$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer File: 3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer (raw, json) Hash identifier: 4+XOaoKRpXWf4UbrOOTQOEo1Y2en8sXO07C79UOhsEI= Subject key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B5E57AFC56EBB13A7A3D3C080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 17:30:22 +0000 Certificate not after: Tue 30 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 394896 AS: 398779 IP: 23.173.136.0/24 IP: 130.250.176.0/22 IP: 130.250.184.0/22 IP: 199.66.217.0 -- 199.66.218.255 IP: 199.66.220.0/24 IP: 199.180.201.0/24 IP: 199.180.203.0/24 IP: 2607:1740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:57:af:c5:6e:bb:13:a7:a3:d3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 30 17:30:22 2025 GMT Not After : Nov 30 01:45:25 2027 GMT Subject: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:e0:4f:77:31:1f:f1:26:47:30:9d:d5:fe: 6f:8a:3a:66:d3:14:7a:eb:59:88:59:0a:c1:34:ff: f7:53:95:99:ba:0b:27:e3:85:08:59:a8:e0:90:73: 80:d6:65:91:f0:c5:3b:86:03:14:de:21:25:ea:71: da:92:19:3f:94:7d:db:90:b3:5f:04:ad:2b:a3:46: 90:91:fe:c0:8a:0b:fd:78:44:73:af:87:86:e0:af: 50:10:28:f6:4c:f6:5c:cc:93:d3:55:5d:f4:80:6f: 6d:2f:01:bf:49:ec:56:66:ad:d8:ca:37:ac:5f:e5: 71:e5:25:e4:d3:fa:3e:6e:3b:df:3c:a4:0f:1f:b1: 48:85:35:0c:26:12:a9:34:44:3b:9c:a9:35:8d:c8: 82:a4:af:b1:96:24:06:de:fb:c3:ef:40:d0:40:18: 0a:c1:35:a9:c4:8e:65:81:66:af:6f:36:95:b1:b1: 0e:cd:b4:f0:1e:e2:6b:82:e9:47:c6:37:db:a4:ea: 52:35:59:04:3e:3f:9f:14:f5:74:20:9c:67:6f:d6: 69:b9:f2:6a:bf:5e:6b:d7:72:ca:92:3e:03:c2:13: 8b:e6:be:f3:0c:fe:f2:e7:dd:77:8b:6f:c5:66:9a: dd:e1:33:04:a0:c0:54:12:e2:8d:fe:9b:00:05:db: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.173.136.0/24 130.250.176.0/22 130.250.184.0/22 199.66.217.0-199.66.218.255 199.66.220.0/24 199.180.201.0/24 199.180.203.0/24 IPv6: 2607:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394896 398779 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a0:c4:e9:dc:d2:9c:09:b5:a4:9d:92:0f:fa:fd:98:d3:a9: 61:17:5e:79:74:80:12:de:0d:25:4a:65:c9:e3:a7:f1:12:32: ad:36:2d:ba:a3:31:61:24:03:7a:c3:1c:d6:4b:01:59:aa:a5: 14:c7:f1:03:a3:82:87:f7:62:fc:c1:2e:27:91:ec:99:50:b2: dd:4c:11:be:10:d2:c7:15:14:c4:41:84:a9:dc:4b:7a:ca:d6: f0:35:f2:bf:c9:b6:0b:b6:77:ec:8b:0b:ec:5b:19:99:18:67: 27:52:6e:46:bb:13:dd:b5:04:16:bd:8f:68:65:cf:98:e7:30: a7:90:05:8d:84:e1:56:be:cf:5f:72:21:60:36:67:d7:b5:ba: c4:ba:e0:cc:8d:2c:02:e5:0c:34:04:03:a2:2e:cb:86:9e:5b: 2b:d8:0e:4f:89:f7:b9:fd:7f:18:43:34:75:10:40:f3:4c:31: f2:8a:7c:f8:33:4e:d1:c8:62:95:fa:0b:43:c8:98:c6:29:ef: 3d:bc:b2:7b:44:c9:8d:99:2a:a7:bf:51:74:eb:30:fb:3e:b4: 89:6d:c7:b5:0b:cb:5c:66:a4:2c:7e:60:cc:84:83:00:af:86: 98:78:c1:73:66:95:36:35:78:a4:82:f6:4e:d9:00:9a:e5:ec: 07:6c:86:f5 -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWEteV6/FbrsTp6PTwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkzMDE3MzAyMloXDTI3MTEzMDAxNDUyNVowLzEtMCsGA1UEAxMk M2I1Y2UzNWYtMDQyZS00ZmE0LThlOGItYzEwMWU2MGVlNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP3gT3cxH/EmRzCd1f5vijpm0xR661mIWQrB NP/3U5WZugsn44UIWajgkHOA1mWR8MU7hgMU3iEl6nHakhk/lH3bkLNfBK0ro0aQ kf7Aigv9eERzr4eG4K9QECj2TPZczJPTVV30gG9tLwG/SexWZq3YyjesX+Vx5SXk 0/o+bjvfPKQPH7FIhTUMJhKpNEQ7nKk1jciCpK+xliQG3vvD70DQQBgKwTWpxI5l gWavbzaVsbEOzbTwHuJrgulHxjfbpOpSNVkEPj+fFPV0IJxnb9ZpufJqv15r13LK kj4DwhOL5r7zDP7y5913i2/FZprd4TMEoMBUEuKN/psABdu/+QIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFIG+NXgl7r6I0k1L+fxOC7Jus6vJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z YjVjZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAxZTYwZWU2N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNiNWNlMzVmLTA0MmUtNGZhNC04 ZThiLWMxMDFlNjBlZTY3ZC8zYjVjZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAxZTYw ZWU2N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwWgYIKwYBBQUH AQcBAf8ESzBJMDgEAgABMDIDBAAXrYgDBAKC+rADBAKC+rgwDAMEAMdC2QMEAMdC 2gMEAMdC3AMEAMe0yQMEAMe0yzANBAIAAjAHAwUAJgcXQDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMGBpACAwYVuzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsoMTp3NKcCbWknZIP+v2Y06lh F155dIAS3g0lSmXJ46fxEjKtNi26ozFhJAN6wxzWSwFZqqUUx/EDo4KH92L8wS4n keyZULLdTBG+ENLHFRTEQYSp3Et6ytbwNfK/ybYLtnfsiwvsWxmZGGcnUm5GuxPd tQQWvY9oZc+Y5zCnkAWNhOFWvs9fciFgNmfXtbrEuuDMjSwC5Qw0BAOiLsuGnlsr 2A5Pife5/X8YQzR1EEDzTDHyinz4M07RyGKV+gtDyJjGKe89vLJ7RMmNmSqnv1F0 6zD7PrSJbce1C8tcZqQsfmDMhIMAr4aYeMFzZpU2NXikgvZO2QCa5ewHbIb1 -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:16 2025 by rpki-client