$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer File: eb7b8561-8852-40be-b540-5a3c275d2aeb.cer (raw, json) Hash identifier: 16zg4fErSFKq8AryPjySBKcI/Z/C2Qo2ZBzyADBKI/M= Subject key identifier: 6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B13CF224FE50486565F956400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 909 IP: 130.250.107.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:22:4f:e5:04:86:56:5f:95:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=eb7b8561-8852-40be-b540-5a3c275d2aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:17:85:ef:9b:4b:5b:99:71:72:03:d3:0f:26: cd:f6:dc:e6:82:c2:6f:54:11:92:9c:dd:ae:d0:28: 0c:87:d1:95:2a:77:35:57:54:3b:b3:67:f8:48:aa: bc:18:24:88:31:7c:3a:61:d3:42:e0:04:53:f0:e5: 63:34:6d:da:cb:0c:8f:35:d4:1e:2e:d0:67:e9:86: fc:6c:b5:49:69:d1:27:f7:1a:cd:07:31:5e:9a:d6: b7:f8:df:57:9c:e6:2e:32:25:7d:5e:e2:bb:25:c4: a9:fa:a8:78:f5:a3:22:d5:a0:2d:03:e8:12:c8:83: 7e:ac:e3:3f:75:89:e3:08:82:81:e4:ac:b0:f5:3f: 5a:59:e0:7f:1e:45:a8:6c:a8:f1:ae:40:f8:4d:dc: c6:c1:27:a9:94:3e:0d:ce:db:ca:b1:ec:f9:0b:a1: 80:99:40:8d:ec:0d:50:cb:11:90:aa:bd:f8:e6:ea: 7c:4b:7a:30:eb:e9:5e:db:8e:70:fb:3e:19:f0:59: 4f:eb:db:04:f0:bb:c9:d7:ab:cf:6e:9c:44:41:1e: 75:08:e1:2b:99:42:4c:b2:0c:32:11:32:56:34:f1: 99:f5:06:c7:ef:16:5c:f6:e6:9b:f6:c7:b3:3c:ad: 2b:cd:12:b7:98:6c:d5:d6:80:42:6e:bd:b6:6b:27: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 130.250.107.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b5:c1:cc:b8:a2:0a:e0:0a:02:af:88:75:33:30:f6:df:be: ef:8a:a6:93:61:ec:6b:c0:8a:8b:27:1e:83:d9:b2:82:13:a8: b0:bd:59:e5:ab:ab:a6:11:91:1f:f5:33:c0:dd:3e:12:8f:b7: ab:10:13:72:48:85:5e:e1:d3:a7:35:24:63:22:d4:35:a3:f5: 54:e1:9a:64:04:1c:7f:98:11:b0:9f:48:88:bc:d8:64:0a:c2: 7a:76:46:5f:d7:cb:5a:e1:e4:6b:c5:61:31:9d:10:95:b7:c8: b1:e2:23:a7:02:6f:52:4c:67:c6:56:9c:32:9d:0c:12:b5:63: fc:36:21:d0:b8:70:76:c0:1d:8a:26:e9:b7:e8:34:41:a4:63: 53:6a:7e:33:ef:fd:f7:b0:3a:3c:39:f6:89:26:92:70:3f:83: d8:3d:8b:33:28:fc:19:7a:3b:66:15:ba:71:60:fe:b4:68:9e: 79:96:12:09:8e:12:1f:4d:19:cd:95:72:a8:73:d4:12:85:ed: 0f:7a:53:d5:1d:ad:f3:18:54:38:fa:c4:31:75:62:e2:fe:e1: ba:e4:ce:c1:d2:9b:ff:76:bc:50:1c:20:29:d0:1b:d8:47:d4: f3:95:48:f0:75:f5:4a:6d:8b:a9:14:cb:1f:7a:b1:ee:5a:0e: 96:33:5d:4d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEsTzyJP5QSGVl+VZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk ZWI3Yjg1NjEtODg1Mi00MGJlLWI1NDAtNWEzYzI3NWQyYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBeF75tLW5lxcgPTDybN9tzmgsJvVBGSnN2u 0CgMh9GVKnc1V1Q7s2f4SKq8GCSIMXw6YdNC4ART8OVjNG3aywyPNdQeLtBn6Yb8 bLVJadEn9xrNBzFemta3+N9XnOYuMiV9XuK7JcSp+qh49aMi1aAtA+gSyIN+rOM/ dYnjCIKB5Kyw9T9aWeB/HkWobKjxrkD4TdzGwSeplD4NztvKsez5C6GAmUCN7A1Q yxGQqr345up8S3ow6+le245w+z4Z8FlP69sE8LvJ16vPbpxEQR51COErmUJMsgwy ETJWNPGZ9QbH7xZc9uab9sezPK0rzRK3mGzV1oBCbr22aye/nwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFG9k0+J3VQi2TF/hey/DPoS2DQzBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l YjdiODU2MS04ODUyLTQwYmUtYjU0MC01YTNjMjc1ZDJhZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2ViN2I4NTYxLTg4NTItNDBiZS1i NTQwLTVhM2MyNzVkMmFlYi9lYjdiODU2MS04ODUyLTQwYmUtYjU0MC01YTNjMjc1 ZDJhZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACC+mswGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC A40wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAY7XBzLiiCuAKAq+IdTMw9t++74qmk2Hsa8CKiyceg9myghOo sL1Z5aurphGRH/UzwN0+Eo+3qxATckiFXuHTpzUkYyLUNaP1VOGaZAQcf5gRsJ9I iLzYZArCenZGX9fLWuHka8VhMZ0QlbfIseIjpwJvUkxnxlacMp0MErVj/DYh0Lhw dsAdiibpt+g0QaRjU2p+M+/997A6PDn2iSaScD+D2D2LMyj8GXo7ZhW6cWD+tGie eZYSCY4SH00ZzZVyqHPUEoXtD3pT1R2t8xhUOPrEMXVi4v7huuTOwdKb/3a8UBwg KdAb2EfU85VI8HX1Sm2LqRTLH3qx7loOljNdTQ== -----END CERTIFICATE-----Generated at Fri Sep 19 09:22:34 2025 by rpki-client