$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588.cer File: c6e5e77e-0420-4e23-80ae-ea9df3567588.cer (raw, json) Hash identifier: JspP6ezgPhkyAJ4aVO1NDBC0XvjRENO7ffdi+Zq/1e4= Subject key identifier: A3:AB:D8:85:5F:CF:01:B0:79:EA:3F:99:A7:CA:8A:F5:80:03:0B:98 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849D58D3CC42D9F483BE1DAEC18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/c6e5e77e-0420-4e23-80ae-ea9df3567588.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 00:45:34 +0000 Certificate not after: Mon 16 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 394805 IP: 23.136.192.0/24 IP: 2620:1b:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:8d:3c:c4:2d:9f:48:3b:e1:da:ec:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 13 00:45:34 2025 GMT Not After : Aug 16 00:45:34 2027 GMT Subject: CN=c6e5e77e-0420-4e23-80ae-ea9df3567588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:69:4d:d1:6e:dc:b8:86:a0:b0:0b:d8:0b: 82:db:c7:e5:36:2c:b0:04:cc:b8:8c:d2:0e:55:3d: 97:58:a1:a5:c0:86:af:36:a0:38:5f:28:92:3e:0e: 7f:24:2a:49:1b:3f:c5:58:1a:f8:cd:04:40:6a:d0: 43:68:e8:10:ce:23:1a:06:72:a9:ff:a4:8b:da:f0: 31:69:a7:2b:ee:03:a9:78:f4:8f:86:ff:e0:ed:5b: c1:18:1c:c0:83:cc:46:42:5f:f7:0b:bb:05:88:ab: 26:2c:e6:56:15:15:d9:3c:bb:12:02:93:78:91:d2: 90:d1:ae:8e:ff:a5:42:27:ff:2f:40:96:92:d9:a6: 60:7f:9c:bc:a3:a1:fa:ad:99:92:34:d6:c1:41:fc: 1e:e5:3e:8c:f0:59:07:a1:4d:57:86:38:e0:95:34: 30:0f:3d:25:91:72:d6:e8:cd:d6:a3:35:28:95:35: 41:e2:8d:df:92:35:4f:c6:88:e3:9b:8e:91:76:61: 9d:43:94:88:98:aa:17:83:20:f8:a6:e9:16:46:dd: 24:a6:dc:1b:d1:96:33:54:cd:31:f7:a1:c3:35:d9: 16:e3:9a:ea:22:84:1d:3c:8d:46:06:b4:bb:7b:9c: dc:30:3e:7e:52:81:e4:7e:47:f8:b0:2c:02:c0:d5: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:D8:85:5F:CF:01:B0:79:EA:3F:99:A7:CA:8A:F5:80:03:0B:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/c6e5e77e-0420-4e23-80ae-ea9df3567588.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.192.0/24 IPv6: 2620:1b:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394805 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:41:46:80:53:7d:40:a4:44:7d:1f:02:f5:55:ab:8b:95: 16:13:2d:48:1c:7d:c4:ea:98:eb:68:45:bf:60:61:52:b4:da: e2:41:85:7b:1a:17:90:cd:c5:7c:59:e9:6b:e4:dc:18:41:15: 73:6c:d5:23:74:5e:dd:41:d5:d7:5b:35:09:40:71:a2:a4:df: 46:e7:52:34:a9:f6:78:75:fe:c8:d9:36:af:43:66:44:ae:a8: 21:4a:24:fd:a1:48:f9:33:b7:53:3c:46:8b:cd:3c:f3:77:17: f7:b6:c6:e0:a8:eb:de:be:e1:16:33:34:cf:f1:d3:c6:9a:6f: 32:4e:2f:2c:fd:2f:68:54:e0:fc:48:21:05:ef:fe:0d:00:c9: 4e:ac:d2:9f:a3:75:d8:5f:c1:c2:d3:ae:79:19:a7:bd:63:72: e1:4a:db:27:65:5d:53:24:7e:51:b5:de:19:2f:34:ea:81:76: 74:48:e3:d5:d2:8b:93:d2:fe:6b:d5:a5:6c:1b:cf:99:d8:7c: e5:31:69:cd:79:2e:d0:82:ff:15:d5:c6:01:36:98:d0:f9:03: 0e:79:e8:19:53:d6:f1:89:67:5e:ee:a7:96:26:17:18:ac:44: 38:c4:0b:4b:d1:af:6d:3e:03:a9:3a:13:ff:71:6e:65:0f:21: e0:49:e9:4d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEnVjTzELZ9IO+Ha7BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxMzAwNDUzNFoXDTI3MDgxNjAwNDUzNFowLzEtMCsGA1UEAxMk YzZlNWU3N2UtMDQyMC00ZTIzLTgwYWUtZWE5ZGYzNTY3NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVpTdFu3LiGoLAL2AuC28flNiywBMy4jNIO VT2XWKGlwIavNqA4XyiSPg5/JCpJGz/FWBr4zQRAatBDaOgQziMaBnKp/6SL2vAx aacr7gOpePSPhv/g7VvBGBzAg8xGQl/3C7sFiKsmLOZWFRXZPLsSApN4kdKQ0a6O /6VCJ/8vQJaS2aZgf5y8o6H6rZmSNNbBQfwe5T6M8FkHoU1XhjjglTQwDz0lkXLW 6M3WozUolTVB4o3fkjVPxojjm46RdmGdQ5SImKoXgyD4pukWRt0kptwb0ZYzVM0x 96HDNdkW45rqIoQdPI1GBrS7e5zcMD5+UoHkfkf4sCwCwNVBbwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFKOr2IVfzwGweeo/mafKivWAAwuYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j NmU1ZTc3ZS0wNDIwLTRlMjMtODBhZS1lYTlkZjM1Njc1ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M2ZTVlNzdlLTA0MjAtNGUyMy04 MGFlLWVhOWRmMzU2NzU4OC9jNmU1ZTc3ZS0wNDIwLTRlMjMtODBhZS1lYTlkZjM1 Njc1ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXiMAwDwQCAAIwCQMHACYgABvgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGBjUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg8xBRoBTfUCkRH0fAvVVq4uV FhMtSBx9xOqY62hFv2BhUrTa4kGFexoXkM3FfFnpa+TcGEEVc2zVI3Re3UHV11s1 CUBxoqTfRudSNKn2eHX+yNk2r0NmRK6oIUok/aFI+TO3UzxGi80883cX97bG4Kjr 3r7hFjM0z/HTxppvMk4vLP0vaFTg/EghBe/+DQDJTqzSn6N12F/BwtOueRmnvWNy 4UrbJ2VdUyR+UbXeGS806oF2dEjj1dKLk9L+a9WlbBvPmdh85TFpzXku0IL/FdXG ATaY0PkDDnnoGVPW8YlnXu6nliYXGKxEOMQLS9GvbT4DqToT/3FuZQ8h4EnpTQ== -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:26 2025 by rpki-client