$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer File: 9da2c17e-38b5-4574-b273-36a0f0b2956d.cer (raw, json) Hash identifier: dFb65PlsCBjipxoDTggJnji9SeWuwzXpRdM03WD4Hyk= Subject key identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B71B6080997F774812B5DD300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:00:49 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 23.177.200.0/24 IP: 131.143.144.0/22 IP: 2602:f8fb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:b6:08:09:97:f7:74:81:2b:5d:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 16:00:49 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=9da2c17e-38b5-4574-b273-36a0f0b2956d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:59:ab:0a:3c:1f:36:62:a9:45:bf:72:92: 0c:58:61:84:a8:1e:d3:90:21:cb:76:34:24:1f:6d: f1:b6:28:c4:e2:f9:9f:dd:59:8a:bb:97:f9:15:2e: f8:5b:75:e6:a8:7a:5e:8b:17:9f:a1:82:29:e1:3a: 27:b3:5b:11:e2:4e:3d:1b:30:2c:4f:4b:ea:5e:72: 53:8a:ee:39:4d:77:85:87:61:95:bf:64:78:20:4f: d3:b0:3d:12:90:bf:3a:29:e3:34:9c:5b:0a:74:db: dd:36:89:87:e7:85:03:9c:4c:1d:17:15:d7:ab:3e: 21:50:60:8f:90:2d:51:05:cc:e3:d6:f2:6d:7a:3c: b1:c6:aa:8f:2b:77:fb:0e:fe:55:d4:f9:cb:a6:7c: eb:69:47:fb:3c:02:55:44:81:56:e5:9a:d1:2b:03: 00:e2:7c:2e:de:de:ff:71:ec:5e:7e:56:1a:5b:49: 4b:f5:4b:42:63:fd:c2:d5:b3:de:e4:d0:28:59:57: 2f:2d:76:7e:ae:dc:cc:93:13:12:d4:bf:31:c6:65: 93:41:bd:47:23:39:1b:99:88:d4:22:cf:23:d6:38: 19:45:0e:cd:4d:1e:92:ba:21:5b:c2:93:02:f0:ea: 92:8d:5c:e2:09:1b:87:91:05:85:45:1f:b6:64:1f: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.200.0/24 131.143.144.0/22 IPv6: 2602:f8fb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:60:c8:e7:00:ce:fd:34:a3:4c:de:4c:02:9d:59:99:be:84: bd:00:71:e7:94:4a:22:77:4e:7b:34:4f:63:86:bd:8a:26:2a: 73:20:7f:05:87:35:61:01:0e:3f:08:04:85:d0:78:fb:a0:60: de:26:ab:06:b8:c3:f2:77:b5:47:e9:1f:e2:ad:8f:ea:66:62: 40:61:94:09:68:bd:53:85:71:fe:6f:60:c4:0e:d4:e1:9d:69: f6:b0:df:5d:81:9c:64:fd:21:b1:ea:9a:75:e2:78:7a:a9:9e: ca:c1:8c:c0:af:a3:ae:b0:61:71:74:04:68:fd:ce:2b:c1:54: 95:73:5a:04:4e:94:cb:28:12:e1:da:bd:fa:37:a4:0a:74:e7: 99:7e:a3:9a:98:23:8a:ca:29:a0:a5:3a:47:72:13:ce:22:db: 58:4e:eb:bf:ab:4e:f7:25:63:2a:0e:87:79:af:c6:ed:78:6b: e1:c0:6b:e0:a8:96:e5:9f:ae:5b:9c:f4:99:67:5e:bc:db:43: 73:8d:e0:87:33:d4:2e:b4:2e:9e:91:9d:db:b3:2a:ff:d4:2b: e7:cb:f0:42:31:ba:00:c6:68:06:fb:0a:b6:0c:38:66:8b:3e: f8:09:df:97:c8:a4:59:8c:41:62:6b:4a:9f:73:e0:75:09:38: 37:b0:04:0c -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEtxtggJl/d0gStd0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzE2MDA0OVoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk OWRhMmMxN2UtMzhiNS00NTc0LWIyNzMtMzZhMGYwYjI5NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4dZqwo8HzZiqUW/cpIMWGGEqB7TkCHLdjQk H23xtijE4vmf3VmKu5f5FS74W3XmqHpeixefoYIp4Tons1sR4k49GzAsT0vqXnJT iu45TXeFh2GVv2R4IE/TsD0SkL86KeM0nFsKdNvdNomH54UDnEwdFxXXqz4hUGCP kC1RBczj1vJtejyxxqqPK3f7Dv5V1PnLpnzraUf7PAJVRIFW5ZrRKwMA4nwu3t7/ cexeflYaW0lL9UtCY/3C1bPe5NAoWVcvLXZ+rtzMkxMS1L8xxmWTQb1HIzkbmYjU Is8j1jgZRQ7NTR6SuiFbwpMC8OqSjVziCRuHkQWFRR+2ZB/yNwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFMw0aYMrsCLHs99wAkfjZxTeNPQMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 ZGEyYzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEwZjBiMjk1NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzlkYTJjMTdlLTM4YjUtNDU3NC1i MjczLTM2YTBmMGIyOTU2ZC85ZGEyYzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEwZjBi Mjk1NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXscgDBAKDj5AwDgQCAAIwCAMGACYC+PsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBgyOcAzv00o0zeTAKdWZm+hL0AceeUSiJ3Tns0T2OGvYomKnMgfwWH NWEBDj8IBIXQePugYN4mqwa4w/J3tUfpH+Ktj+pmYkBhlAlovVOFcf5vYMQO1OGd afaw312BnGT9IbHqmnXieHqpnsrBjMCvo66wYXF0BGj9zivBVJVzWgROlMsoEuHa vfo3pAp055l+o5qYI4rKKaClOkdyE84i21hO67+rTvclYyoOh3mvxu14a+HAa+Co luWfrluc9JlnXrzbQ3ON4Icz1C60Lp6RnduzKv/UK+fL8EIxugDGaAb7CrYMOGaL PvgJ35fIpFmMQWJrSp9z4HUJODewBAw= -----END CERTIFICATE-----Generated at Fri Oct 10 15:21:26 2025 by rpki-client