$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer File: a4607f8f-ba19-4447-a356-e3ec6823f923.cer (raw, json) Hash identifier: S02nqss9SkmTeW/xMmgRLtbWD4nBAkIl27gbn2s7DvQ= Subject key identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B381A06F47DB1567C0C49C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:45:24 +0000 Certificate not after: Tue 21 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 400938 IP: 23.143.248.0/24 IP: 74.120.232.0/22 IP: 2602:fad1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1a:06:f4:7d:b1:56:7c:0c:49:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 17 00:45:24 2025 GMT Not After : Dec 21 01:45:24 2027 GMT Subject: CN=a4607f8f-ba19-4447-a356-e3ec6823f923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:82:ff:ed:92:f5:98:b4:6e:7d:9e:4c:b1: a3:7b:85:ab:3f:5b:2f:b5:9c:04:8a:5b:cf:73:52: 42:00:31:ec:43:a7:94:cc:0a:a6:6e:6f:54:ea:24: e0:77:0c:75:99:72:7c:54:43:07:37:f8:96:4d:dc: 91:c2:5d:3b:ab:61:5f:7e:ab:6e:4e:bd:51:3a:fd: a5:16:18:d0:e2:a3:63:be:07:bc:45:ca:c1:9b:ec: 56:48:f3:d7:27:d9:e5:68:ad:db:2a:ca:a3:02:35: 41:c1:63:a9:c3:b0:fb:9e:d8:ba:08:fb:86:be:99: 16:09:c4:19:5a:c7:ab:ca:66:57:2a:03:1b:9e:f8: 72:e8:3b:27:9e:78:4e:e3:f0:67:73:37:d4:f0:f5: e0:88:ef:90:d8:68:9a:9b:04:d2:87:75:3e:56:15: 38:61:c3:21:f9:8a:72:b6:19:f4:e9:69:d4:06:b8: fa:d0:ed:c3:c8:28:49:5a:8c:af:7b:bb:2e:ac:61: 14:d1:a1:fc:c4:b7:3d:a8:f7:52:72:71:b7:8c:0f: e6:65:50:ba:a0:27:14:ea:ed:5e:d2:6a:27:12:7d: f8:46:6a:ad:f0:f4:fc:21:a0:c5:21:4c:3c:73:a7: d6:1f:5f:71:a1:71:15:6f:2e:5c:8f:dc:4d:cf:16: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.143.248.0/24 74.120.232.0/22 IPv6: 2602:fad1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400938 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a5:ff:ce:93:27:f4:f8:98:25:78:9d:bd:24:94:cf:10:67: f2:1f:47:c4:71:2b:c2:28:e7:c6:3e:4a:48:05:f1:9f:ce:b3: 5c:f9:fd:5c:52:fd:15:20:25:b6:40:3b:9f:47:7a:23:a8:a2: 2c:80:c8:c9:53:f2:08:9d:3c:94:72:0d:1a:33:bd:f7:85:de: 4b:fb:1c:fb:a2:29:f3:6e:11:08:14:ba:9b:1c:5c:e0:13:00: 22:66:a9:ae:4a:8f:35:3d:4b:2a:24:a9:43:99:3e:36:63:39: b1:3e:92:c8:6a:cc:12:13:03:52:63:8a:1a:09:11:7e:14:12: 27:ed:1e:fe:4b:60:ce:8e:b8:94:96:c0:e1:1e:14:fe:15:8b: c1:95:ad:8d:6f:9d:9d:9e:ea:34:37:f3:74:28:e5:92:9d:a6: 73:da:e7:0b:60:79:3f:64:61:99:f8:7d:8d:ac:ea:88:67:40: 40:08:6a:54:a2:35:89:11:33:f2:df:1f:88:a3:23:aa:84:7a: 0e:6d:e8:3e:e2:ed:e8:69:29:52:e5:24:15:b3:8d:66:7e:e3: 81:12:75:83:1e:10:c5:f1:9f:87:d0:eb:39:ce:d5:a7:b7:41: 4f:8f:bf:ec:6e:87:c5:45:66:1f:e2:a2:03:b8:f6:f4:ce:66: c1:7b:b1:99 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEs4Ggb0fbFWfAxJyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNzAwNDUyNFoXDTI3MTIyMTAxNDUyNFowLzEtMCsGA1UEAxMk YTQ2MDdmOGYtYmExOS00NDQ3LWEzNTYtZTNlYzY4MjNmOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1aC/+2S9Zi0bn2eTLGje4WrP1svtZwEilvP c1JCADHsQ6eUzAqmbm9U6iTgdwx1mXJ8VEMHN/iWTdyRwl07q2FffqtuTr1ROv2l FhjQ4qNjvge8RcrBm+xWSPPXJ9nlaK3bKsqjAjVBwWOpw7D7nti6CPuGvpkWCcQZ WserymZXKgMbnvhy6DsnnnhO4/BnczfU8PXgiO+Q2GiamwTSh3U+VhU4YcMh+Ypy thn06WnUBrj60O3DyChJWoyve7surGEU0aH8xLc9qPdScnG3jA/mZVC6oCcU6u1e 0monEn34Rmqt8PT8IaDFIUw8c6fWH19xoXEVby5cj9xNzxbl2QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFD2WfSwm3aIXX8mDMwtDSqo4dAEwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h NDYwN2Y4Zi1iYTE5LTQ0NDctYTM1Ni1lM2VjNjgyM2Y5MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E0NjA3ZjhmLWJhMTktNDQ0Ny1h MzU2LWUzZWM2ODIzZjkyMy9hNDYwN2Y4Zi1iYTE5LTQ0NDctYTM1Ni1lM2VjNjgy M2Y5MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXj/gDBAJKeOgwDgQCAAIwCAMGBCYC+tEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8pf/Okyf0+JgleJ29 JJTPEGfyH0fEcSvCKOfGPkpIBfGfzrNc+f1cUv0VICW2QDufR3ojqKIsgMjJU/II nTyUcg0aM733hd5L+xz7oinzbhEIFLqbHFzgEwAiZqmuSo81PUsqJKlDmT42Yzmx PpLIaswSEwNSY4oaCRF+FBIn7R7+S2DOjriUlsDhHhT+FYvBla2Nb52dnuo0N/N0 KOWSnaZz2ucLYHk/ZGGZ+H2NrOqIZ0BACGpUojWJETPy3x+IoyOqhHoObeg+4u3o aSlS5SQVs41mfuOBEnWDHhDF8Z+H0Os5ztWnt0FPj7/sbofFRWYf4qIDuPb0zmbB e7GZ -----END CERTIFICATE-----Generated at Fri Oct 10 15:19:42 2025 by rpki-client