$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer File: e553e5ec-0211-480d-9476-86db3dbe2182.cer (raw, json) Hash identifier: ifMLa+B8balFE2TNBYGz4PBBAByUUWXwwKY4lXhqPr0= Subject key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B2A249C5A2FF7EC62ED5B9E10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Sep 2025 00:45:25 +0000 Certificate not after: Thu 16 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 192.159.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:24:9c:5a:2f:f7:ec:62:ed:5b:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 12 00:45:25 2025 GMT Not After : Dec 16 01:45:25 2027 GMT Subject: CN=e553e5ec-0211-480d-9476-86db3dbe2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:0c:cc:d3:76:92:65:97:26:4e:60:78:88: e2:1f:6c:5a:54:7a:31:ca:62:18:d7:de:ea:d4:9b: f1:97:f9:0a:ef:95:ce:3b:e5:58:73:23:ae:53:df: 3f:b2:d5:01:c2:e9:4f:7c:aa:9c:47:5f:9b:79:c6: 5e:bf:22:18:67:2a:e4:0a:54:6a:ae:1b:5c:3c:53: 01:d8:b7:cc:4a:26:e9:fa:17:70:75:e1:70:b6:f2: 36:09:29:9c:16:be:34:ac:32:da:75:1c:4c:c2:f6: 32:6c:72:de:6c:15:f6:30:4e:0a:91:46:31:c4:e0: a5:cd:96:01:31:3f:61:cc:d9:2f:ca:05:da:fc:15: 03:aa:41:87:06:5d:73:d6:2e:b7:bb:3f:88:1f:49: af:8d:f5:47:a9:1f:62:47:ca:c4:49:e2:9b:d3:8a: ba:3c:4d:00:af:d1:67:b1:e0:6e:11:c7:8f:e1:c3: af:fd:f3:43:f2:df:26:90:d3:ac:a5:9c:3c:94:5b: f4:c3:9d:ed:77:3e:b2:31:01:56:30:ec:f0:9a:2e: 42:67:49:e3:ea:f4:d0:69:a8:e9:86:2b:1c:ca:ba: 60:5b:63:20:d5:b2:86:80:b5:23:a6:68:74:92:5d: 07:a1:8d:4e:bf:0a:34:26:d0:49:12:65:19:14:b6: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.159.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:18:98:65:a9:d3:a9:41:cd:a7:38:81:45:4c:5e:59:dc:cf: 3a:8b:c7:2d:cf:8a:65:b9:ce:05:54:59:e5:27:62:0d:b6:0a: af:2b:1a:91:96:b0:70:66:b6:97:a4:75:21:b1:ef:21:d0:0e: 71:50:b8:7c:42:f3:2d:15:71:7a:1f:de:81:a6:d0:5f:fd:b9: 07:a7:5d:ab:3c:64:b1:42:c8:16:58:5b:52:7c:31:2a:e4:9a: 6c:90:d1:ca:75:ee:1e:ba:e7:31:78:17:c0:48:e9:9a:f8:35: f2:cb:6d:c1:17:d6:0d:5f:00:cb:49:cf:b6:db:fc:14:47:91: f5:f2:84:68:5a:37:18:85:e9:40:2a:d0:5c:31:6e:c9:16:f3: a9:f1:c1:5c:3d:39:9b:04:8d:fa:e3:f8:03:11:44:5f:ad:61: e3:ea:61:37:63:1b:88:dc:2e:49:77:9f:bb:f0:2a:27:86:e5: dd:e9:9b:26:09:ae:6b:12:0c:68:5f:94:45:31:d4:de:c2:bf: 12:00:e8:32:e7:52:dd:a1:25:af:81:73:1d:05:df:b8:da:d2: 0e:34:05:14:fc:5c:fd:fd:4d:7f:ab:11:0a:24:5b:34:2c:0e: b5:94:3e:d7:5e:22:46:9d:32:3d:6c:ba:72:e6:ca:2b:f5:e4: e6:4c:83:65 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsqJJxaL/fsYu1bnhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkxMjAwNDUyNVoXDTI3MTIxNjAxNDUyNVowLzEtMCsGA1UEAxMk ZTU1M2U1ZWMtMDIxMS00ODBkLTk0NzYtODZkYjNkYmUyMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDIMzNN2kmWXJk5geIjiH2xaVHoxymIY197q 1Jvxl/kK75XOO+VYcyOuU98/stUBwulPfKqcR1+becZevyIYZyrkClRqrhtcPFMB 2LfMSibp+hdwdeFwtvI2CSmcFr40rDLadRxMwvYybHLebBX2ME4KkUYxxOClzZYB MT9hzNkvygXa/BUDqkGHBl1z1i63uz+IH0mvjfVHqR9iR8rESeKb04q6PE0Ar9Fn seBuEceP4cOv/fND8t8mkNOspZw8lFv0w53tdz6yMQFWMOzwmi5CZ0nj6vTQaajp hiscyrpgW2Mg1bKGgLUjpmh0kl0HoY1Ovwo0JtBJEmUZFLZJ1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHQTtARnZPWgsHIQGzW/l72yJUwlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2RiZTIxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U1NTNlNWVjLTAyMTEtNDgwZC05 NDc2LTg2ZGIzZGJlMjE4Mi9lNTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2Ri ZTIxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALAn3wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEBiYZanTqUHNpziBRUxe WdzPOovHLc+KZbnOBVRZ5SdiDbYKrysakZawcGa2l6R1IbHvIdAOcVC4fELzLRVx eh/egabQX/25B6ddqzxksULIFlhbUnwxKuSabJDRynXuHrrnMXgXwEjpmvg18stt wRfWDV8Ay0nPttv8FEeR9fKEaFo3GIXpQCrQXDFuyRbzqfHBXD05mwSN+uP4AxFE X61h4+phN2MbiNwuSXefu/AqJ4bl3embJgmuaxIMaF+URTHU3sK/EgDoMudS3aEl r4FzHQXfuNrSDjQFFPxc/f1Nf6sRCiRbNCwOtZQ+114iRp0yPWy6cubKK/Xk5kyD ZQ== -----END CERTIFICATE-----Generated at Tue Sep 16 21:22:39 2025 by rpki-client