$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer File: 2bf72053-6e89-4e8b-8a04-02150ff7c010.cer (raw, json) Hash identifier: ds1rcemeuVjlByzlOf82u9jKCAMJAO5hau74rM7KR2o= Subject key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A5D86C4860304CEC70D21C9F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 17:42:29 +0000 Certificate not after: Wed 29 Sep 2027 20:37:36 +0000 Subordinate resources: AS: 398338 IP: 23.140.212.0/24 IP: 2602:f605::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:86:c4:86:03:04:ce:c7:0d:21:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 17:42:29 2025 GMT Not After : Sep 29 20:37:36 2027 GMT Subject: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:63:ab:81:69:d5:58:33:1b:7c:b9:87:e9: 93:29:dd:6c:0d:04:c4:eb:79:f8:d4:10:8e:88:73: 9a:6c:09:ff:1a:29:33:d2:cd:7b:96:61:f3:d0:97: 55:fe:0b:16:3b:d2:6e:1e:4c:da:cc:8f:0b:82:ce: e9:a9:53:89:92:78:c2:f6:54:91:1b:36:85:76:b2: 72:0d:29:4d:9d:b9:3b:0e:0a:30:b7:d4:37:22:e2: ac:f0:05:4b:83:d9:52:18:3d:51:1c:ed:aa:c4:4e: 59:d4:91:04:e2:f6:27:15:14:c9:f3:f5:95:7e:c7: 95:89:b9:ce:40:59:4c:42:c1:be:7c:d6:5a:9a:7a: 78:40:7a:36:e0:b0:e8:84:73:28:3e:a9:1b:1a:d9: f5:c6:f1:3a:96:2f:47:45:a1:84:e5:6b:24:90:90: c9:8a:49:63:3b:f2:72:af:d1:f7:0c:ab:d8:8a:0f: 84:0d:ce:67:2e:4f:9f:c5:f5:8a:da:f2:91:9b:66: 6f:23:71:0a:cf:d7:4a:e2:46:ef:9e:1e:aa:db:de: a0:01:25:96:86:d6:e6:4b:c8:6e:eb:ce:98:8c:e7: 29:63:8c:7e:0c:06:6c:22:87:8c:d6:e6:40:03:55: fe:a5:21:17:7f:d4:8c:d8:97:f5:2e:e7:e4:5d:c3: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.212.0/24 IPv6: 2602:f605::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:64:d3:3a:a3:e9:cc:03:f7:7d:28:44:f1:73:e2:d8:f7:44: 25:1a:bd:6e:dd:92:40:31:56:95:ad:df:fb:60:1c:3e:03:12: 56:e0:ab:7a:24:67:18:f3:48:53:21:0e:25:9f:74:d8:0c:db: bf:34:63:65:58:92:d0:55:e3:b8:fe:3d:c8:dd:ff:7e:7c:ba: bd:f5:ab:e4:2b:85:20:9a:ff:cb:e8:21:95:6a:f9:34:fb:59: 9c:7f:4a:b1:b8:b7:91:b6:9d:21:79:01:15:cc:c8:41:31:4a: a5:40:fe:15:a2:93:b0:4d:1f:a8:1c:cb:57:b5:6d:2b:8c:ba: 68:8c:bd:09:04:31:b9:d2:b5:e6:b8:39:52:ab:16:06:31:b6: 10:e8:9f:1a:0d:72:6a:a6:be:93:d2:64:84:f5:0d:63:49:13: 00:87:6b:73:14:f5:71:71:d3:3b:4e:9a:66:d2:a8:f1:42:75: 35:b5:73:0a:fa:c4:8b:19:a5:60:90:77:76:c1:20:95:97:8c: d5:27:20:bd:4c:dc:47:42:a6:db:f1:d4:c7:65:d4:19:be:96: ec:6f:c6:ad:a0:60:11:e7:3a:ed:63:56:c7:a5:be:8f:90:b9: 8c:5b:2b:36:ab:41:07:d6:b3:32:9c:d8:1c:e1:f0:eb:7b:91: 98:0c:f1:16 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpdhsSGAwTOxw0hyfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYzMDE3NDIyOVoXDTI3MDkyOTIwMzczNlowLzEtMCsGA1UEAxMk MmJmNzIwNTMtNmU4OS00ZThiLThhMDQtMDIxNTBmZjdjMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75jq4Fp1VgzG3y5h+mTKd1sDQTE63n41BCO iHOabAn/Gikz0s17lmHz0JdV/gsWO9JuHkzazI8Lgs7pqVOJknjC9lSRGzaFdrJy DSlNnbk7Dgowt9Q3IuKs8AVLg9lSGD1RHO2qxE5Z1JEE4vYnFRTJ8/WVfseVibnO QFlMQsG+fNZamnp4QHo24LDohHMoPqkbGtn1xvE6li9HRaGE5WskkJDJikljO/Jy r9H3DKvYig+EDc5nLk+fxfWK2vKRm2ZvI3EKz9dK4kbvnh6q296gASWWhtbmS8hu 686YjOcpY4x+DAZsIoeM1uZAA1X+pSEXf9SM2Jf1LufkXcPy9wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMX+LOU3Rk+Qq5hXz3jPFsyLgM//MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZmN2MwMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiZjcyMDUzLTZlODktNGU4Yi04 YTA0LTAyMTUwZmY3YzAxMC8yYmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZm N2MwMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjNQwDgQCAAIwCAMGBCYC9gUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYUAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYZNM6o+nMA/d9KETxc+LY90Ql Gr1u3ZJAMVaVrd/7YBw+AxJW4Kt6JGcY80hTIQ4ln3TYDNu/NGNlWJLQVeO4/j3I 3f9+fLq99avkK4Ugmv/L6CGVavk0+1mcf0qxuLeRtp0heQEVzMhBMUqlQP4VopOw TR+oHMtXtW0rjLpojL0JBDG50rXmuDlSqxYGMbYQ6J8aDXJqpr6T0mSE9Q1jSRMA h2tzFPVxcdM7Tppm0qjxQnU1tXMK+sSLGaVgkHd2wSCVl4zVJyC9TNxHQqbb8dTH ZdQZvpbsb8atoGAR5zrtY1bHpb6PkLmMWys2q0EH1rMynNgc4fDre5GYDPEW -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:43 2025 by rpki-client