$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer File: 3789343d-8560-48b0-9530-d2a1129fefe7.cer (raw, json) Hash identifier: 9x5j3RY7rZp81mOsjtBkoI/OQ2rxmPPs+u2Ze6NBHQ0= Subject key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B745FB892CF2B470700846E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 14:54:20 +0000 Certificate not after: Sat 10 Oct 2026 22:39:49 +0000 Subordinate resources: AS: 401228 IP: 23.183.216.0/24 IP: 130.12.248.0/24 IP: 2602:f87c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:5f:b8:92:cf:2b:47:07:00:84:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 14:54:20 2025 GMT Not After : Oct 10 22:39:49 2026 GMT Subject: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:41:de:4d:25:cf:11:b7:4f:a0:9d:a4:54: df:85:78:d8:15:e3:08:66:60:37:5d:48:87:ee:7b: 12:0c:d2:58:19:78:8d:c2:66:68:ff:01:59:c1:0e: 35:f7:a5:c3:d7:7d:2c:cf:1c:ad:7f:de:b2:10:9b: ff:b7:33:e8:ed:ed:6e:1c:c6:85:b0:00:c2:1e:3a: df:c9:80:8d:f8:c8:72:b6:bd:cd:df:14:da:ba:2a: bf:57:c6:3f:1e:20:b3:11:3c:b9:31:fe:8e:48:a8: 27:4f:aa:ec:5a:79:6b:7b:0f:bb:53:33:b5:3d:1a: 1c:37:33:f9:fc:5d:53:1a:f0:99:4e:01:a8:4c:b0: 54:e5:f2:38:f5:fc:39:c1:b2:b3:5a:f2:14:24:14: d3:97:d4:e7:e4:ec:df:e5:ff:24:9c:77:83:26:62: dd:6e:3c:30:bf:fa:22:8d:72:6d:4c:e8:5e:9b:f3: c3:85:2c:9c:a0:9d:3e:0e:72:4a:40:e5:e3:99:1c: ec:0b:83:1e:a8:82:a5:74:a7:68:4c:9b:3d:01:b7: 67:b4:2f:5b:20:92:d2:e1:97:7d:12:df:e8:8f:88: 8e:3b:9e:80:14:2b:a6:bf:71:64:b9:b0:98:bb:50: 43:d5:a6:77:9e:a6:3f:84:3f:bf:d3:21:c4:98:9a: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.183.216.0/24 130.12.248.0/24 IPv6: 2602:f87c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ba:e4:f7:a4:dc:ad:b9:58:12:71:30:ca:4c:81:07:33:de: 59:bf:2f:ab:49:fb:81:e2:a9:af:ec:35:1a:9f:de:bf:0a:76: f5:8b:2b:61:70:d3:9f:83:49:71:24:72:2b:f8:f7:29:d1:44: 4d:6e:39:fd:49:c6:d8:e6:60:15:ec:a2:de:ca:f0:75:7a:8e: 2a:ea:1b:84:0e:48:3b:b3:d9:ce:04:c0:f3:20:83:e1:3f:8d: c8:6f:21:fd:ab:31:0b:41:10:d6:63:dc:12:cb:63:f3:a7:48: 7a:68:97:bf:80:18:db:95:89:b9:d0:02:58:b5:a3:82:b1:d0: 32:73:88:0d:f3:b8:50:c5:ba:25:d6:06:fe:aa:70:f7:73:33: 64:cc:98:1a:59:73:40:76:9c:9c:4e:4d:e5:c5:71:fd:40:ff: 69:0c:76:84:ee:91:54:99:22:af:19:65:4b:3b:98:c0:11:e6: 2f:97:fd:0b:3a:7a:e4:76:f1:fb:68:06:f4:2a:49:f1:36:59: f2:a8:c7:84:d3:71:e3:9c:43:b9:77:26:a4:0d:ff:15:09:21: 59:d9:39:58:22:69:d6:8e:b2:ec:f6:a2:4e:67:d3:02:b3:62: 42:67:f5:cc:fe:ab:cf:c8:f7:61:49:1f:88:a9:21:06:e8:a0: d4:5b:12:21 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt0X7iSzytHBwCEbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODE0NTQyMFoXDTI2MTAxMDIyMzk0OVowLzEtMCsGA1UEAxMk Mzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZlZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGdB3k0lzxG3T6CdpFTfhXjYFeMIZmA3XUiH 7nsSDNJYGXiNwmZo/wFZwQ4196XD130szxytf96yEJv/tzPo7e1uHMaFsADCHjrf yYCN+Mhytr3N3xTauiq/V8Y/HiCzETy5Mf6OSKgnT6rsWnlrew+7UzO1PRocNzP5 /F1TGvCZTgGoTLBU5fI49fw5wbKzWvIUJBTTl9Tn5Ozf5f8knHeDJmLdbjwwv/oi jXJtTOhem/PDhSycoJ0+DnJKQOXjmRzsC4MeqIKldKdoTJs9AbdntC9bIJLS4Zd9 Et/oj4iOO56AFCumv3FkubCYu1BD1aZ3nqY/hD+/0yHEmJqJ9QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEL95/rSA6G8YAcWaxexukK5wZpTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z Nzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzM3ODkzNDNkLTg1NjAtNDhiMC05 NTMwLWQyYTExMjlmZWZlNy8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5 ZmVmZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXt9gDBACCDPgwDgQCAAIwCAMGACYC+HwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYfTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuuuT3pNytuVgScTDK TIEHM95Zvy+rSfuB4qmv7DUan96/Cnb1iythcNOfg0lxJHIr+Pcp0URNbjn9ScbY 5mAV7KLeyvB1eo4q6huEDkg7s9nOBMDzIIPhP43IbyH9qzELQRDWY9wSy2Pzp0h6 aJe/gBjblYm50AJYtaOCsdAyc4gN87hQxbol1gb+qnD3czNkzJgaWXNAdpycTk3l xXH9QP9pDHaE7pFUmSKvGWVLO5jAEeYvl/0LOnrkdvH7aAb0KknxNlnyqMeE03Hj nEO5dyakDf8VCSFZ2TlYImnWjrLs9qJOZ9MCs2JCZ/XM/qvPyPdhSR+IqSEG6KDU WxIh -----END CERTIFICATE-----Generated at Fri Oct 10 15:24:47 2025 by rpki-client