$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer File: 12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer (raw, json) Hash identifier: 5mknX4N3Ky1gbf/WgFYL9UU8k6tcuCLjOUyLNWRM+1Q= Subject key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B74B49650F39B2B2655A6B700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 17:45:20 +0000 Certificate not after: Sat 18 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 397041 IP: 23.160.96.0/23 IP: 64.112.120.0/22 IP: 130.12.152.0/22 IP: 134.195.224.0/22 IP: 161.199.216.0/24 IP: 209.59.232.0/23 IP: 2604:f740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:b4:96:50:f3:9b:2b:26:55:a6:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 17:45:20 2025 GMT Not After : Dec 18 01:45:25 2027 GMT Subject: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:1a:01:6e:bc:22:78:68:f2:f9:da:ae:c9: 5c:42:6e:fc:2a:06:f4:7d:56:36:b9:88:68:24:e2: a6:3f:6e:a6:ac:55:50:17:25:be:e4:01:00:5c:d6: 94:9e:83:65:0c:eb:c4:ab:ac:2d:dc:2e:5b:3a:96: da:e7:6d:a1:b0:a9:7e:42:69:cc:a9:c1:ba:89:bb: 44:44:a9:f3:cf:ec:55:6e:3b:a3:11:e3:99:43:e0: d5:3b:29:27:4b:2f:66:c8:9d:7c:1a:06:79:bd:0a: 23:cb:b3:2d:59:a0:56:1c:e9:ac:13:75:06:33:a9: 57:8e:a5:2c:09:38:ee:cd:90:72:21:81:fa:a5:07: 4a:32:e4:e3:b1:9a:47:31:25:45:ea:ef:57:56:0a: 0f:08:90:62:8a:8d:d1:57:aa:69:42:08:7d:84:3c: a9:d7:9e:e5:12:ec:4b:fb:f7:4b:f0:3e:ca:d0:b7: 7d:75:1d:3e:05:33:f5:d9:82:5c:39:93:a4:ea:ce: 80:7a:b3:1e:16:4b:64:0d:3c:8f:3b:0b:44:5e:ae: 13:8d:53:a4:de:b5:9a:4d:6d:64:cd:35:e4:a6:5b: 73:86:96:91:bd:f9:54:50:18:45:71:ce:24:ea:b1: c3:c7:f2:b1:69:c6:ff:bd:b5:bb:c8:c0:f6:03:15: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.160.96.0/23 64.112.120.0/22 130.12.152.0/22 134.195.224.0/22 161.199.216.0/24 209.59.232.0/23 IPv6: 2604:f740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:e2:90:d7:36:80:55:9d:cb:32:da:61:9c:0d:08:31:8f: 7f:98:39:1d:d3:5e:58:bb:9c:09:ef:3e:c5:ae:00:b2:ea:f1: a4:ce:26:0d:90:32:c5:6c:e0:55:84:e7:04:75:01:e9:a7:14: d6:c4:63:53:11:54:d6:84:85:aa:90:a4:61:cc:51:06:e8:98: 6f:a1:ea:19:e9:47:a2:58:37:36:b7:cb:3a:83:51:51:2d:1e: fe:cd:3b:2d:9c:48:74:22:47:13:8f:cf:7c:b6:dd:bb:89:6a: d3:d9:f5:cc:7b:5a:58:76:45:80:ce:6b:8c:02:94:3e:98:bf: 03:48:b5:9a:d1:09:43:62:7c:ac:34:b3:e8:cb:bf:8e:7a:16: e6:7c:02:ea:9e:fa:2f:a1:fa:e0:53:e6:1b:c8:75:bc:14:f7: 7c:41:ca:96:85:61:21:43:57:70:fd:e9:57:b9:d4:59:00:da: dd:24:e9:fa:d9:aa:dc:96:ae:0f:a7:b6:79:a5:29:d1:96:b4: 3d:8a:2b:01:4b:c7:a5:75:98:5b:21:38:40:18:9a:7a:c1:17: 82:8f:8c:0e:68:1a:1f:b0:6e:70:bd:63:ff:dc:ae:cb:20:93: 39:a8:13:5f:32:96:82:f6:a8:e2:89:0d:81:80:33:9c:a0:68: ca:f9:36:78 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEt0tJZQ85srJlWmtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODE3NDUyMFoXDTI3MTIxODAxNDUyNVowLzEtMCsGA1UEAxMk MTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNmM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA134aAW68Inho8vnarslcQm78Kgb0fVY2uYho JOKmP26mrFVQFyW+5AEAXNaUnoNlDOvEq6wt3C5bOpba522hsKl+QmnMqcG6ibtE RKnzz+xVbjujEeOZQ+DVOyknSy9myJ18GgZ5vQojy7MtWaBWHOmsE3UGM6lXjqUs CTjuzZByIYH6pQdKMuTjsZpHMSVF6u9XVgoPCJBiio3RV6ppQgh9hDyp157lEuxL +/dL8D7K0Ld9dR0+BTP12YJcOZOk6s6AerMeFktkDTyPOwtEXq4TjVOk3rWaTW1k zTXkpltzhpaRvflUUBhFcc4k6rHDx/Kxacb/vbW7yMD2AxUtUwIDAQABo4IESDCC BEQwHQYDVR0OBBYEFAkoA4IUIamcqEPlowA3R4TRJGdZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x MmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzEyYjc5ZWMwLWRjM2ItNGFlMC1h YzlhLWJlNWU0NDBjZjNiZi8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQw Y2YzYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAEXoGADBAJAcHgDBAKCDJgDBAKGw+ADBAChx9gD BAHRO+gwDQQCAAIwBwMFACYE90AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBg7x MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIk4pDXNoBVncsy2mGcDQgxj3+YOR3TXli7nAnvPsWuALLq8aTO Jg2QMsVs4FWE5wR1AemnFNbEY1MRVNaEhaqQpGHMUQbomG+h6hnpR6JYNza3yzqD UVEtHv7NOy2cSHQiRxOPz3y23buJatPZ9cx7Wlh2RYDOa4wClD6YvwNItZrRCUNi fKw0s+jLv456FuZ8Auqe+i+h+uBT5hvIdbwU93xBypaFYSFDV3D96Ve51FkA2t0k 6frZqtyWrg+ntnmlKdGWtD2KKwFLx6V1mFshOEAYmnrBF4KPjA5oGh+wbnC9Y//c rssgkzmoE18yloL2qOKJDYGAM5ygaMr5Nng= -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:44 2025 by rpki-client