$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer File: 8efd04a1-8809-4ec9-958e-8c9da694afe4.cer (raw, json) Hash identifier: dDQ3JkEQAfU2yjpUnTsAkLHuJ3cK5w4ZGydB9wEiBSU= Subject key identifier: DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B6E875AF4D0DC77A6DBDDF620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 12:39:21 +0000 Certificate not after: Sun 23 May 2027 21:00:28 +0000 Subordinate resources: AS: 396067 IP: 168.151.230.0/23 IP: 2602:fa12::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:87:5a:f4:d0:dc:77:a6:db:dd:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 6 12:39:21 2025 GMT Not After : May 23 21:00:28 2027 GMT Subject: CN=8efd04a1-8809-4ec9-958e-8c9da694afe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:0f:a5:91:42:01:12:dc:66:fe:bb:6e:e1: e0:4a:21:d3:c2:8c:3c:02:28:06:05:d1:a5:fd:ec: 53:67:e3:a2:8c:53:5f:f9:47:d2:78:ec:c7:4f:7b: 6c:6d:5d:d7:4a:ea:df:97:ce:2d:75:f8:a5:05:66: 46:9b:86:df:cd:ee:3c:bc:03:74:3e:24:03:fd:f4: 81:04:6a:35:b2:cb:30:82:76:e1:54:34:f1:36:bc: 1d:75:ea:af:ea:8e:97:7e:2c:08:62:63:b0:14:78: 8c:3e:a1:6e:90:59:0d:49:9a:25:b3:4c:ca:94:f3: e5:f3:ad:84:7f:98:2e:ae:de:29:3a:20:5e:db:d5: 48:d1:46:d4:c5:6c:35:56:42:6a:64:94:aa:d6:34: a7:f9:33:ff:af:e6:bf:89:8d:79:3b:b5:b5:aa:b3: f5:f4:5e:46:c7:0d:41:3c:1a:8d:4a:07:53:b2:69: 67:6c:b8:f8:70:d2:d2:0b:52:d9:69:52:98:da:b2: 54:92:6e:e3:64:21:2d:67:3b:95:dd:80:74:94:48: 53:e3:dc:11:1a:e1:cf:2f:b0:d4:57:13:a6:31:79: 66:1e:36:8c:ac:6a:91:8c:71:26:65:e7:45:fd:6d: b2:82:69:aa:4f:1d:ad:f7:20:c4:b3:36:59:a7:b0: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 168.151.230.0/23 IPv6: 2602:fa12::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396067 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:bb:94:24:6f:be:de:ca:04:12:f7:3f:b7:ef:7f:c1:15:52: 8e:69:7e:65:59:3b:d3:85:a0:cc:72:8c:cf:98:70:bd:2f:be: 03:98:04:e6:77:d3:0c:10:49:da:0b:3b:5a:94:5a:ee:13:61: 80:87:8f:5f:f1:65:39:e0:da:e4:4a:83:a9:22:87:11:8b:ae: e3:85:c8:f1:d0:93:d5:28:48:da:a5:59:bd:bc:14:bf:2d:ab: 3a:44:36:6e:3c:8d:d4:bc:d4:63:31:04:3e:c5:fd:4a:1b:a0: f3:d5:3f:a6:72:da:be:b8:8a:4a:91:a1:5c:a9:3d:4e:91:41: 58:c2:ac:12:c2:59:1f:ac:fe:ba:f4:8c:99:86:12:0e:fe:c1: a4:01:70:9d:88:ec:3e:fa:18:50:6f:00:a8:63:af:47:7a:8a: f7:3a:e9:5e:2d:42:61:6c:43:59:84:32:60:82:b5:73:de:bb: 65:6b:10:46:cf:cf:08:19:4a:28:1d:28:50:1b:ab:a5:5d:15: 59:3e:e7:33:5c:68:0a:5b:d3:b7:ca:db:b3:51:99:94:c5:f5: 4c:ab:71:00:26:1d:7b:09:c6:e0:07:bc:af:60:64:1a:e5:6e: 6b:1b:77:b6:e8:6a:86:a9:70:a0:fb:51:98:e5:2d:dd:47:f4: 61:04:40:b0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtuh1r00Nx3ptvd9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAwNjEyMzkyMVoXDTI3MDUyMzIxMDAyOFowLzEtMCsGA1UEAxMk OGVmZDA0YTEtODgwOS00ZWM5LTk1OGUtOGM5ZGE2OTRhZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxcPpZFCARLcZv67buHgSiHTwow8AigGBdGl /exTZ+OijFNf+UfSeOzHT3tsbV3XSurfl84tdfilBWZGm4bfze48vAN0PiQD/fSB BGo1ssswgnbhVDTxNrwddeqv6o6XfiwIYmOwFHiMPqFukFkNSZols0zKlPPl862E f5gurt4pOiBe29VI0UbUxWw1VkJqZJSq1jSn+TP/r+a/iY15O7W1qrP19F5Gxw1B PBqNSgdTsmlnbLj4cNLSC1LZaVKY2rJUkm7jZCEtZzuV3YB0lEhT49wRGuHPL7DU VxOmMXlmHjaMrGqRjHEmZedF/W2ygmmqTx2t9yDEszZZp7CPhQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN2cQzw+ga3A73hP5+nlzkRXdW94MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZWZkMDRhMS04ODA5LTRlYzktOTU4ZS04YzlkYTY5NGFmZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhlZmQwNGExLTg4MDktNGVjOS05 NThlLThjOWRhNjk0YWZlNC84ZWZkMDRhMS04ODA5LTRlYzktOTU4ZS04YzlkYTY5 NGFmZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGol+YwDgQCAAIwCAMGACYC+hIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYLIzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpu5Qkb77eygQS9z+373/BFVKO aX5lWTvThaDMcozPmHC9L74DmATmd9MMEEnaCztalFruE2GAh49f8WU54NrkSoOp IocRi67jhcjx0JPVKEjapVm9vBS/Las6RDZuPI3UvNRjMQQ+xf1KG6Dz1T+mctq+ uIpKkaFcqT1OkUFYwqwSwlkfrP669IyZhhIO/sGkAXCdiOw++hhQbwCoY69Heor3 OuleLUJhbENZhDJggrVz3rtlaxBGz88IGUooHShQG6ulXRVZPuczXGgKW9O3ytuz UZmUxfVMq3EAJh17CcbgB7yvYGQa5W5rG3e26GqGqXCg+1GY5S3dR/RhBECw -----END CERTIFICATE-----Generated at Fri Oct 10 09:55:40 2025 by rpki-client