$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer File: 06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer (raw, json) Hash identifier: N0E3rBwVkvn/DCuF7Vug3GV2YT9tjLb9YZFQjzVGliI= Subject key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B77D71C19F590AF4FE13FD700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 20:42:19 +0000 Certificate not after: Sun 07 Mar 2027 13:45:31 +0000 Subordinate resources: AS: 46109 IP: 23.156.248.0/23 IP: 142.249.45.0/24 IP: 2602:fa64::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:d7:1c:19:f5:90:af:4f:e1:3f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 9 20:42:19 2025 GMT Not After : Mar 7 13:45:31 2027 GMT Subject: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:ce:e3:01:13:27:c8:d1:3c:24:46:0a:f0: 49:66:3d:c4:f1:b0:8a:bb:71:5a:10:e9:06:9f:69: de:ce:db:0b:d7:35:d2:3a:e3:a8:a5:b2:77:30:e6: df:a4:41:59:be:15:bf:8d:5b:b5:7c:87:8e:44:49: 79:fc:30:22:96:01:a3:4e:0f:c8:c9:54:b6:88:78: 85:03:d5:d7:bc:7a:c0:14:c9:65:33:82:5c:03:59: 39:ac:a7:5b:80:75:ee:bc:05:95:5d:e6:01:85:6f: d8:56:81:93:4c:6b:f0:0d:1a:ee:ea:bf:a3:df:90: ad:d1:f2:23:6f:e6:a5:53:bc:3a:92:b0:3e:b5:29: 53:c5:69:bc:ef:7f:20:c4:74:5c:b2:be:38:01:4a: f9:d5:c2:92:06:cb:87:2f:e1:5f:35:e7:98:2b:fe: e8:32:09:4e:66:fc:6e:8b:f4:8f:f3:2e:e2:c4:b1: 1f:e0:03:5d:fa:0c:c1:cb:44:14:24:ec:36:73:13: 4d:5a:25:5d:4b:3a:8f:db:a0:7f:19:d8:45:0e:0a: 37:31:d3:b0:f9:24:d9:2c:ad:b1:82:0a:18:bb:10: 90:68:97:59:74:e6:b5:54:d9:26:29:a6:e0:ba:8c: 08:7e:04:c1:08:73:eb:66:1c:6a:09:d9:fb:b5:cc: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.156.248.0/23 142.249.45.0/24 IPv6: 2602:fa64::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46109 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:05:10:71:8d:fe:4d:18:f7:de:3a:4c:67:66:f9:45:9b:e6: 8c:bd:f0:54:08:c4:59:06:40:f8:86:ac:6c:42:02:2b:59:82: 17:ec:a4:35:2f:b7:e1:cf:55:8f:48:68:99:ec:ba:99:6a:ba: ca:42:02:a7:f3:b0:c1:d0:fd:eb:6b:76:5b:88:ef:e8:ae:4c: 45:2f:f1:ae:15:4b:6a:77:bd:db:4d:8e:83:00:b7:99:0a:24: bd:5e:47:d0:0b:9e:45:bf:2a:15:dc:d8:47:79:7d:89:33:85: 2d:f8:ea:1e:ab:86:c2:f2:65:1a:79:b6:45:9b:64:b8:c0:f4: a8:64:d3:e9:f6:d1:1c:a0:9f:b2:bb:95:a2:7a:60:0d:82:61: e9:ff:6d:49:21:ec:a8:3a:98:c4:0e:dd:88:bf:ca:37:1c:24: 58:cd:52:fa:cc:19:01:54:5f:98:25:84:73:a9:ba:f9:0f:ff: 85:bf:0e:36:64:ed:7c:72:4e:34:4e:b8:19:96:2d:e1:f4:7e: 2e:75:03:3f:42:08:e8:39:cc:60:4f:f4:36:a7:ce:a7:c5:46: 35:79:5e:e2:f2:8d:0e:f2:14:4f:39:fe:d2:22:47:83:7e:cb: ff:db:36:c1:46:4d:81:5f:5a:85:d6:f2:cf:46:ef:c1:59:93: 8b:7e:02:06 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt31xwZ9ZCvT+E/1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAwOTIwNDIxOVoXDTI3MDMwNzEzNDUzMVowLzEtMCsGA1UEAxMk MDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQwOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQrO4wETJ8jRPCRGCvBJZj3E8bCKu3FaEOkG n2neztsL1zXSOuOopbJ3MObfpEFZvhW/jVu1fIeOREl5/DAilgGjTg/IyVS2iHiF A9XXvHrAFMllM4JcA1k5rKdbgHXuvAWVXeYBhW/YVoGTTGvwDRru6r+j35Ct0fIj b+alU7w6krA+tSlTxWm8738gxHRcsr44AUr51cKSBsuHL+FfNeeYK/7oMglOZvxu i/SP8y7ixLEf4ANd+gzBy0QUJOw2cxNNWiVdSzqP26B/GdhFDgo3MdOw+STZLK2x ggoYuxCQaJdZdOa1VNkmKabguowIfgTBCHPrZhxqCdn7tcx1RQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAauNpuiIgxXBTY/oL3g5f3z8GjaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w NmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzA2ZjQzOGQyLTQ3MTctNDJjMC1i Y2E1LTliM2EyY2RkMDllZC8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNk ZDA5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXnPgDBACO+S0wDgQCAAIwCAMGACYC+mQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC0HTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMBRBxjf5NGPfeOkxn ZvlFm+aMvfBUCMRZBkD4hqxsQgIrWYIX7KQ1L7fhz1WPSGiZ7LqZarrKQgKn87DB 0P3ra3ZbiO/orkxFL/GuFUtqd73bTY6DALeZCiS9XkfQC55FvyoV3NhHeX2JM4Ut +Ooeq4bC8mUaebZFm2S4wPSoZNPp9tEcoJ+yu5WiemANgmHp/21JIeyoOpjEDt2I v8o3HCRYzVL6zBkBVF+YJYRzqbr5D/+Fvw42ZO18ck40TrgZli3h9H4udQM/Qgjo OcxgT/Q2p86nxUY1eV7i8o0O8hRPOf7SIkeDfsv/2zbBRk2BX1qF1vLPRu/BWZOL fgIG -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:01 2025 by rpki-client