$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer File: 2bc7e484-64e7-46cb-a15c-360a60b362d4.cer (raw, json) Hash identifier: O/84swBTh5q6M2zFy4YbCYBSP+//dmCR8YjZO/UEYns= Subject key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849EC71093E2C6F6642DC4BE280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 May 2025 05:32:21 +0000 Certificate not after: Tue 24 Aug 2027 05:32:21 +0000 Subordinate resources: IP: 23.138.252.0/24 IP: 2602:f648::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ec:71:09:3e:2c:6f:66:42:dc:4b:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 21 05:32:21 2025 GMT Not After : Aug 24 05:32:21 2027 GMT Subject: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:3f:10:6b:85:a4:b3:bc:a1:0b:0b:3e:7e: 03:ed:f7:b0:d8:e5:df:ef:e8:e3:d3:53:34:32:a3: 9b:93:50:1a:8a:c7:50:18:46:a4:5d:b9:b0:65:7a: 20:0c:35:4c:7f:70:f9:9e:b9:9c:cb:04:7e:d3:8f: 4c:e9:05:7c:8a:a5:ca:f6:6c:01:b2:e9:19:31:0b: 2e:9f:ee:9a:73:13:2f:7d:e5:17:2a:cb:d8:0e:c9: 4e:f4:f4:1f:69:74:20:22:f4:3c:18:b4:88:c6:7f: b7:c4:c5:37:23:8d:00:2c:16:fd:a5:a7:67:c5:0f: 7c:b8:bf:91:00:a6:e9:e2:ed:e9:44:30:9b:1d:64: 4c:00:0e:8d:20:80:d9:5d:01:07:56:43:7f:91:e1: 22:66:19:ed:1f:98:c7:0c:72:3e:c2:ec:01:6e:c9: e5:e5:26:e2:66:b6:ea:10:eb:3b:f2:90:49:66:5e: bd:65:d4:f3:64:2b:bd:d1:43:21:b9:01:00:5a:9d: 8c:de:c2:64:98:70:b3:5a:d2:7e:b9:e6:b7:5b:fb: 9b:e9:ba:c7:09:c2:e7:02:62:82:39:6e:69:2e:6c: 79:14:6f:2e:4d:09:3b:6e:10:00:74:68:fb:52:51: 47:f4:de:1f:d3:e8:f9:78:e3:19:80:31:0d:fd:e4: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.252.0/24 IPv6: 2602:f648::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a2:06:dc:ef:ff:e9:c0:cb:9e:8c:22:18:20:01:1e:c3:a1: b3:0f:25:7a:5a:86:10:62:20:95:13:4f:4c:36:f0:53:d5:06: bd:e0:8f:21:69:f3:2d:01:d1:88:34:2e:7b:d5:5e:ac:b3:dc: 7d:94:69:ae:05:f3:09:03:bc:cd:e5:79:2d:02:bb:15:93:f9: 32:41:66:c5:c5:af:f0:90:6b:c9:02:54:6a:6e:36:10:d2:8f: 2e:b2:39:89:29:30:7f:a9:5c:6b:81:57:4c:d8:d7:31:b8:3c: 79:86:47:db:31:7b:01:49:ec:88:ae:7a:c9:5c:a6:48:35:f4: 68:ed:67:fa:96:f5:ae:37:4c:68:ec:bc:67:e7:02:12:22:7b: 56:8e:1f:7e:01:81:68:8c:da:8c:b6:77:ab:e6:5c:01:2f:86: b2:90:0c:7e:ea:7b:d3:98:93:5d:6a:42:9f:12:37:fa:52:0d: b4:7b:45:2c:cf:8f:fa:e6:81:af:8e:b3:c4:77:73:0b:4c:de: aa:b4:41:76:57:a3:78:fc:8b:7e:86:00:50:49:59:3a:8d:e6: b6:3d:b0:81:76:56:e5:c4:53:01:97:70:7c:1e:9f:b3:1e:dc: 88:44:f6:ea:3a:17:03:6e:5c:b8:d9:44:63:d1:dc:14:c1:c6: 51:14:21:e0 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEnscQk+LG9mQtxL4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMTA1MzIyMVoXDTI3MDgyNDA1MzIyMVowLzEtMCsGA1UEAxMk MmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNo/EGuFpLO8oQsLPn4D7few2OXf7+jj01M0 MqObk1AaisdQGEakXbmwZXogDDVMf3D5nrmcywR+049M6QV8iqXK9mwBsukZMQsu n+6acxMvfeUXKsvYDslO9PQfaXQgIvQ8GLSIxn+3xMU3I40ALBb9padnxQ98uL+R AKbp4u3pRDCbHWRMAA6NIIDZXQEHVkN/keEiZhntH5jHDHI+wuwBbsnl5SbiZrbq EOs78pBJZl69ZdTzZCu90UMhuQEAWp2M3sJkmHCzWtJ+uea3W/ub6brHCcLnAmKC OW5pLmx5FG8uTQk7bhAAdGj7UlFH9N4f0+j5eOMZgDEN/eTYewIDAQABo4IEDzCC BAswHQYDVR0OBBYEFIUCfYhVzVIUC4AdC5L3gnTAKlpPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiYzdlNDg0LTY0ZTctNDZjYi1h MTVjLTM2MGE2MGIzNjJkNC8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBi MzYyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXivwwDgQCAAIwCAMGACYC9kgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AB+iBtzv/+nAy56MIhggAR7DobMPJXpahhBiIJUTT0w28FPVBr3gjyFp8y0B0Yg0 LnvVXqyz3H2Uaa4F8wkDvM3leS0CuxWT+TJBZsXFr/CQa8kCVGpuNhDSjy6yOYkp MH+pXGuBV0zY1zG4PHmGR9sxewFJ7Iiueslcpkg19GjtZ/qW9a43TGjsvGfnAhIi e1aOH34BgWiM2oy2d6vmXAEvhrKQDH7qe9OYk11qQp8SN/pSDbR7RSzPj/rmga+O s8R3cwtM3qq0QXZXo3j8i36GAFBJWTqN5rY9sIF2VuXEUwGXcHwen7Me3IhE9uo6 FwNuXLjZRGPR3BTBxlEUIeA= -----END CERTIFICATE-----Generated at Sun Oct 26 00:38:00 2025 by rpki-client