$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer File: a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer (raw, json) Hash identifier: xxv6hxikRlD8FEPhFs5MJs2Y6zxV0kqWKbE2uYusSTU= Subject key identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849EB48868C69A7A00231ACE400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 May 2025 19:34:55 +0000 Certificate not after: Mon 23 Aug 2027 19:34:55 +0000 Subordinate resources: AS: 23228 IP: 2620:13b:9000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:48:86:8c:69:a7:a0:02:31:ac:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 20 19:34:55 2025 GMT Not After : Aug 23 19:34:55 2027 GMT Subject: CN=a23e4fc3-9953-40b8-8d08-ac7981cb8d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:11:95:52:1b:79:bd:7b:bd:e7:5e:a4:00: d1:bd:3e:3f:22:ed:74:2a:b2:c9:e8:8d:5a:e5:d3: 98:0a:41:85:00:3a:80:60:20:36:b8:c2:8d:fd:81: 22:b3:a9:6a:5d:64:74:cb:59:92:7c:4e:26:c9:47: 96:b9:ac:ff:d5:d3:4f:89:a3:22:d8:40:3f:1d:5c: d0:a7:8f:be:7b:65:d4:6c:70:7d:a6:ed:cd:c9:4e: 4d:73:af:43:d5:69:9b:5c:89:a8:3f:f5:d3:e2:53: 21:75:44:88:d5:28:c9:5b:bf:40:88:f2:ff:53:0d: 05:c4:84:a2:d4:a7:58:a0:74:db:d5:c2:e1:73:82: fb:73:7d:f6:36:85:54:39:f7:e1:49:7a:73:44:59: 85:80:89:c7:15:56:77:21:20:a4:81:b1:61:24:2f: 75:47:7a:26:c5:88:32:81:70:e4:4d:72:d3:d5:88: e7:c2:b9:fd:c5:e7:49:ae:c8:c7:2d:4a:13:bb:36: a2:e6:0c:48:e6:29:95:d7:7b:96:86:30:4c:c1:65: 5f:74:f6:4b:d1:4d:ac:ba:a6:05:fd:b9:d6:67:c4: ba:d7:6e:65:94:d5:30:08:52:a4:fa:2c:28:a6:94: 35:5c:89:46:86:c8:14:b6:22:89:bb:99:23:39:31: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:13b:9000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:06:02:81:13:1e:07:1f:f5:cc:87:52:ca:93:69:7a:61:1f: ca:ef:03:dd:25:64:83:58:06:5a:4b:5c:0e:8e:e5:53:30:da: ea:2c:f9:da:59:35:67:90:74:77:ec:db:ce:f0:4a:96:1e:dd: 35:8a:93:09:d3:cf:3e:21:50:6a:2e:94:ca:70:73:85:ad:0a: 31:8c:7d:04:9b:64:5e:0a:d7:18:60:1a:fa:af:67:a9:f8:96: ca:84:f7:24:7c:d2:b7:22:78:d7:ef:4a:20:0b:95:fd:f3:44: 63:0a:cc:66:9a:59:6a:fc:f1:58:bd:92:e6:af:5c:83:b7:fb: ea:1d:8e:a3:1c:db:97:a7:ca:7c:1f:98:b8:71:8a:97:70:76: ac:50:ee:04:0c:37:63:66:ea:de:36:64:c7:0c:d0:e9:54:42: 22:01:bb:70:6f:87:dc:89:3e:5b:b0:ee:43:af:e8:e7:dd:9b: e9:74:a8:14:b8:52:01:93:87:fb:c2:be:e0:e9:d5:a8:19:a7: fe:33:90:65:94:b0:e5:5b:98:73:37:b2:d4:06:93:2e:c6:2b: c1:02:93:ac:27:45:b8:b6:b6:f3:8d:03:3a:58:4c:a6:66:a0: 8c:08:cb:1c:69:50:a2:ae:da:bf:ac:90:83:69:d8:15:7e:9a: fd:4c:a4:6e -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEnrSIaMaaegAjGs5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMDE5MzQ1NVoXDTI3MDgyMzE5MzQ1NVowLzEtMCsGA1UEAxMk YTIzZTRmYzMtOTk1My00MGI4LThkMDgtYWM3OTgxY2I4ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzERlVIbeb17vedepADRvT4/Iu10KrLJ6I1a 5dOYCkGFADqAYCA2uMKN/YEis6lqXWR0y1mSfE4myUeWuaz/1dNPiaMi2EA/HVzQ p4++e2XUbHB9pu3NyU5Nc69D1WmbXImoP/XT4lMhdUSI1SjJW79AiPL/Uw0FxISi 1KdYoHTb1cLhc4L7c332NoVUOffhSXpzRFmFgInHFVZ3ISCkgbFhJC91R3omxYgy gXDkTXLT1Yjnwrn9xedJrsjHLUoTuzai5gxI5imV13uWhjBMwWVfdPZL0U2suqYF /bnWZ8S6125llNUwCFKk+iwoppQ1XIlGhsgUtiKJu5kjOTG/sQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEHPjSCT7ikQYS/9plHuPACJtK3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFjYjhkNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyM2U0ZmMzLTk5NTMtNDBiOC04 ZDA4LWFjNzk4MWNiOGQ0NC9hMjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFj YjhkNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE7kDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJavDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBpBgKBEx4HH/XMh1LKk2l6YR/K7wPdJWSDWAZaS1wOjuVT MNrqLPnaWTVnkHR37NvO8EqWHt01ipMJ088+IVBqLpTKcHOFrQoxjH0Em2ReCtcY YBr6r2ep+JbKhPckfNK3InjX70ogC5X980RjCsxmmllq/PFYvZLmr1yDt/vqHY6j HNuXp8p8H5i4cYqXcHasUO4EDDdjZureNmTHDNDpVEIiAbtwb4fciT5bsO5Dr+jn 3ZvpdKgUuFIBk4f7wr7g6dWoGaf+M5BllLDlW5hzN7LUBpMuxivBApOsJ0W4trbz jQM6WEymZqCMCMscaVCirtq/rJCDadgVfpr9TKRu -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:54 2025 by rpki-client