$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f.cer File: 27d7ba7b-aeba-472c-8558-d38924dd8a0f.cer (raw, json) Hash identifier: Adcj1sp0gOeF7wVb49Q7KWv9GOMGinplscqNsdzzrQc= Subject key identifier: 3C:6D:4C:17:8A:C6:96:FE:89:5F:93:60:F2:22:39:36:B2:BB:98:9B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B381A06E65E030F3C8AAEDC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/27d7ba7b-aeba-472c-8558-d38924dd8a0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:45:24 +0000 Certificate not after: Tue 21 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 398372 IP: 198.153.255.0/24 IP: 2605:7140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1a:06:e6:5e:03:0f:3c:8a:ae:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 17 00:45:24 2025 GMT Not After : Dec 21 01:45:24 2027 GMT Subject: CN=27d7ba7b-aeba-472c-8558-d38924dd8a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:a1:dd:51:6f:a7:50:30:1f:11:76:8d:19: 6a:00:e6:11:0c:f3:34:ee:f6:ec:83:59:90:4a:43: 5d:0d:ee:cf:80:fd:ea:29:4a:f3:67:e4:24:02:8f: 04:d9:5e:0f:24:5b:5e:1c:52:6d:ad:b7:75:c0:bf: 29:c0:14:88:84:e0:29:97:e8:b5:5d:3e:6e:10:7b: f9:7a:d9:44:ba:29:74:f9:17:2c:89:11:4b:58:07: 57:6e:75:35:6a:78:bd:bb:59:4f:23:84:b3:7e:5d: 73:8a:04:80:39:1f:43:91:f0:5b:dc:f8:3a:9f:09: ad:b5:19:59:16:37:78:6b:67:36:50:90:a0:79:fa: 3b:77:33:1e:e4:e6:d8:32:c8:35:5d:d3:de:69:ac: a6:fa:4b:a4:2b:e0:f5:f5:a0:fe:c4:b0:12:96:59: 9c:78:ff:bc:d2:04:a0:99:6c:82:5f:44:56:91:cc: fe:10:ce:74:6d:ce:59:7d:b5:88:57:7f:67:f8:13: c3:ff:04:4b:67:a8:ec:af:74:45:4c:bf:f4:58:13: af:62:ce:67:76:3e:4b:3b:84:49:60:7d:76:48:9b: aa:75:3e:78:17:5c:8f:fa:bd:ec:e6:c3:cb:6a:24: a5:65:38:15:ad:3c:aa:f8:ee:ec:51:0e:67:5e:5a: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6D:4C:17:8A:C6:96:FE:89:5F:93:60:F2:22:39:36:B2:BB:98:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/27d7ba7b-aeba-472c-8558-d38924dd8a0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.153.255.0/24 IPv6: 2605:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398372 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3d:de:65:6f:ab:1e:f8:72:9b:f4:b4:f8:6d:76:23:43:e4: 62:87:b6:b5:7b:9c:dc:75:d0:bc:bc:01:a4:3b:b4:93:05:91: df:e7:ec:71:13:c9:78:5c:6d:c5:66:66:13:7b:7e:81:94:5f: 94:bb:2a:02:af:03:52:08:85:d0:24:04:08:93:d2:98:82:b7: e1:3b:9d:04:df:4f:a5:9a:f6:f9:f1:5b:0c:bf:80:fb:7f:56: 0a:93:19:d7:62:6d:0b:e0:5c:8f:e2:27:57:11:42:5f:40:0e: 70:8a:28:3a:9f:14:9d:a6:b5:85:43:c3:d2:8f:12:92:56:94: ea:f8:2f:59:f8:a6:a4:b3:ad:f4:ea:e7:9f:65:e5:5d:4a:83: 2e:97:8d:f3:3b:0c:65:1b:b0:5b:0e:06:94:b0:70:74:12:35: 00:8a:bd:9c:9d:0a:f2:49:1c:62:23:eb:8c:2e:7c:51:ab:8e: cc:cc:39:34:73:d9:30:5a:46:74:31:90:57:1a:76:d7:ed:79: 10:3e:95:66:7c:55:f6:86:5a:57:d6:02:87:d0:c5:25:bf:19: 85:54:d1:84:20:1a:fa:d6:04:ce:cc:7e:f7:59:7e:5b:a8:09: da:93:ae:91:8b:b0:1b:3d:97:1f:4d:06:8c:32:cb:e6:65:e5: e5:26:27:0d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEs4GgbmXgMPPIqu3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNzAwNDUyNFoXDTI3MTIyMTAxNDUyNFowLzEtMCsGA1UEAxMk MjdkN2JhN2ItYWViYS00NzJjLTg1NTgtZDM4OTI0ZGQ4YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe6h3VFvp1AwHxF2jRlqAOYRDPM07vbsg1mQ SkNdDe7PgP3qKUrzZ+QkAo8E2V4PJFteHFJtrbd1wL8pwBSIhOApl+i1XT5uEHv5 etlEuil0+RcsiRFLWAdXbnU1ani9u1lPI4Szfl1zigSAOR9DkfBb3Pg6nwmttRlZ Fjd4a2c2UJCgefo7dzMe5ObYMsg1XdPeaaym+kukK+D19aD+xLASllmceP+80gSg mWyCX0RWkcz+EM50bc5ZfbWIV39n+BPD/wRLZ6jsr3RFTL/0WBOvYs5ndj5LO4RJ YH12SJuqdT54F1yP+r3s5sPLaiSlZTgVrTyq+O7sUQ5nXloGzQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDxtTBeKxpb+iV+TYPIiOTayu5ibMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y N2Q3YmE3Yi1hZWJhLTQ3MmMtODU1OC1kMzg5MjRkZDhhMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzI3ZDdiYTdiLWFlYmEtNDcyYy04 NTU4LWQzODkyNGRkOGEwZi8yN2Q3YmE3Yi1hZWJhLTQ3MmMtODU1OC1kMzg5MjRk ZDhhMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADGmf8wDQQCAAIwBwMFACYFcUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhQkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE493mVvqx74cpv0tPhtdiND5GKH trV7nNx10Ly8AaQ7tJMFkd/n7HETyXhcbcVmZhN7foGUX5S7KgKvA1IIhdAkBAiT 0piCt+E7nQTfT6Wa9vnxWwy/gPt/VgqTGddibQvgXI/iJ1cRQl9ADnCKKDqfFJ2m tYVDw9KPEpJWlOr4L1n4pqSzrfTq559l5V1Kgy6XjfM7DGUbsFsOBpSwcHQSNQCK vZydCvJJHGIj64wufFGrjszMOTRz2TBaRnQxkFcadtfteRA+lWZ8VfaGWlfWAofQ xSW/GYVU0YQgGvrWBM7MfvdZfluoCdqTrpGLsBs9lx9NBowyy+Zl5eUmJw0= -----END CERTIFICATE-----Generated at Fri Oct 10 15:21:26 2025 by rpki-client