$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer File: 8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer (raw, json) Hash identifier: 1VdesUT4ZVEw1WgNv9XYymRBoSu17I70qMAwK5UbvYg= Subject key identifier: 34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858498BBC6B83CE92B4353179CD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Apr 2025 14:10:50 +0000 Certificate not after: Tue 20 Jul 2027 14:10:50 +0000 Subordinate resources: IP: 23.137.188.0/24 IP: 2602:f67e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:bc:6b:83:ce:92:b4:35:31:79:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 16 14:10:50 2025 GMT Not After : Jul 20 14:10:50 2027 GMT Subject: CN=8f9ed5df-dc06-4b74-8864-d26d2a6a0abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:94:ab:58:60:d4:0c:f6:e0:51:1f:ef:55:aa: 41:bb:9a:04:64:b8:fb:9a:7d:8c:af:04:f1:e1:36: 51:3a:87:0e:c7:a6:09:f7:ec:5e:e4:58:66:b4:28: b3:68:d7:8a:7a:3b:0f:b0:0d:09:4e:24:2f:2e:f4: 9d:86:71:bf:fd:12:50:5f:d2:c3:76:b4:1e:93:07: da:7d:bf:15:71:e6:04:4a:ff:79:d7:e3:3d:49:6c: 80:15:f5:a2:bd:cf:ee:fc:67:72:3f:31:95:16:3f: 32:ea:d1:01:81:13:ff:47:89:07:91:c8:7c:db:dc: 47:0d:fe:1e:ed:d2:0f:9d:1f:df:5d:21:38:fa:c8: df:82:80:06:09:a3:32:b6:07:16:bb:b7:e8:60:22: 76:4e:9e:fe:9d:37:0a:3b:65:35:f2:9f:f8:49:12: 1e:4d:d6:ca:2f:15:c3:88:d2:92:09:69:34:55:df: 92:c6:32:18:07:bb:01:d9:b4:41:57:86:df:e8:17: 24:86:94:aa:a1:a3:0d:e6:63:70:bb:1d:c1:6a:fd: d9:5f:13:f2:d3:40:fb:a4:d2:ab:66:aa:25:de:23: 19:0f:f4:38:00:a0:4f:b3:2d:c4:87:ff:bb:d2:dd: e1:7b:7f:42:ae:01:9c:a5:13:e8:9d:bc:66:b8:33: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.188.0/24 IPv6: 2602:f67e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fe:86:03:6d:1e:10:65:48:96:04:1a:e4:41:f6:4c:d2:fd: b7:1e:53:e5:e8:49:9e:da:f9:92:88:66:42:03:ff:5a:a2:a1: 7d:b9:eb:6a:c2:51:18:67:14:a1:26:74:7e:a4:b6:4e:08:42: 8c:0f:12:76:c2:bd:2a:eb:56:d1:bf:3c:49:06:ac:76:ee:82: 92:2a:cd:2d:0f:83:3c:5b:71:bb:5b:d0:c1:fa:74:b5:f0:2e: 36:2e:ba:81:5a:38:dd:b0:9d:1a:91:ed:63:fb:08:58:65:7c: 8e:27:81:fe:2f:d2:51:22:8e:42:a0:b5:c8:4e:95:a3:d0:60: aa:21:72:c0:10:b8:21:65:0b:78:80:5c:4a:e5:63:3c:21:b2: 34:85:61:56:fc:df:54:de:6d:2d:05:b5:0c:c3:5d:a1:c7:7d: cf:2d:8e:60:c5:2b:12:77:90:65:78:68:e1:1e:99:79:49:45: c2:5b:03:25:62:09:30:37:06:bb:de:62:15:43:12:dd:1a:a1: 48:e0:55:1f:e2:55:9f:95:b5:7a:93:24:2a:39:cd:7b:c2:a1: cd:b4:74:5c:2a:90:e7:58:b8:0b:1c:2e:4e:34:0d:9a:44:af: 54:55:62:c8:a7:78:78:7e:e6:a7:88:6f:61:72:b6:a8:ac:1a: 4c:f7:59:2a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEmLvGuDzpK0NTF5zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNjE0MTA1MFoXDTI3MDcyMDE0MTA1MFowLzEtMCsGA1UEAxMk OGY5ZWQ1ZGYtZGMwNi00Yjc0LTg4NjQtZDI2ZDJhNmEwYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JSrWGDUDPbgUR/vVapBu5oEZLj7mn2MrwTx 4TZROocOx6YJ9+xe5FhmtCizaNeKejsPsA0JTiQvLvSdhnG//RJQX9LDdrQekwfa fb8VceYESv951+M9SWyAFfWivc/u/GdyPzGVFj8y6tEBgRP/R4kHkch829xHDf4e 7dIPnR/fXSE4+sjfgoAGCaMytgcWu7foYCJ2Tp7+nTcKO2U18p/4SRIeTdbKLxXD iNKSCWk0Vd+SxjIYB7sB2bRBV4bf6BckhpSqoaMN5mNwux3Bav3ZXxPy00D7pNKr Zqol3iMZD/Q4AKBPsy3Eh/+70t3he39CrgGcpRPonbxmuDMUsQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDRtTOHAXO+9Jmkr/GIozbaoqiwfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 ZjllZDVkZi1kYzA2LTRiNzQtODg2NC1kMjZkMmE2YTBhYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzhmOWVkNWRmLWRjMDYtNGI3NC04 ODY0LWQyNmQyYTZhMGFiYy84ZjllZDVkZi1kYzA2LTRiNzQtODg2NC1kMjZkMmE2 YTBhYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXibwwDgQCAAIwCAMGACYC9n4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AF/+hgNtHhBlSJYEGuRB9kzS/bceU+XoSZ7a+ZKIZkID/1qioX2562rCURhnFKEm dH6ktk4IQowPEnbCvSrrVtG/PEkGrHbugpIqzS0Pgzxbcbtb0MH6dLXwLjYuuoFa ON2wnRqR7WP7CFhlfI4ngf4v0lEijkKgtchOlaPQYKohcsAQuCFlC3iAXErlYzwh sjSFYVb831TebS0FtQzDXaHHfc8tjmDFKxJ3kGV4aOEemXlJRcJbAyViCTA3Brve YhVDEt0aoUjgVR/iVZ+VtXqTJCo5zXvCoc20dFwqkOdYuAscLk40DZpEr1RVYsin eHh+5qeIb2FytqisGkz3WSo= -----END CERTIFICATE-----Generated at Sun Oct 26 00:37:53 2025 by rpki-client