$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer File: 9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer (raw, json) Hash identifier: 3ENJ/T+IsUy6h/WVhTfiy52Q2e7238QymAXGLWS5BU8= Subject key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B6EE3A8DFAA1C696A83C99300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 15:45:19 +0000 Certificate not after: Mon 19 Jul 2027 18:00:47 +0000 Subordinate resources: AS: 46170 IP: 192.154.80.0/24 IP: 2602:f70c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:e3:a8:df:aa:1c:69:6a:83:c9:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 6 15:45:19 2025 GMT Not After : Jul 19 18:00:47 2027 GMT Subject: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:0f:3e:47:e4:f6:e2:20:71:8d:36:a7:0e: c5:0c:1b:b4:36:3d:5c:98:82:37:28:9a:4b:30:dc: ad:a2:c3:75:21:21:9e:db:23:00:12:09:a7:67:b5: a4:81:85:50:9e:cd:e4:4e:ca:d8:1b:ba:2e:73:1d: c4:4d:a6:0c:6e:cf:fc:51:59:69:f1:b6:c1:78:9d: c1:d4:6d:0c:57:cc:21:0a:a8:9e:f6:94:7b:2a:ea: 0f:7f:fc:d9:16:8f:90:70:68:4c:3d:4b:1f:d2:c9: 0a:49:df:ff:ab:b9:ab:2c:01:22:48:b5:83:d2:23: 16:3b:5d:d6:22:a2:44:c7:37:39:92:ad:b5:80:47: f7:95:6f:12:79:97:d1:77:f9:60:89:76:04:17:ba: a8:ed:db:81:0a:1c:3c:e8:d4:a3:00:98:95:5c:3e: 06:93:ee:28:99:1f:42:12:98:30:68:1f:95:df:b0: de:3a:54:f5:60:5b:70:c2:35:4b:04:c2:26:d1:c9: 8d:d0:5d:db:0f:dd:c1:9d:53:53:ef:c0:f9:e7:6e: c3:56:e0:54:be:fb:7f:17:ad:b6:0d:9c:56:67:9f: ab:5b:47:b5:02:7a:b0:d1:e8:8a:7b:d0:b4:f0:4c: 97:f7:c3:a1:eb:e6:16:4f:52:98:68:26:f8:7e:68: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.154.80.0/24 IPv6: 2602:f70c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46170 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0d:4c:bf:9c:46:f9:4b:2a:03:05:f3:0f:ed:88:b5:2e:78: 8b:2a:e4:ec:22:30:c5:46:5a:40:1d:4c:3e:a8:67:9d:e7:f1: d8:64:00:0b:fb:9b:d7:c5:5e:ca:bd:cf:d6:2c:88:1e:c2:fa: 15:b8:89:69:39:98:93:f3:c8:af:58:44:bc:bf:6f:3a:f7:ba: 8a:f0:9e:84:e1:18:72:a7:70:38:c6:e1:f4:24:5d:ba:93:68: a5:ee:5a:fe:44:83:cf:93:16:e4:27:ae:d9:8d:ec:50:74:2b: 84:61:d4:43:c4:93:dc:47:00:de:17:61:60:9b:fd:5b:9a:d2: 30:0f:07:54:0d:70:69:d7:aa:22:17:c2:fe:44:7f:6e:e7:d9: c3:b3:5b:a4:75:eb:ab:aa:a3:9d:f2:4a:18:d3:21:6e:cd:a9: c2:2e:f7:42:1e:26:25:9f:ce:5b:9e:fb:d1:fb:3c:07:70:2c: 2f:d9:fa:44:c3:9e:e3:d3:70:83:3f:93:b7:9c:a2:c2:e9:d3: 9c:9a:42:a4:bb:4e:28:c8:80:2f:c0:3d:51:78:a4:5f:7e:7b: 6a:2f:99:db:8c:af:95:5b:6c:d6:b9:94:3b:55:ab:da:6d:9f: 68:5e:88:fa:06:6b:44:ab:7f:f9:a3:40:8c:62:ae:5d:cb:4d: de:06:85:43 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtu46jfqhxpaoPJkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTAwNjE1NDUxOVoXDTI3MDcxOTE4MDA0N1owLzEtMCsGA1UEAxMk OWUyYjdkYzQtMTg0NC00ZTcwLTk4OWItNWU0NDZmOGNjNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymsPPkfk9uIgcY02pw7FDBu0Nj1cmII3KJpL MNytosN1ISGe2yMAEgmnZ7WkgYVQns3kTsrYG7oucx3ETaYMbs/8UVlp8bbBeJ3B 1G0MV8whCqie9pR7KuoPf/zZFo+QcGhMPUsf0skKSd//q7mrLAEiSLWD0iMWO13W IqJExzc5kq21gEf3lW8SeZfRd/lgiXYEF7qo7duBChw86NSjAJiVXD4Gk+4omR9C EpgwaB+V37DeOlT1YFtwwjVLBMIm0cmN0F3bD93BnVNT78D5527DVuBUvvt/F622 DZxWZ5+rW0e1Anqw0eiKe9C08EyX98Oh6+YWT1KYaCb4fmiVdQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOfVPGIn3cuDYdVA7S6SwFY4Y6TtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 ZTJiN2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0NmY4Y2M3MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzllMmI3ZGM0LTE4NDQtNGU3MC05 ODliLTVlNDQ2ZjhjYzcwZi85ZTJiN2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0NmY4 Y2M3MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAmlAwDgQCAAIwCAMGACYC9wwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC0WjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9DUy/nEb5SyoDBfMP7Yi1LniL KuTsIjDFRlpAHUw+qGed5/HYZAAL+5vXxV7Kvc/WLIgewvoVuIlpOZiT88ivWES8 v28697qK8J6E4Rhyp3A4xuH0JF26k2il7lr+RIPPkxbkJ67ZjexQdCuEYdRDxJPc RwDeF2Fgm/1bmtIwDwdUDXBp16oiF8L+RH9u59nDs1ukdeurqqOd8koY0yFuzanC LvdCHiYln85bnvvR+zwHcCwv2fpEw57j03CDP5O3nKLC6dOcmkKku04oyIAvwD1R eKRffntqL5nbjK+VW2zWuZQ7VavabZ9oXoj6BmtEq3/5o0CMYq5dy03eBoVD -----END CERTIFICATE-----Generated at Sun Oct 26 00:42:58 2025 by rpki-client