$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer File: 2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer (raw, json) Hash identifier: apBmKv52CdI+Bi2IfdV3JEaKfYdHUAjgITby1HM0QAg= Subject key identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B71A0F3270198324461842E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 15:18:20 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 23.177.152.0/24 IP: 131.143.190.0/24 IP: 2602:f8fe::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:a0:f3:27:01:98:32:44:61:84:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 15:18:20 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:4c:94:0c:1c:fb:e0:77:4b:ec:56:20:2d: 93:12:68:48:ba:c2:72:db:db:84:32:7f:36:22:82: b7:91:f0:14:9d:af:92:5d:bf:05:21:2a:32:6d:e6: 22:1d:39:bc:e1:06:4d:16:03:82:a6:b1:2e:37:24: 49:2f:be:b3:ea:37:4b:0d:f7:8b:e7:aa:b8:89:39: 2e:cc:46:50:bc:da:fe:b1:82:c2:35:2d:27:db:47: 02:14:f1:5c:15:d5:8f:0d:9b:7b:48:dd:9a:88:bb: 96:b1:32:66:d3:39:1d:8f:28:66:7b:63:19:ff:a0: d5:02:db:d7:6f:5c:32:4e:60:f2:f9:79:84:28:b8: 55:0f:6e:0c:13:35:23:fa:49:2a:f3:f5:3d:83:93: 80:8b:67:db:5f:6b:25:bb:cb:cd:ba:3d:f0:99:39: 75:29:f4:92:b1:96:4e:04:42:f5:4e:d4:77:d7:4c: 28:6c:fd:ea:5f:50:41:2d:1d:c3:b9:81:b0:81:1c: e1:98:58:07:b2:f3:d4:8f:67:0d:2e:81:84:d0:ef: 4d:04:e4:42:ca:b3:8e:d9:4e:0f:f8:a8:87:d3:07: c8:96:1b:87:68:98:bf:fa:3c:96:ff:87:75:85:6e: 44:19:5d:5d:46:cb:57:ff:7c:bb:6b:49:e9:e4:2f: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.152.0/24 131.143.190.0/24 IPv6: 2602:f8fe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:97:7a:1c:62:9d:33:47:ea:44:32:ea:5c:c0:0b:88:c6:95: 9e:fa:cb:19:07:06:92:9d:a3:33:04:64:bf:45:91:13:5d:59: fc:02:67:ae:58:29:73:8a:0e:a0:9a:48:94:f7:eb:cc:b5:01: 72:22:b4:2b:60:a7:cd:43:1a:f1:e1:de:3c:1d:1a:63:35:a5: 9d:25:d3:82:50:f4:49:0f:81:6f:04:2d:8c:4a:ac:79:3f:29: da:42:20:9f:a8:61:aa:1c:55:c5:85:9e:90:27:bd:17:2a:f6: 75:ef:cf:b2:2b:c4:ac:6e:54:d1:20:47:c9:05:ef:e0:b7:91: e3:2c:36:b8:93:b5:48:dc:9f:d0:62:72:da:65:16:de:ef:f7: 9a:d6:f6:e5:02:70:f9:e8:75:a8:58:a6:5b:8e:42:39:f0:39: 97:17:bd:ae:98:e3:46:78:79:87:a9:2b:de:db:9c:f1:a5:3a: e8:8c:35:34:a2:b9:09:c7:21:0b:e9:b5:a9:0e:41:49:9a:96: e6:f3:ae:c9:37:56:46:e8:1b:1d:42:c9:c5:15:89:b9:73:8e: 11:9b:da:6a:b8:77:fd:af:bd:77:14:fb:11:14:c4:ea:f4:71: e3:78:a6:d4:f8:9a:96:fd:6f:2a:fb:19:08:cc:3d:04:51:a0: a2:60:d4:c2 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEtxoPMnAZgyRGGELgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzE1MTgyMFoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk MmUxYjg2YTUtYjY3NS00ODQ5LTk1ODYtYThmYjRjYjI5ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCpMlAwc++B3S+xWIC2TEmhIusJy29uEMn82 IoK3kfAUna+SXb8FISoybeYiHTm84QZNFgOCprEuNyRJL76z6jdLDfeL56q4iTku zEZQvNr+sYLCNS0n20cCFPFcFdWPDZt7SN2aiLuWsTJm0zkdjyhme2MZ/6DVAtvX b1wyTmDy+XmEKLhVD24MEzUj+kkq8/U9g5OAi2fbX2slu8vNuj3wmTl1KfSSsZZO BEL1TtR310wobP3qX1BBLR3DuYGwgRzhmFgHsvPUj2cNLoGE0O9NBORCyrOO2U4P +KiH0wfIlhuHaJi/+jyW/4d1hW5EGV1dRstX/3y7a0np5C/cRQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFPxg6HqYPtE7Z+GiqtGugAA7uDxxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y ZTFiODZhNS1iNjc1LTQ4NDktOTU4Ni1hOGZiNGNiMjk4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzJlMWI4NmE1LWI2NzUtNDg0OS05 NTg2LWE4ZmI0Y2IyOTgzZS8yZTFiODZhNS1iNjc1LTQ4NDktOTU4Ni1hOGZiNGNi Mjk4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsZgDBACDj74wDgQCAAIwCAMGACYC+P4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWXehxinTNH6kQy6lzAC4jGlZ76yxkHBpKdozMEZL9FkRNdWfwCZ65Y KXOKDqCaSJT368y1AXIitCtgp81DGvHh3jwdGmM1pZ0l04JQ9EkPgW8ELYxKrHk/ KdpCIJ+oYaocVcWFnpAnvRcq9nXvz7IrxKxuVNEgR8kF7+C3keMsNriTtUjcn9Bi ctplFt7v95rW9uUCcPnodahYpluOQjnwOZcXva6Y40Z4eYepK97bnPGlOuiMNTSi uQnHIQvptakOQUmalubzrsk3VkboGx1CycUViblzjhGb2mq4d/2vvXcU+xEUxOr0 ceN4ptT4mpb9byr7GQjMPQRRoKJg1MI= -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:26 2025 by rpki-client