$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer File: 5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer (raw, json) Hash identifier: gOv+Lkn7mRz/DPtPVi1bFTlcMaz18OBV5RLVF6s+Uu4= Subject key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C3A54AA7B03CD17AF4AEEA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 14:49:30 +0000 Certificate not after: Mon 09 Aug 2027 14:49:30 +0000 Subordinate resources: AS: 401696 AS: 401701 IP: 23.138.12.0/24 IP: 2602:f673::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:a5:4a:a7:b0:3c:d1:7a:f4:ae:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 6 14:49:30 2025 GMT Not After : Aug 9 14:49:30 2027 GMT Subject: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:d1:a3:a8:84:ae:a3:72:5c:5c:e4:11:38: 0d:b4:7e:b4:49:3b:37:ce:5e:8e:48:a2:0e:8a:70: 63:67:8b:64:a4:ca:59:ac:be:63:67:fb:f6:80:82: 74:da:e3:f7:2b:2a:e4:9d:bd:fd:38:ab:90:d7:0f: a6:b2:24:bd:0e:24:83:53:7e:24:dc:32:6f:09:52: d5:13:6a:39:b2:2c:28:e1:bb:78:7e:87:79:5d:22: 36:87:dc:8b:ad:6a:31:53:7a:dc:5c:1c:54:bc:9a: 0a:d8:35:7f:6c:db:38:ac:23:82:7a:ef:f5:05:9a: 92:d3:54:43:a6:78:3f:e8:18:03:1e:ae:e2:6d:ae: 67:75:b4:fe:e4:f3:f3:07:78:05:ff:8e:b4:2a:9d: 32:0a:bf:29:06:79:da:93:71:52:bf:6d:94:e3:71: 13:96:c4:44:ec:03:6e:b1:55:d4:7d:78:db:b1:66: 0e:21:87:6a:b4:68:85:c4:6b:15:d1:ec:5d:7d:b4: 0f:ee:1f:0f:15:71:61:73:c4:cd:37:a5:c9:ca:5d: e7:e6:39:67:40:a1:19:08:4f:1e:3a:53:27:51:68: 92:ad:9d:7f:46:43:6d:59:1b:ba:96:b6:43:b2:25: aa:40:9a:88:3f:28:11:69:da:35:1f:4e:ee:1d:7a: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.12.0/24 IPv6: 2602:f673::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401696 401701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:51:0b:dc:f4:c8:47:71:12:6a:84:52:90:83:61:19:cf:e6: 45:25:8e:d3:a3:b9:61:b1:05:3f:70:95:b6:d8:fd:7e:fe:5e: ff:a5:c0:a1:cd:dd:c0:b0:fd:29:a3:bc:ff:56:18:9e:7d:ea: fd:31:f6:31:6a:c5:08:c5:2c:a0:4f:cf:27:c2:1f:a4:b6:d1: d5:a9:5e:7a:6f:85:f9:2f:84:fe:7c:12:26:eb:2d:26:e6:13: 3b:b6:1b:d6:06:89:6a:9d:13:0a:55:52:92:3f:78:26:6f:2d: 21:06:02:59:b8:99:3a:40:be:08:79:14:89:81:49:89:09:d4: 04:b0:0c:61:e8:07:79:bc:9e:ae:83:94:56:7e:f5:59:99:91: 21:75:6a:21:0c:f6:5c:4f:b0:ba:55:7d:a0:1d:5d:7d:77:55: 42:83:90:07:b6:7b:88:f6:ad:a2:f3:b7:35:aa:9c:f7:b8:b5: 86:ab:a7:a6:c6:70:34:f4:78:35:3a:f4:cc:12:f1:ee:ce:bf: 39:3b:4e:f7:34:cb:51:ec:f8:7b:d7:ce:50:5b:9c:63:7d:56: ff:bd:c8:81:95:ac:6a:46:c7:39:d0:11:53:06:c3:01:48:a2: d3:a9:37:e4:cb:eb:bb:e1:51:1a:e9:77:3c:c6:16:ab:d7:0e: 30:87:31:02 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEnDpUqnsDzRevSu6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwNjE0NDkzMFoXDTI3MDgwOTE0NDkzMFowLzEtMCsGA1UEAxMk NWI2ZTlmOWEtN2FiZC00MzZlLThlOTYtYzM0ODgyOWJhNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLvRo6iErqNyXFzkETgNtH60STs3zl6OSKIO inBjZ4tkpMpZrL5jZ/v2gIJ02uP3Kyrknb39OKuQ1w+msiS9DiSDU34k3DJvCVLV E2o5siwo4bt4fod5XSI2h9yLrWoxU3rcXBxUvJoK2DV/bNs4rCOCeu/1BZqS01RD png/6BgDHq7iba5ndbT+5PPzB3gF/460Kp0yCr8pBnnak3FSv22U43ETlsRE7ANu sVXUfXjbsWYOIYdqtGiFxGsV0exdfbQP7h8PFXFhc8TNN6XJyl3n5jlnQKEZCE8e OlMnUWiSrZ1/RkNtWRu6lrZDsiWqQJqIPygRado1H07uHXq73wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFN+6kBFofXhCENDMEj0vI///splWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YjZlOWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4ODI5YmE0ZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzViNmU5ZjlhLTdhYmQtNDM2ZS04 ZTk2LWMzNDg4MjliYTRlNC81YjZlOWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4ODI5 YmE0ZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXigwwDgQCAAIwCAMGACYC9nMAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwYhIAIDBiElMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJRRC9z0yEdxEmqEUpCD YRnP5kUljtOjuWGxBT9wlbbY/X7+Xv+lwKHN3cCw/SmjvP9WGJ596v0x9jFqxQjF LKBPzyfCH6S20dWpXnpvhfkvhP58EibrLSbmEzu2G9YGiWqdEwpVUpI/eCZvLSEG Alm4mTpAvgh5FImBSYkJ1ASwDGHoB3m8nq6DlFZ+9VmZkSF1aiEM9lxPsLpVfaAd XX13VUKDkAe2e4j2raLztzWqnPe4tYarp6bGcDT0eDU69MwS8e7Ovzk7Tvc0y1Hs +HvXzlBbnGN9Vv+9yIGVrGpGxznQEVMGwwFIotOpN+TL67vhURrpdzzGFqvXDjCH MQI= -----END CERTIFICATE-----Generated at Sun Oct 26 00:42:57 2025 by rpki-client