$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer File: 22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer (raw, json) Hash identifier: LzIf8aT5gdJ57UL1aCMt9SHsd+BDuMV5SBS1dLpcNrc= Subject key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A60CB0EF5AA9734BE0A607850 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 21:47:30 +0000 Certificate not after: Mon 04 Oct 2027 21:47:30 +0000 Subordinate resources: AS: 63201 IP: 52.129.36.0/23 IP: 104.193.116.0/22 IP: 141.193.235.0/24 IP: 147.160.168.0/23 IP: 147.185.190.0/24 IP: 148.59.214.0/23 IP: 161.38.186.0/23 IP: 161.199.19.0/24 IP: 161.199.246.0/24 IP: 204.68.232.0/23 IP: 204.225.124.0/24 IP: 205.174.158.0/24 IP: 206.223.98.0/24 IP: 213.159.132.0/22 IP: 2606:b380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:cb:0e:f5:aa:97:34:be:0a:60:78:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 1 21:47:30 2025 GMT Not After : Oct 4 21:47:30 2027 GMT Subject: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:91:f7:ce:d0:68:c6:a9:d3:da:67:7f:55: a6:50:3c:ab:10:38:a0:69:cc:2b:fc:4b:8a:65:89: a3:59:71:df:66:34:52:c3:5c:58:9d:ec:25:e9:66: dc:60:c6:55:0e:eb:c8:d1:d5:6b:4e:9b:12:37:69: 5a:20:a3:f0:5c:a3:cd:de:50:21:19:7c:e7:e6:31: 87:21:a6:72:16:1c:3e:f7:a2:ad:21:41:6e:0b:f2: a9:19:24:36:98:c9:31:4e:0a:cd:36:80:d0:76:43: 4e:69:63:c9:c2:66:79:5e:03:60:27:51:9e:3a:4e: 5c:71:bf:e3:fd:cf:61:a2:9f:85:f5:75:69:c7:d9: c6:c1:c1:66:9b:24:f1:ac:e1:1d:db:e4:d0:91:c0: 9f:ab:c1:f2:3c:97:68:57:4f:90:bc:e3:6f:08:f2: bd:1d:e8:d1:00:fb:67:3a:ac:13:e2:04:dd:cf:5f: b7:64:98:40:70:ed:56:2e:ae:fe:80:c6:85:6c:58: 4a:d8:f3:7e:88:d9:7e:d5:c9:85:72:80:ca:58:72: ed:08:8c:03:8b:5f:f7:db:b7:99:81:30:78:7a:2c: 42:a9:a4:52:39:f0:c9:c1:67:ce:c3:45:30:8a:9b: 0b:60:de:a5:f8:53:7a:5d:0e:10:d3:45:7c:82:3f: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 52.129.36.0/23 104.193.116.0/22 141.193.235.0/24 147.160.168.0/23 147.185.190.0/24 148.59.214.0/23 161.38.186.0/23 161.199.19.0/24 161.199.246.0/24 204.68.232.0/23 204.225.124.0/24 205.174.158.0/24 206.223.98.0/24 213.159.132.0/22 IPv6: 2606:b380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4b:5e:47:04:75:75:87:2d:47:84:b5:5e:c2:f8:09:fa:21: fe:65:29:52:23:2e:d7:a1:85:4c:cc:1c:29:be:dc:cb:b8:fb: 21:d4:01:cf:67:d2:d0:9f:95:7a:a1:5d:7d:ab:b5:46:22:07: bc:9e:95:34:f0:b0:d5:ab:ce:18:19:2a:dc:e4:ee:f1:bc:61: e0:ef:b2:95:eb:34:71:38:ca:d9:7a:2e:1c:65:c2:61:d9:4b: ed:b9:99:9f:11:83:21:fd:17:e5:47:7a:63:2a:1f:2a:f2:76: 0d:55:19:06:0e:23:9d:b5:66:5f:83:b0:8c:20:67:64:1d:dc: ec:a9:62:6f:f1:9e:a2:9e:79:15:b4:50:83:b4:92:e4:b8:f3: 7c:e6:e7:02:22:0e:68:d6:be:6e:cb:e9:12:6e:9d:df:30:ba: 2c:ed:d7:1e:54:c1:13:0d:3b:cf:fb:fa:48:89:45:48:14:4b: f5:08:0c:c9:72:51:88:fb:83:e2:04:7a:e2:22:f4:bd:9e:6a: be:65:e5:ed:a1:41:3a:df:05:31:42:69:a7:dc:d2:63:d4:92: 37:37:e6:ab:38:2f:3b:97:e2:22:7c:78:be:80:eb:bb:74:ab: 21:f5:f0:00:af:cf:1c:2f:14:05:f1:3a:a0:6f:d1:5f:2a:1f: 42:02:4b:5c -----BEGIN CERTIFICATE----- MIIHZjCCBk6gAwIBAgIUAQ0Mn0MoWEpgyw71qpc0vgpgeFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDcwMTIxNDczMFoXDTI3MTAwNDIxNDczMFowLzEtMCsGA1UEAxMk MjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2EzODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o2R987QaMap09pnf1WmUDyrEDigacwr/EuK ZYmjWXHfZjRSw1xYnewl6WbcYMZVDuvI0dVrTpsSN2laIKPwXKPN3lAhGXzn5jGH IaZyFhw+96KtIUFuC/KpGSQ2mMkxTgrNNoDQdkNOaWPJwmZ5XgNgJ1GeOk5ccb/j /c9hop+F9XVpx9nGwcFmmyTxrOEd2+TQkcCfq8HyPJdoV0+QvONvCPK9HejRAPtn OqwT4gTdz1+3ZJhAcO1WLq7+gMaFbFhK2PN+iNl+1cmFcoDKWHLtCIwDi1/327eZ gTB4eixCqaRSOfDJwWfOw0UwipsLYN6l+FN6XQ4Q00V8gj84eQIDAQABo4IEeDCC BHQwHQYDVR0OBBYEFHutwPsL30NqyMilnls9RBKUo1w/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIyZDBlMDJhLWU0ZjAtNDk2MC1h ZDc5LTY4ZjNiNTNhMzg2MS8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUz YTM4NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFoEAgABMFQDBAE0gSQDBAJowXQDBACNwesDBAGToKgDBACTub4D BAGUO9YDBAGhJroDBAChxxMDBAChx/YDBAHMROgDBADM4XwDBADNrp4DBADO32ID BALVn4QwDQQCAAIwBwMFACYGs4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPbh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZLXkcEdXWHLUeEtV7C+An6If5lKVIjLtehhUzMHCm+3Mu4+yHU Ac9n0tCflXqhXX2rtUYiB7yelTTwsNWrzhgZKtzk7vG8YeDvspXrNHE4ytl6Lhxl wmHZS+25mZ8RgyH9F+VHemMqHyrydg1VGQYOI521Zl+DsIwgZ2Qd3OypYm/xnqKe eRW0UIO0kuS483zm5wIiDmjWvm7L6RJund8wuizt1x5UwRMNO8/7+kiJRUgUS/UI DMlyUYj7g+IEeuIi9L2ear5l5e2hQTrfBTFCaafc0mPUkjc35qs4LzuX4iJ8eL6A 67t0qyH18ACvzxwvFAXxOqBv0V8qH0ICS1w= -----END CERTIFICATE-----Generated at Sun Oct 26 00:44:30 2025 by rpki-client