$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632.cer File: 4538806d-1647-4e36-8f5c-ae55c7431632.cer (raw, json) Hash identifier: jeZnvOCATLFHXRZjpdo1xsW8/9J/m5E5G/qpHpb8u1w= Subject key identifier: 06:64:EE:8D:60:E3:1C:17:64:81:0C:93:6C:3D:A2:1D:BA:14:0C:D1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849E87091456DCCA44289242400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 19:08:10 +0000 Certificate not after: Sun 22 Aug 2027 19:08:10 +0000 Subordinate resources: AS: 397244 IP: 23.139.88.0/24 IP: 63.133.214.0/24 IP: 2602:fb67::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e8:70:91:45:6d:cc:a4:42:89:24:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 19 19:08:10 2025 GMT Not After : Aug 22 19:08:10 2027 GMT Subject: CN=4538806d-1647-4e36-8f5c-ae55c7431632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:7d:b3:63:f0:96:c4:65:3a:5b:12:ca:10: 17:f4:52:95:6e:76:91:06:db:7b:51:71:ac:c4:00: d0:53:48:b4:a5:56:0f:50:07:59:78:6e:4c:c8:d7: a9:ad:e0:98:ae:49:9b:ab:ad:0b:46:9c:c6:df:4b: 2b:c6:fe:fa:44:27:63:6b:63:eb:b9:5c:e6:7c:39: 39:01:e6:6d:a8:b6:3c:a1:f9:68:01:8c:84:a5:d7: 09:27:0a:53:a4:68:7b:da:88:22:04:99:67:2c:53: ea:d9:e0:c4:b7:08:54:0c:d1:a0:13:a8:79:50:b6: a6:d5:0e:92:67:f1:f5:9d:d7:34:dd:20:e0:2c:eb: 87:ec:51:9e:96:a4:88:2d:a5:d1:3e:f1:84:4b:6d: ce:ff:eb:14:51:6d:cb:b7:82:14:33:1e:74:0c:03: ee:54:de:97:02:92:12:c9:ab:f5:a0:af:60:15:5a: 43:2e:19:2f:35:e5:91:29:89:f1:88:aa:52:97:f4: f7:2a:ea:5b:92:dd:a3:7f:39:43:30:94:77:19:f4: e4:b5:31:40:f5:29:aa:47:ed:23:fd:be:03:17:25: 4e:d6:bf:da:18:2a:31:61:cc:12:31:84:ed:57:2d: 83:fe:88:ae:2c:2e:1a:92:c6:46:e3:f9:40:17:c1: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:EE:8D:60:E3:1C:17:64:81:0C:93:6C:3D:A2:1D:BA:14:0C:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.88.0/24 63.133.214.0/24 IPv6: 2602:fb67::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397244 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cf:50:f4:79:70:aa:6d:23:ad:02:c5:8d:63:ea:fc:2d:7f: 65:d3:9a:e1:8b:fd:29:e3:37:5b:1f:51:e5:3e:08:a0:77:51: d0:be:f0:2f:b8:b3:94:20:01:a9:a2:ab:45:02:46:16:d5:61: 1b:74:25:17:c5:fe:5e:89:8c:5d:95:0b:fa:ee:b7:e2:17:21: bd:05:7c:10:ba:36:25:83:0e:ec:01:04:1d:1d:fe:d2:ea:df: f9:99:bf:99:7e:30:f8:aa:09:b8:fb:ed:cd:0f:ce:a5:34:ab: be:e6:c1:d6:19:a9:63:4f:42:e2:27:66:38:72:c9:01:48:95: c9:cb:b1:99:db:f8:2e:85:2b:c1:e3:82:63:de:9e:21:b6:6d: 89:37:f7:cf:ff:22:83:14:5e:af:64:2d:19:2d:46:f0:36:21: 68:d4:3a:5c:36:94:d7:01:ea:1d:f7:43:8d:ba:f5:41:ac:47: cd:b0:f5:23:65:e7:0e:3d:17:e0:66:f8:6c:d2:d5:b9:fc:48: 24:e8:eb:e2:d4:b2:87:7f:1c:09:c6:2c:cb:a5:ba:04:ab:1e: 93:16:0a:96:62:b6:1b:68:80:d2:87:25:cc:18:52:58:ea:03: 85:ab:a8:db:f9:59:7e:05:da:b4:46:53:35:f9:47:89:51:7a: 11:c5:9a:e4 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEnocJFFbcykQokkJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxOTE5MDgxMFoXDTI3MDgyMjE5MDgxMFowLzEtMCsGA1UEAxMk NDUzODgwNmQtMTY0Ny00ZTM2LThmNWMtYWU1NWM3NDMxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cZ9s2PwlsRlOlsSyhAX9FKVbnaRBtt7UXGs xADQU0i0pVYPUAdZeG5MyNepreCYrkmbq60LRpzG30srxv76RCdja2PruVzmfDk5 AeZtqLY8ofloAYyEpdcJJwpTpGh72ogiBJlnLFPq2eDEtwhUDNGgE6h5ULam1Q6S Z/H1ndc03SDgLOuH7FGelqSILaXRPvGES23O/+sUUW3Lt4IUMx50DAPuVN6XApIS yav1oK9gFVpDLhkvNeWRKYnxiKpSl/T3Kupbkt2jfzlDMJR3GfTktTFA9SmqR+0j /b4DFyVO1r/aGCoxYcwSMYTtVy2D/oiuLC4aksZG4/lAF8GBywIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAZk7o1g4xwXZIEMk2w9oh26FAzRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 NTM4ODA2ZC0xNjQ3LTRlMzYtOGY1Yy1hZTU1Yzc0MzE2MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ1Mzg4MDZkLTE2NDctNGUzNi04 ZjVjLWFlNTVjNzQzMTYzMi80NTM4ODA2ZC0xNjQ3LTRlMzYtOGY1Yy1hZTU1Yzc0 MzE2MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXi1gDBAA/hdYwDgQCAAIwCAMGBCYC+2cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYPvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCz1D0eXCqbSOtAsWN Y+r8LX9l05rhi/0p4zdbH1HlPgigd1HQvvAvuLOUIAGpoqtFAkYW1WEbdCUXxf5e iYxdlQv67rfiFyG9BXwQujYlgw7sAQQdHf7S6t/5mb+ZfjD4qgm4++3ND86lNKu+ 5sHWGaljT0LiJ2Y4cskBSJXJy7GZ2/guhSvB44Jj3p4htm2JN/fP/yKDFF6vZC0Z LUbwNiFo1DpcNpTXAeod90ONuvVBrEfNsPUjZecOPRfgZvhs0tW5/Egk6Ovi1LKH fxwJxizLpboEqx6TFgqWYrYbaIDShyXMGFJY6gOFq6jb+Vl+Bdq0RlM1+UeJUXoR xZrk -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:51 2025 by rpki-client