$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer File: a4ae31f6-760c-4fae-baac-05fd22f7432d.cer (raw, json) Hash identifier: ugz2kvrZ8Q0t0/SwOFw+P7hENi9W3t0GQg53KIO4ss8= Subject key identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B6422A97816528B0118F9BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 19:18:22 +0000 Certificate not after: Thu 30 Sep 2027 16:32:56 +0000 Subordinate resources: AS: 20273 IP: 67.208.48.0/22 IP: 104.204.236.0/22 IP: 128.254.244.0/22 IP: 2604:23a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:22:a9:78:16:52:8b:01:18:f9:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 2 19:18:22 2025 GMT Not After : Sep 30 16:32:56 2027 GMT Subject: CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:60:fd:f3:23:d1:50:a1:e4:9e:0c:f1:eb: 76:b5:0b:d0:cf:ed:5b:65:35:3e:ea:89:b4:6c:bd: 84:cd:6f:07:e4:13:77:03:9b:ae:7b:07:2e:4a:9e: 20:48:5b:0a:7e:0a:95:66:28:8d:84:4d:24:60:9f: 4e:0f:5a:4a:4d:fa:3e:d2:3a:d9:20:44:b2:77:82: 17:8c:3e:02:25:43:41:10:39:15:9b:67:20:b7:39: 24:b8:2b:fa:fe:50:ab:dc:db:9f:d8:b8:67:81:20: ae:57:e5:ef:3d:a6:b0:ed:cf:94:68:63:21:0c:8a: a0:fb:98:54:b1:c8:09:b3:4d:5e:10:35:64:fc:b4: b1:67:05:eb:d4:c2:99:5d:4d:db:c2:2a:b4:88:2a: 75:cd:e9:7c:f3:fd:51:74:60:3d:61:e4:cc:b0:87: 84:bc:c4:14:88:cd:ae:0f:01:6a:27:c3:9e:09:d6: 52:ac:4e:2e:d3:61:51:05:81:c6:88:8e:06:7f:98: 35:f5:27:6d:79:d8:24:67:fb:2c:97:67:29:f6:0d: e2:bd:21:d6:3d:a7:e6:fd:15:00:c5:12:bc:a7:f3: 52:a1:b1:27:a6:09:82:4f:84:d3:e3:9d:77:0f:9d: c7:73:f6:a6:01:4e:b8:76:a5:70:20:7a:6c:99:8e: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 67.208.48.0/22 104.204.236.0/22 128.254.244.0/22 IPv6: 2604:23a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:34:d6:b4:24:9b:08:a1:d3:c9:ee:5e:c5:a7:b7:91:8d:a9: 1a:dc:84:fb:48:9a:db:70:08:b0:14:b4:ec:de:4f:a4:09:d9: 59:41:a6:34:4d:29:de:52:db:12:f2:42:2f:c4:cc:54:c0:a3: ed:05:ec:c6:c3:a5:e7:89:73:da:3a:91:e6:d5:1b:31:b3:97: 9e:9e:2b:91:87:a4:4f:a6:e0:8c:ad:91:1d:94:7c:2a:4e:7c: 90:43:1a:36:f9:54:26:9e:bd:91:68:b0:2a:9c:5f:9b:96:6b: 9f:19:1a:30:c8:ed:17:ca:52:5b:2e:90:db:8e:b0:03:9f:5e: 77:c8:0e:07:2d:7b:04:bd:29:f3:6e:7d:8e:ec:a9:2d:92:fd: 73:fc:be:da:af:f2:0b:33:43:3b:57:15:d4:f2:84:b6:1f:a3: 0b:10:00:0f:12:1d:bc:50:b9:94:97:17:37:55:f6:6f:25:37: 60:71:dc:7b:71:6e:44:6e:db:4f:f8:e4:7e:24:99:63:a1:1f: a2:71:e7:36:e5:45:dc:0e:c9:89:46:3c:18:db:58:ab:31:69: 71:26:06:43:48:bb:74:06:a3:4d:95:f4:34:da:e6:c6:db:b1: d5:eb:c4:f6:5e:5d:a9:4b:18:05:80:bf:da:5f:50:d6:0e:19: 9e:78:92:d5 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEtkIql4FlKLARj5voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTAwMjE5MTgyMloXDTI3MDkzMDE2MzI1NlowLzEtMCsGA1UEAxMk YTRhZTMxZjYtNzYwYy00ZmFlLWJhYWMtMDVmZDIyZjc0MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJg/fMj0VCh5J4M8et2tQvQz+1bZTU+6om0 bL2EzW8H5BN3A5uuewcuSp4gSFsKfgqVZiiNhE0kYJ9OD1pKTfo+0jrZIESyd4IX jD4CJUNBEDkVm2cgtzkkuCv6/lCr3Nuf2LhngSCuV+XvPaaw7c+UaGMhDIqg+5hU scgJs01eEDVk/LSxZwXr1MKZXU3bwiq0iCp1zel88/1RdGA9YeTMsIeEvMQUiM2u DwFqJ8OeCdZSrE4u02FRBYHGiI4Gf5g19SdtedgkZ/ssl2cp9g3ivSHWPafm/RUA xRK8p/NSobEnpgmCT4TT4513D53Hc/amAU64dqVwIHpsmY4tAwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFINHWk5Lno00AvwwkEqT/P3RalxmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJmNzQzMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E0YWUzMWY2LTc2MGMtNGZhZS1i YWFjLTA1ZmQyMmY3NDMyZC9hNGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJm NzQzMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJD0DADBAJozOwDBAKA/vQwDQQCAAIwBwMFACYE I6AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTzEwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgzTWtCSbCKHT ye5exae3kY2pGtyE+0ia23AIsBS07N5PpAnZWUGmNE0p3lLbEvJCL8TMVMCj7QXs xsOl54lz2jqR5tUbMbOXnp4rkYekT6bgjK2RHZR8Kk58kEMaNvlUJp69kWiwKpxf m5ZrnxkaMMjtF8pSWy6Q246wA59ed8gOBy17BL0p8259juypLZL9c/y+2q/yCzND O1cV1PKEth+jCxAADxIdvFC5lJcXN1X2byU3YHHce3FuRG7bT/jkfiSZY6EfonHn NuVF3A7JiUY8GNtYqzFpcSYGQ0i7dAajTZX0NNrmxtux1evE9l5dqUsYBYC/2l9Q 1g4ZnniS1Q== -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:52 2025 by rpki-client