79:72:3c:a8:4a:1b: 42:50:f8:35:e5:ff:d9:b3:04:e3:2c:b2:38:b1:d1: 30:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.220.37.0/24 74.80.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400516 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:95:af:15:05:70:db:2a:84:e7:05:b9:82:b2:89:34:23:85: 28:07:7d:35:d1:2c:76:88:11:99:c0:5a:1e:78:ea:e6:48:0f: 24:df:7c:19:02:ec:0c:ca:95:41:4c:6e:88:e8:51:d1:7d:35: c2:8b:d9:bb:f4:52:a1:9f:c0:1e:3e:4a:89:95:77:7c:31:38: 2d:8b:d0:c0:e2:db:5d:89:8c:b4:cb:3a:c6:3a:d3:90:fb:29: 7a:ff:aa:a2:a9:9f:02:3d:c3:9d:e9:17:67:21:44:21:f7:37: a8:3f:29:e3:2e:28:a6:fe:c0:af:19:95:c7:24:16:d9:c0:78: 49:7d:79:01:60:f6:54:41:00:d7:70:27:3b:93:6c:48:1c:43: 96:51:81:c0:54:f4:d9:f4:55:a5:48:df:44:dc:91:80:b1:dd: be:48:8a:db:d5:38:7b:9d:64:91:d1:7f:50:d1:4e:0d:b2:92: 6d:bb:7d:59:f7:67:4b:20:6f:a5:6d:5e:3c:86:3d:8f:4f:2e: bc:fd:07:df:ba:e3:31:9b:0a:73:f8:78:f2:0b:b0:69:f3:72: 6b:38:b9:84:e0:d1:a1:2e:ad:10:47:fa:ae:e5:40:91:49:a3: 90:62:8a:98:d3:7a:35:ce:6e:80:1c:fd:31:46:a4:d8:43:35: 2f:ec:51:58 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEm217ezioB/JjPX+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk YzNhMzYyMjYtNzE2Yi00NTFhLWEzNGMtNGE5MDM4NTk5MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDYh3JWZfpCqgJv+Urccl/ExU0h/xNjB5WW3 TUFA2sqeeVgTCzMuJP3zkR+6OhBu0o7jfhOJe0qhBycHZkU2DBT5YjK0mwdISmA3 SgdeC/hg2KPfkqZCN5NBTF4cxUGlIKgU5a7QqtOl5/GRCaj/of3+E+B36M8f4zif rs3XvKeKOy40ar5JfXQiY4p0XMES8upmpce0954jbkCNMfv3a3LzxMDs7mzTL79U oeJMPjp2lj2KMq7G48byX8OFpPV2XGucLAA3VxNzrpXyl4U6wy7UUWChGq9zcVd6 n2nvrn03P0YEHmXsXpV5cjyoShtCUPg15f/ZswTjLLI4sdEwbwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPeSKDnl1JU5lwy4shSQl2Up8ZLQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j M2EzNjIyNi03MTZiLTQ1MWEtYTM0Yy00YTkwMzg1OTkyOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MzYTM2MjI2LTcxNmItNDUxYS1h MzRjLTRhOTAzODU5OTI5MS9jM2EzNjIyNi03MTZiLTQ1MWEtYTM0Yy00YTkwMzg1 OTkyOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABC3CUDBABKUMMwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhyEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGaVrxUFcNsqhOcFuYKyiTQjhSgHfTXRLHaIEZnA Wh546uZIDyTffBkC7AzKlUFMbojoUdF9NcKL2bv0UqGfwB4+SomVd3wxOC2L0MDi 212JjLTLOsY605D7KXr/qqKpnwI9w53pF2chRCH3N6g/KeMuKKb+wK8ZlcckFtnA eEl9eQFg9lRBANdwJzuTbEgcQ5ZRgcBU9Nn0VaVI30TckYCx3b5IitvVOHudZJHR f1DRTg2ykm27fVn3Z0sgb6VtXjyGPY9PLrz9B9+64zGbCnP4ePILsGnzcms4uYTg 0aEurRBH+q7lQJFJo5BiipjTejXOboAc/TFGpNhDNS/sUVg= -----END CERTIFICATE-----Generated at Thu Oct 30 20:58:48 2025 by rpki-client