$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer File: bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer (raw, json) Hash identifier: Wqxe5yRhwvEkYaBJPctDvb2DztE7bZLoKlnXjmc6b2E= Subject key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A0A9840B3297C2EFDCAEF0C20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Jun 2025 00:45:37 +0000 Certificate not after: Sat 04 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 22679 IP: 23.172.152.0/24 IP: 2602:f971::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:98:40:b3:29:7c:2e:fd:ca:ef:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 1 00:45:37 2025 GMT Not After : Sep 4 00:45:37 2027 GMT Subject: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:13:bb:3d:a7:9f:04:5b:29:6e:7d:3d:8f: 51:77:04:a5:70:0f:c5:db:c6:1f:99:0b:9a:1e:d0: 37:69:fe:d5:f3:7b:e1:8b:5e:aa:80:5b:6a:ad:53: 1d:ca:42:7e:e2:09:d3:9b:15:9c:3e:b0:d9:bf:aa: 28:ba:15:cf:20:82:0e:92:b8:c7:72:96:c2:90:49: 58:d7:18:dd:24:d5:71:e2:8f:e0:94:e4:8f:72:bf: 4e:35:b2:8b:12:f6:e5:14:23:52:83:88:dd:6d:77: e1:da:0f:9d:e9:01:8d:b0:a1:26:8b:cd:bc:2c:d9: 3b:16:8c:f5:ae:f2:f9:9a:0b:f2:d7:06:14:c9:14: 47:5b:e5:1d:2d:42:52:fe:15:7d:30:64:0f:60:02: 77:a9:87:db:e8:47:b0:bd:f0:b3:c0:5a:3a:1d:bc: 5e:0a:65:30:b7:af:3f:c7:f4:e7:53:cb:f1:3c:93: 6c:ca:f5:ec:2c:68:9c:d5:3c:d8:63:4b:cd:35:e1: ed:5a:1e:41:3a:95:6d:d5:29:dd:a8:1b:df:39:2d: a3:f5:ca:df:cb:6c:60:f2:f9:61:7d:aa:6b:ce:3b: 34:65:6a:dc:08:8b:91:d2:02:0c:76:b6:f1:fe:2b: 5d:f2:c7:b9:f8:77:5b:2b:7d:cc:b5:6a:77:92:8d: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22679 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:06:0f:17:dc:83:f8:fd:cb:85:8c:97:6a:c0:df:53:9f:7c: b8:23:e5:5d:fa:f9:9a:ba:6f:8c:92:92:82:25:9a:25:00:92: 9e:43:df:67:df:90:a1:e0:36:91:28:59:6c:f1:c0:2c:5c:0e: d4:ba:82:ec:16:88:de:40:72:c6:64:b7:7d:be:46:fc:1c:a0: 0b:f2:78:df:b5:74:23:65:65:4c:01:cf:be:c9:69:1c:6c:53: 62:1d:cd:c6:da:cc:d7:2e:31:75:61:22:da:49:10:35:d5:ba: 12:8d:e6:c5:8b:e7:87:6e:1d:e3:10:fa:3c:10:87:b1:c5:ee: 0b:ca:43:00:fa:57:59:c8:ad:2a:d2:6d:d3:82:a5:72:fa:c2: d7:0d:3b:68:c8:20:df:5b:6e:62:8f:04:24:ea:ef:18:f7:11: 0b:57:3a:0d:29:e9:ff:7f:91:1d:98:ad:8d:29:84:a7:fb:d2: c4:e0:16:20:71:22:28:63:66:80:53:d7:e9:e6:22:fb:e7:f9: 39:1c:f9:ba:00:a6:fe:d8:ef:5c:7f:4f:63:02:9b:54:91:88: d2:1c:83:05:af:08:d1:8a:f8:9a:4b:fc:3f:ce:71:0a:06:da: 45:e6:19:1b:8f:2c:b7:54:a9:4b:c7:ad:f2:9e:13:1b:05:5c: 2e:0c:b2:96 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEoKmECzKXwu/crvDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMTAwNDUzN1oXDTI3MDkwNDAwNDUzN1owLzEtMCsGA1UEAxMk YmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoTuz2nnwRbKW59PY9RdwSlcA/F28YfmQua HtA3af7V83vhi16qgFtqrVMdykJ+4gnTmxWcPrDZv6oouhXPIIIOkrjHcpbCkElY 1xjdJNVx4o/glOSPcr9ONbKLEvblFCNSg4jdbXfh2g+d6QGNsKEmi828LNk7Foz1 rvL5mgvy1wYUyRRHW+UdLUJS/hV9MGQPYAJ3qYfb6EewvfCzwFo6HbxeCmUwt68/ x/TnU8vxPJNsyvXsLGic1TzYY0vNNeHtWh5BOpVt1SndqBvfOS2j9crfy2xg8vlh faprzjs0ZWrcCIuR0gIMdrbx/itd8se5+HdbK33MtWp3ko1sHwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN3rw4F1vo+yK0DXsJhv5k8FRjhWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i YzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JjMWIyMmE1LWY1ZTItNDBkMS04 ODI3LWEwY2Y4Yjg1NzJhNS9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4 NTcyYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrJgwDgQCAAIwCAMGBCYC+XEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAliXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJkGDxfcg/j9y4WMl2rA31OffLgj 5V36+Zq6b4ySkoIlmiUAkp5D32ffkKHgNpEoWWzxwCxcDtS6guwWiN5AcsZkt32+ RvwcoAvyeN+1dCNlZUwBz77JaRxsU2IdzcbazNcuMXVhItpJEDXVuhKN5sWL54du HeMQ+jwQh7HF7gvKQwD6V1nIrSrSbdOCpXL6wtcNO2jIIN9bbmKPBCTq7xj3EQtX Og0p6f9/kR2YrY0phKf70sTgFiBxIihjZoBT1+nmIvvn+Tkc+boApv7Y71x/T2MC m1SRiNIcgwWvCNGK+JpL/D/OcQoG2kXmGRuPLLdUqUvHrfKeExsFXC4MspY= -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:28 2025 by rpki-client