$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer File: 1def28a9-0b42-43a8-9407-32d9e4a0540e.cer (raw, json) Hash identifier: xH0biMkj1cp1PgmhOZ2owjJYATVY8OK3GBf+bdQ2Cw0= Subject key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B21C48E72A0800564901D0440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 401119 IP: 23.180.24.0/24 IP: 2602:f8d3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:72:a0:80:05:64:90:1d:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:fc:0d:dd:48:0c:7c:64:90:44:fd:3c:de: 5e:66:ef:25:f8:c8:75:83:c4:a3:bc:a5:3f:d3:df: 26:b3:91:74:d5:6b:b1:ce:83:a6:34:30:6c:0d:cf: b6:d3:f2:99:8b:03:29:76:1b:f5:7d:4e:b4:40:b7: ca:19:fb:d9:5d:96:80:96:51:2a:9c:a6:d4:57:79: 29:dc:ed:2f:08:4f:c1:49:a3:15:2b:0a:a0:56:28: 29:e4:3c:b6:c4:56:24:c7:f5:66:70:67:97:f4:fe: de:36:df:bd:6d:6f:d4:7d:ba:99:2f:55:37:c8:b9: 71:a3:e5:ad:80:68:8a:fb:1c:43:1d:c9:49:df:98: 39:a4:7c:0c:52:1c:fd:86:c7:86:24:e8:36:ca:0a: f8:29:e7:4f:d8:68:c2:6d:05:f6:9e:44:74:23:0f: 22:0f:b4:3c:46:37:14:80:3f:d0:db:fa:5b:af:f1: b8:0d:52:db:0f:ab:62:15:3f:88:5d:d9:2c:40:aa: bb:af:3f:62:bc:b8:f5:9d:88:69:30:6d:c6:7f:18: 67:74:aa:96:b9:90:14:30:96:59:1a:6c:62:d4:57: 4b:72:77:74:91:c2:0b:c2:58:52:bc:6f:f7:ab:ba: 01:81:70:2b:86:68:90:01:a6:92:ae:3c:3c:fd:b9: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.180.24.0/24 IPv6: 2602:f8d3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:27:de:c3:8a:b6:23:68:67:5b:d4:d3:d1:b9:a6:4b:3e:49: 47:05:3d:e7:08:c2:c3:a8:b1:62:08:58:07:93:c9:a0:e8:6d: b8:2b:5a:e2:ff:81:b6:05:35:9e:b0:50:a8:e7:47:e5:f2:65: 93:d2:da:50:66:9f:f1:ea:06:aa:5a:82:96:48:20:99:c6:13: 41:e0:b3:ac:b0:01:25:05:54:1f:ce:2f:87:93:ea:98:08:5d: 52:09:c8:9e:cb:45:af:49:2f:50:f4:7c:14:03:d4:a9:25:fe: 55:a9:69:02:44:c3:a2:81:ab:b9:6d:68:5d:bb:1b:5e:fe:53: f8:a0:c2:1f:fe:62:91:90:96:45:06:d3:74:85:64:d3:8f:5e: 84:30:b8:dc:ce:8a:5d:55:fb:59:95:8f:85:f3:77:dc:cf:3a: 85:d1:fc:56:ac:cd:61:fb:b4:6c:89:3b:df:a8:eb:73:8c:8c: 66:c9:e5:e0:bf:68:e0:61:16:bc:81:3a:6b:a4:fd:1c:b0:cf: 75:99:68:f1:ea:0f:82:01:bf:ff:98:9b:6c:11:2f:7a:f3:86: ba:24:f0:3b:4c:37:6b:2a:ae:55:5c:f3:89:7e:71:5e:61:41: 7b:4c:2e:34:55:22:4b:e3:4d:ce:a7:55:13:bb:dd:cf:62:3d: fb:ff:6c:fe -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEshxI5yoIAFZJAdBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk MWRlZjI4YTktMGI0Mi00M2E4LTk0MDctMzJkOWU0YTA1NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnID8Dd1IDHxkkET9PN5eZu8l+Mh1g8SjvKU/ 098ms5F01WuxzoOmNDBsDc+20/KZiwMpdhv1fU60QLfKGfvZXZaAllEqnKbUV3kp 3O0vCE/BSaMVKwqgVigp5Dy2xFYkx/VmcGeX9P7eNt+9bW/UfbqZL1U3yLlxo+Wt gGiK+xxDHclJ35g5pHwMUhz9hseGJOg2ygr4KedP2GjCbQX2nkR0Iw8iD7Q8RjcU gD/Q2/pbr/G4DVLbD6tiFT+IXdksQKq7rz9ivLj1nYhpMG3GfxhndKqWuZAUMJZZ Gmxi1FdLcnd0kcILwlhSvG/3q7oBgXArhmiQAaaSrjw8/bnOIwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEqr30ywtwwNpNAa13YXdkb9SKR6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x ZGVmMjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5ZTRhMDU0MGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFkZWYyOGE5LTBiNDItNDNhOC05 NDA3LTMyZDllNGEwNTQwZS8xZGVmMjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5ZTRh MDU0MGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtBgwDgQCAAIwCAMGACYC+NMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe3zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHJ97DirYjaGdb1NPRuaZLPklH BT3nCMLDqLFiCFgHk8mg6G24K1ri/4G2BTWesFCo50fl8mWT0tpQZp/x6gaqWoKW SCCZxhNB4LOssAElBVQfzi+Hk+qYCF1SCciey0WvSS9Q9HwUA9SpJf5VqWkCRMOi gau5bWhduxte/lP4oMIf/mKRkJZFBtN0hWTTj16EMLjczopdVftZlY+F83fczzqF 0fxWrM1h+7RsiTvfqOtzjIxmyeXgv2jgYRa8gTprpP0csM91mWjx6g+CAb//mJts ES9684a6JPA7TDdrKq5VXPOJfnFeYUF7TC40VSJL403Op1UTu93PYj37/2z+ -----END CERTIFICATE-----Generated at Fri Oct 10 15:19:40 2025 by rpki-client