$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer File: 5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer (raw, json) Hash identifier: nDbj3fwwCESfU4Om78uz3b0KiqeG0IrjzSDLLYD3RT0= Subject key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B381A072656E557EDFD0F2200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:45:24 +0000 Certificate not after: Tue 21 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 394760 IP: 23.140.8.0/24 IP: 2602:fb30::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1a:07:26:56:e5:57:ed:fd:0f:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 17 00:45:24 2025 GMT Not After : Dec 21 01:45:24 2027 GMT Subject: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0e:ab:49:74:4c:60:25:98:fc:3b:a2:b7:06: 52:21:8f:35:7a:84:49:9f:5a:3b:99:d2:c2:80:d2: 04:21:03:0c:3a:7c:35:06:39:03:d9:a7:c8:7a:99: 50:be:5b:c6:58:93:b1:e8:8f:00:fe:b0:b3:1e:47: 85:0a:a1:33:be:19:9b:20:aa:11:be:09:5d:63:72: 7d:34:1f:de:24:1b:20:f1:d3:a3:bd:3b:bb:3c:63: b6:79:ca:61:91:d4:b5:94:42:3f:12:b5:44:c0:cf: a3:c3:c1:f5:c5:33:d7:27:99:ae:4e:66:c9:7d:e2: 0e:14:46:7b:ab:9a:d1:d7:ab:cf:e3:b3:2a:f2:ad: c3:6b:9b:89:ae:d6:9a:b3:5e:2a:9f:fe:af:d9:57: a7:11:0d:3b:1b:93:60:dd:0a:57:e0:f1:45:80:0a: 38:4e:46:13:6a:f4:2b:ab:53:02:77:99:ec:97:3c: b9:73:be:cc:26:53:71:6c:2d:5d:83:3e:19:e8:41: c0:d8:ac:80:57:fb:04:9f:a6:f4:af:f9:bb:06:81: 98:d4:f0:bf:73:14:0f:01:16:5a:98:74:9a:23:08: e3:d8:5c:b6:4d:2a:88:c7:7c:7f:63:06:75:55:03: 17:65:04:ef:6d:e2:5e:a8:5a:6e:50:2e:40:20:17: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.140.8.0/24 IPv6: 2602:fb30::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d0:9b:68:e3:07:7c:a9:9d:5c:41:ee:80:b5:00:b9:05:c8: 86:7c:77:ca:43:3c:b8:88:be:03:dc:ff:e0:d3:e7:eb:ee:02: e2:7f:76:8a:98:da:5b:63:2a:31:7b:b7:29:e9:8e:db:3b:d4: 84:ad:98:7b:29:4f:72:9d:1c:6d:f2:27:78:42:90:c5:c6:6e: fe:7a:e8:7d:f8:7e:06:5d:da:8e:aa:6a:2e:9d:4f:68:cb:50: 77:55:ff:68:5e:0a:31:cf:e1:21:82:20:e1:07:17:d9:f6:cf: a8:84:d8:0d:74:9d:84:31:44:e0:8f:cf:e7:42:c3:fb:86:36: fa:3b:8c:41:ac:46:05:54:d1:a9:3a:e0:b8:f4:ac:99:21:06: df:86:fc:6c:c7:2f:05:78:08:3e:51:34:da:4f:85:76:78:b7: c6:27:f9:8a:9c:c7:0c:aa:e8:39:17:56:a8:08:e4:1b:eb:af: 69:25:25:b3:f8:e3:c3:30:6d:fa:e3:e6:52:dc:6f:41:bc:4d: 42:3d:7e:2c:ea:77:ed:44:cf:75:71:b2:de:97:53:46:9b:3e: 74:38:e6:38:d2:47:9a:ac:87:d7:95:50:c7:d5:95:42:bf:c6: bc:ba:27:fb:20:34:41:81:d5:11:ef:8a:86:d7:7a:b7:55:a1: c8:8e:d7:b8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEs4GgcmVuVX7f0PIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNzAwNDUyNFoXDTI3MTIyMTAxNDUyNFowLzEtMCsGA1UEAxMk NWFjN2MzYjQtY2JmYi00NjBiLThjYmEtYThiMDY1MDRjODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w6rSXRMYCWY/DuitwZSIY81eoRJn1o7mdLC gNIEIQMMOnw1BjkD2afIeplQvlvGWJOx6I8A/rCzHkeFCqEzvhmbIKoRvgldY3J9 NB/eJBsg8dOjvTu7PGO2ecphkdS1lEI/ErVEwM+jw8H1xTPXJ5muTmbJfeIOFEZ7 q5rR16vP47Mq8q3Da5uJrtaas14qn/6v2VenEQ07G5Ng3QpX4PFFgAo4TkYTavQr q1MCd5nslzy5c77MJlNxbC1dgz4Z6EHA2KyAV/sEn6b0r/m7BoGY1PC/cxQPARZa mHSaIwjj2Fy2TSqIx3x/YwZ1VQMXZQTvbeJeqFpuUC5AIBfvGQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPuR2Qu9Z7EUytjgM42XIqBtTyG/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 YWM3YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIwNjUwNGM4OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVhYzdjM2I0LWNiZmItNDYwYi04 Y2JhLWE4YjA2NTA0Yzg5Mi81YWM3YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIwNjUw NGM4OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjAgwDgQCAAIwCAMGACYC+zAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo0Jto4wd8qZ1cQe6AtQC5BciG fHfKQzy4iL4D3P/g0+fr7gLif3aKmNpbYyoxe7cp6Y7bO9SErZh7KU9ynRxt8id4 QpDFxm7+euh9+H4GXdqOqmounU9oy1B3Vf9oXgoxz+EhgiDhBxfZ9s+ohNgNdJ2E MUTgj8/nQsP7hjb6O4xBrEYFVNGpOuC49KyZIQbfhvxsxy8FeAg+UTTaT4V2eLfG J/mKnMcMqug5F1aoCOQb669pJSWz+OPDMG364+ZS3G9BvE1CPX4s6nftRM91cbLe l1NGmz50OOY40kearIfXlVDH1ZVCv8a8uif7IDRBgdUR74qG13q3VaHIjte4 -----END CERTIFICATE-----Generated at Fri Oct 10 15:19:41 2025 by rpki-client