$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf.cer File: 90359a3c-93a9-4d25-b495-9bd9484d4bbf.cer (raw, json) Hash identifier: KGYIES/khJ+eXkDMo+OSW6QGvaaW3mRForc6bMXOYsI= Subject key identifier: EA:B7:94:DA:96:2F:3B:CD:F9:3A:C7:41:02:DE:4A:D8:F3:C2:C8:42 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849F00C0C735C37574D70A86968 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/90359a3c-93a9-4d25-b495-9bd9484d4bbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 12:32:06 +0000 Certificate not after: Wed 25 Aug 2027 12:32:06 +0000 Subordinate resources: IP: 23.139.28.0/24 IP: 2602:f641::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:0c:0c:73:5c:37:57:4d:70:a8:69:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 22 12:32:06 2025 GMT Not After : Aug 25 12:32:06 2027 GMT Subject: CN=90359a3c-93a9-4d25-b495-9bd9484d4bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:ea:c7:84:46:b6:4f:26:ec:bd:23:5f:2c: 2e:c8:1b:71:9d:aa:9c:30:00:f4:99:dc:3a:69:7d: eb:6e:73:bd:34:b5:89:8b:a5:1a:52:0e:99:00:a6: 83:ff:d9:fc:68:07:f0:94:22:3e:e7:cf:2c:45:0d: 46:db:5e:13:c2:4d:15:9c:45:16:b3:dd:90:fe:d9: 9f:4e:b0:3a:1e:86:ea:d6:a6:09:c9:14:74:e3:29: 07:cc:0b:13:ac:4b:e2:df:6c:7f:74:80:f7:b6:d3: 68:42:15:ec:30:cc:22:cf:a0:0b:8e:01:91:3e:52: ff:74:86:e9:04:1c:1a:5d:ad:5e:ca:93:69:1b:9c: 3a:d4:a2:1a:41:5f:29:f8:56:30:00:3d:b4:c0:7f: c6:d9:32:bc:1b:aa:28:e5:64:0c:0a:a9:50:84:c1: e0:f0:4b:4d:9f:aa:cd:81:3f:bd:a6:21:0d:c0:15: 1c:03:b4:51:6e:28:8c:81:b1:7d:3b:86:bb:63:b2: 48:95:e5:e8:4e:0a:df:fc:c7:24:30:30:40:07:a4: a1:3a:ca:6e:be:e9:91:88:6c:23:c6:96:bc:9c:eb: df:87:92:6a:1d:be:92:53:90:fc:b0:49:30:b1:f9: 15:aa:f1:d3:77:99:04:95:48:1b:0a:f8:f8:c6:f0: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:94:DA:96:2F:3B:CD:F9:3A:C7:41:02:DE:4A:D8:F3:C2:C8:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/90359a3c-93a9-4d25-b495-9bd9484d4bbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.28.0/24 IPv6: 2602:f641::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d1:b3:a4:e5:42:c3:e6:e6:37:77:df:fe:97:cf:98:d0:0c: d6:1b:ad:5a:94:65:3e:63:af:2b:eb:b4:3e:81:98:94:8e:42: 38:da:9a:59:14:fb:ab:d6:de:84:ad:fe:3b:87:ce:35:5c:97: 47:fb:cd:90:ea:52:0b:9a:b3:0c:a0:62:08:04:08:d1:af:ab: 84:93:c2:64:3f:9c:23:ae:94:b7:8a:81:2b:b2:13:fc:69:c6: a4:45:c2:a3:c7:2b:d9:17:36:b9:ff:d2:60:5e:93:2d:79:f0: df:e6:3f:b5:ad:50:e5:27:fc:2f:14:ac:b6:18:84:b1:fb:87: aa:07:e5:5b:af:f3:32:a2:fc:bc:a3:2c:a1:30:21:70:1d:b2: 2a:ea:33:46:6d:5f:96:e0:32:37:9b:7c:06:43:bf:82:84:3d: 59:50:80:06:b1:63:36:e5:2a:45:8e:25:43:80:f5:f7:58:82: 4d:3d:18:a0:22:d6:19:0b:7d:06:60:37:57:51:0c:91:90:57: bb:be:53:38:bc:2c:53:00:ee:9e:0b:b2:a0:e7:b6:43:4e:2d: 0d:b2:af:64:22:56:58:54:b9:1f:c7:ed:ca:ee:39:17:06:e2: c2:df:8b:78:d6:18:98:4c:91:0a:79:59:be:5b:42:f0:b8:19: 96:f2:c0:1f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEnwDAxzXDdXTXCoaWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMjEyMzIwNloXDTI3MDgyNTEyMzIwNlowLzEtMCsGA1UEAxMk OTAzNTlhM2MtOTNhOS00ZDI1LWI0OTUtOWJkOTQ4NGQ0YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Pqx4RGtk8m7L0jXywuyBtxnaqcMAD0mdw6 aX3rbnO9NLWJi6UaUg6ZAKaD/9n8aAfwlCI+588sRQ1G214Twk0VnEUWs92Q/tmf TrA6Hobq1qYJyRR04ykHzAsTrEvi32x/dID3ttNoQhXsMMwiz6ALjgGRPlL/dIbp BBwaXa1eypNpG5w61KIaQV8p+FYwAD20wH/G2TK8G6oo5WQMCqlQhMHg8EtNn6rN gT+9piENwBUcA7RRbiiMgbF9O4a7Y7JIleXoTgrf/MckMDBAB6ShOspuvumRiGwj xpa8nOvfh5JqHb6SU5D8sEkwsfkVqvHTd5kElUgbCvj4xvCggQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOq3lNqWLzvN+TrHQQLeStjzwshCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MDM1OWEzYy05M2E5LTRkMjUtYjQ5NS05YmQ5NDg0ZDRiYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkwMzU5YTNjLTkzYTktNGQyNS1i NDk1LTliZDk0ODRkNGJiZi85MDM1OWEzYy05M2E5LTRkMjUtYjQ5NS05YmQ5NDg0 ZDRiYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXixwwDgQCAAIwCAMGACYC9kEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIXRs6TlQsPm5jd33/6Xz5jQDNYbrVqUZT5jryvrtD6BmJSOQjjamlkU+6vW3oSt /juHzjVcl0f7zZDqUguaswygYggECNGvq4STwmQ/nCOulLeKgSuyE/xpxqRFwqPH K9kXNrn/0mBeky158N/mP7WtUOUn/C8UrLYYhLH7h6oH5Vuv8zKi/LyjLKEwIXAd sirqM0ZtX5bgMjebfAZDv4KEPVlQgAaxYzblKkWOJUOA9fdYgk09GKAi1hkLfQZg N1dRDJGQV7u+Uzi8LFMA7p4LsqDntkNOLQ2yr2QiVlhUuR/H7cruORcG4sLfi3jW GJhMkQp5Wb5bQvC4GZbywB8= -----END CERTIFICATE-----Generated at Sat Nov 8 17:38:44 2025 by rpki-client