$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer File: d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer (raw, json) Hash identifier: lnlrCYqeXPZymnDw2NQA/po6+Ekdqp2b0AkYQyllV3s= Subject key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B71B8CA00E4AFD6BC69A51080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:06:22 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 13437 IP: 23.177.216.0/24 IP: 131.143.152.0/22 IP: 2602:f8f9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:b8:ca:00:e4:af:d6:bc:69:a5:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 16:06:22 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2b:10:eb:8a:f9:ce:08:ce:4b:36:f0:db:6a: 10:1c:27:6d:36:a5:f0:e1:de:0c:60:dd:c9:bc:d2: cc:ac:b3:41:92:6f:98:32:5f:1d:0f:64:f8:b4:e6: ee:5f:ca:2b:5d:52:89:fd:23:e7:68:1d:8a:89:64: ea:8f:59:fb:3f:a4:29:3d:8e:7d:b9:24:75:90:5f: 1e:57:62:25:61:f1:23:fa:fe:0a:10:88:93:5f:8b: 50:58:38:15:f9:60:3f:b4:fe:33:0a:56:5a:0c:af: 38:69:87:dc:1e:2a:a1:1a:92:22:b3:17:1b:5f:1f: 89:fe:e1:a8:2f:08:dc:39:c6:fa:3c:b3:3c:53:a9: 78:a8:4e:14:5f:99:4a:54:8c:8e:d9:73:01:38:8a: ad:62:91:6d:cf:44:2f:ff:a8:e6:ea:c4:07:c8:d0: 5e:75:df:ac:66:69:84:65:32:99:78:7d:11:d3:91: 72:86:0a:5e:75:3e:50:07:f4:c5:b8:5c:67:7e:2a: 04:20:b1:b3:10:ae:22:d6:83:5b:d1:83:1a:09:9c: 89:2e:6f:67:81:79:57:ec:31:b5:eb:32:91:8c:eb: 5d:7b:16:b7:68:81:d2:22:13:b8:60:de:29:c4:64: 0f:31:f7:fe:4d:5e:00:f3:c0:7f:c8:30:58:be:0d: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.216.0/24 131.143.152.0/22 IPv6: 2602:f8f9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ac:35:b3:32:fe:ed:0c:25:95:a9:27:c7:b2:da:f7:a2:f2: 8c:65:d2:d1:ba:5a:4f:ec:2e:71:63:6e:5d:a0:da:9d:9a:7d: 4c:c4:fc:77:67:54:39:c7:98:a4:36:e2:96:e8:f7:d2:a6:34: 76:03:cf:56:9b:71:73:75:f4:4d:8c:e3:cc:f0:7f:f4:ad:e1: 19:72:c4:d8:22:3c:4b:e0:12:3a:38:76:e0:fa:37:4f:02:b2: ac:4f:2e:92:07:fa:4b:13:aa:5a:db:43:16:65:da:8b:1e:63: 59:d0:4f:5b:7b:c0:81:92:75:d9:b5:50:83:5f:e9:a0:5c:e5: f3:ee:4d:c3:a4:22:db:94:53:26:32:e0:c8:b2:dc:ea:c8:08: 8e:82:64:c6:9b:eb:fa:d2:31:95:6f:17:30:c2:8a:5a:0d:18: cf:25:55:7b:6e:bc:00:11:ef:b0:36:63:8f:a3:b3:05:46:81: b0:d8:f8:cd:ab:eb:6f:56:6d:c9:0b:5a:8c:c7:56:e9:51:7d: 0d:7e:bf:9e:49:b0:a0:d8:d3:b2:69:b9:42:79:92:f2:a9:06: bb:20:37:dd:cb:43:ff:60:dd:92:be:92:88:88:eb:49:d9:f7: c3:b3:f6:0b:53:0d:1d:20:61:eb:3c:56:96:18:aa:34:d6:59: de:80:17:01 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEtxuMoA5K/WvGmlEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzE2MDYyMloXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk ZDk4MGEwYTgtNzhiYy00Mjg5LTgyNWQtMWJiOWE1YTE5MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgisQ64r5zgjOSzbw22oQHCdtNqXw4d4MYN3J vNLMrLNBkm+YMl8dD2T4tObuX8orXVKJ/SPnaB2KiWTqj1n7P6QpPY59uSR1kF8e V2IlYfEj+v4KEIiTX4tQWDgV+WA/tP4zClZaDK84aYfcHiqhGpIisxcbXx+J/uGo LwjcOcb6PLM8U6l4qE4UX5lKVIyO2XMBOIqtYpFtz0Qv/6jm6sQHyNBedd+sZmmE ZTKZeH0R05FyhgpedT5QB/TFuFxnfioEILGzEK4i1oNb0YMaCZyJLm9ngXlX7DG1 6zKRjOtdexa3aIHSIhO4YN4pxGQPMff+TV4A88B/yDBYvg05fwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFEwKcFmYFI+i/TyYSuGmLYgBXfsjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k OTgwYTBhOC03OGJjLTQyODktODI1ZC0xYmI5YTVhMTkyYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q5ODBhMGE4LTc4YmMtNDI4OS04 MjVkLTFiYjlhNWExOTJjOC9kOTgwYTBhOC03OGJjLTQyODktODI1ZC0xYmI5YTVh MTkyYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsdgDBAKDj5gwDgQCAAIwCAMGACYC+PkAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjR9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADysNbMy/u0MJZWpJ8ey 2vei8oxl0tG6Wk/sLnFjbl2g2p2afUzE/HdnVDnHmKQ24pbo99KmNHYDz1abcXN1 9E2M48zwf/St4RlyxNgiPEvgEjo4duD6N08CsqxPLpIH+ksTqlrbQxZl2oseY1nQ T1t7wIGSddm1UINf6aBc5fPuTcOkItuUUyYy4Miy3OrICI6CZMab6/rSMZVvFzDC iloNGM8lVXtuvAAR77A2Y4+jswVGgbDY+M2r629WbckLWozHVulRfQ1+v55JsKDY 07JpuUJ5kvKpBrsgN93LQ/9g3ZK+koiI60nZ98Oz9gtTDR0gYes8VpYYqjTWWd6A FwE= -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:45 2025 by rpki-client