$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer File: 4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer (raw, json) Hash identifier: EYwDlnTrz2lo1+AdzcfhKdB7L+C50yfiC9Unh6DCDac= Subject key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6F5352FBFDAD25CB14307F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 19:30:19 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 12198 AS: 401009 IP: 23.177.40.0/24 IP: 131.143.239.0/24 IP: 2602:f919::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:53:52:fb:fd:ad:25:cb:14:30:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 6 19:30:19 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:c7:66:e2:c4:99:86:84:63:e5:cb:1d:2b: 29:ea:b0:7e:74:10:fc:83:6d:d9:7d:b6:5d:a1:18: 40:a1:b2:43:2a:08:d3:82:28:66:0d:45:7d:91:df: cc:55:ab:e2:21:6f:ef:6c:e1:80:cd:05:46:5d:70: 14:7f:df:89:96:5f:51:c0:ac:0a:eb:5a:aa:b1:aa: 77:22:ba:62:84:d4:dd:3e:3d:cc:70:f7:16:64:f3: a7:6a:6c:3d:41:3a:a0:85:cd:22:95:42:8d:cb:43: 2e:2b:be:71:c2:73:d3:34:dd:3a:51:20:3f:f3:e8: e4:95:ed:0a:09:a7:20:97:16:5c:00:81:1e:f6:d8: 19:12:22:92:91:42:7f:b6:24:f9:83:66:b4:c4:84: e3:cf:86:46:9d:43:c9:5f:30:05:e6:42:07:4c:a2: 7d:2e:92:ec:a2:3f:07:c3:14:7a:34:56:bc:a3:8a: db:b1:18:34:45:e1:08:65:1b:41:e5:0c:97:45:25: c4:7a:78:b0:93:89:42:8a:a6:24:a4:d2:40:ab:70: d7:c9:d2:0f:b7:9d:b2:a9:e1:5d:3c:cd:e7:97:99: 47:ef:2e:33:0d:d2:e6:bc:9d:92:d9:a0:6e:e1:fd: b3:64:68:b1:7b:1a:01:50:6a:a2:fd:09:2b:40:1e: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.40.0/24 131.143.239.0/24 IPv6: 2602:f919::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12198 401009 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5b:4f:d5:ae:45:05:f7:7d:35:7d:80:13:81:30:6b:f6:f8: 7f:31:8a:8a:d5:19:b4:8e:78:97:69:d4:e8:81:f4:56:de:f8: 43:29:2c:6d:e6:0f:fd:52:cb:7a:e6:01:ab:23:40:19:4c:0e: 29:f4:13:2a:3f:03:af:85:9c:8d:7c:04:58:c6:6c:17:49:8f: cd:ec:8d:c5:21:73:40:a9:08:60:b0:a9:c4:b8:99:0c:c0:ba: 43:8e:e5:2c:20:6a:b8:fa:6a:09:a1:f8:a4:b1:29:f7:3c:0a: f5:bd:d2:25:cc:5e:6f:14:3d:f7:38:7c:ad:2e:e8:c0:59:fa: 5d:50:84:02:24:d9:4c:86:15:ce:80:f5:35:76:8f:2e:a8:4d: d8:5a:47:66:ad:17:f5:ee:d3:e5:f8:79:9d:ae:ba:05:eb:09: 82:80:8d:c5:c3:6b:be:1e:af:c2:23:6e:92:05:78:62:12:bd: 92:7a:27:09:ce:47:01:be:78:04:19:0e:0e:69:5b:01:28:c5: 02:b8:a5:fc:eb:d3:1b:8a:98:98:b3:55:49:8f:2a:b7:79:eb: 2f:13:8f:f5:f7:77:2a:1f:cb:a8:12:18:ad:26:f6:ca:78:a0: 5e:48:b8:ee:c9:32:45:6b:93:91:ae:c0:04:80:13:30:24:4b: a2:13:34:9e -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEtvU1L7/a0lyxQwf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNjE5MzAxOVoXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk NDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCbHZuLEmYaEY+XLHSsp6rB+dBD8g23ZfbZd oRhAobJDKgjTgihmDUV9kd/MVaviIW/vbOGAzQVGXXAUf9+Jll9RwKwK61qqsap3 IrpihNTdPj3McPcWZPOnamw9QTqghc0ilUKNy0MuK75xwnPTNN06USA/8+jkle0K CacglxZcAIEe9tgZEiKSkUJ/tiT5g2a0xITjz4ZGnUPJXzAF5kIHTKJ9LpLsoj8H wxR6NFa8o4rbsRg0ReEIZRtB5QyXRSXEeniwk4lCiqYkpNJAq3DXydIPt52yqeFd PM3nl5lH7y4zDdLmvJ2S2aBu4f2zZGixexoBUGqi/QkrQB4I3QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFLYqQJWHVa+PAaRAEz0i8hUrto3rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQ4NDhjYzliLWU0NmYtNDg1ZS1i M2YyLTRmMzkzYjVkOTJkNi80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1 ZDkyZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsSgDBACDj+8wDgQCAAIwCAMGBCYC+RkAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAi+mAgMGHnEwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZVtP1a5FBfd9 NX2AE4Ewa/b4fzGKitUZtI54l2nU6IH0Vt74QyksbeYP/VLLeuYBqyNAGUwOKfQT Kj8Dr4WcjXwEWMZsF0mPzeyNxSFzQKkIYLCpxLiZDMC6Q47lLCBquPpqCaH4pLEp 9zwK9b3SJcxebxQ99zh8rS7owFn6XVCEAiTZTIYVzoD1NXaPLqhN2FpHZq0X9e7T 5fh5na66BesJgoCNxcNrvh6vwiNukgV4YhK9knonCc5HAb54BBkODmlbASjFAril /OvTG4qYmLNVSY8qt3nrLxOP9fd3Kh/LqBIYrSb2ynigXki47skyRWuTka7ABIAT MCRLohM0ng== -----END CERTIFICATE-----Generated at Fri Oct 10 15:19:43 2025 by rpki-client