$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer (raw, json) Hash identifier: OMqEwGkM0VN/FZmDGqOM/O+ZhRLpvmh5rky7k+fdAa0= Subject key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A1A1179B95172132D717BA220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Jun 2025 13:46:59 +0000 Certificate not after: Thu 09 Sep 2027 13:46:59 +0000 Subordinate resources: IP: 23.139.252.0/24 IP: 2602:f61d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1a:11:79:b9:51:72:13:2d:71:7b:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 6 13:46:59 2025 GMT Not After : Sep 9 13:46:59 2027 GMT Subject: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:be:65:0f:f5:52:0f:a1:1a:a2:3d:75:f2: 2d:85:79:93:e8:ae:47:32:89:41:66:32:5f:30:d5: 19:9a:d1:08:99:a1:9d:c9:e2:7d:9b:1f:7d:43:d7: 76:24:be:5e:ec:ea:7e:84:b2:ae:29:41:c8:e6:82: dd:10:2d:22:c5:b6:a9:96:fe:f6:aa:7a:b8:04:a2: 0e:a1:f3:c5:cf:eb:05:99:eb:a5:77:09:37:82:fe: c6:4f:ed:b7:ed:5f:b5:0d:28:4b:5a:11:54:c1:51: 68:70:d2:d9:46:75:04:8b:ec:ec:6c:7d:f1:93:74: b4:b2:59:cd:72:bb:f3:36:dd:e7:1f:9c:8f:df:c7: cb:85:a2:69:81:5f:9b:04:c2:28:f9:e0:58:8a:bd: 31:1b:73:dc:4e:26:e0:fc:a7:bb:2a:d8:e7:07:70: b9:fe:71:ac:95:5a:0f:b7:5f:ab:c9:cf:c3:8b:20: c3:25:b6:1f:be:9c:20:98:a2:55:21:08:71:b0:5f: 7b:7e:d5:37:bc:31:79:61:82:d5:01:f5:eb:f1:00: d2:cc:b2:5f:3b:84:b3:a2:38:c3:c9:33:08:ee:fd: d0:b6:b8:66:f4:3f:91:18:46:bf:dd:72:2d:1c:31: 65:c7:e7:35:6e:e3:00:8e:27:42:dc:8d:96:61:01: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.252.0/24 IPv6: 2602:f61d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a8:3f:f4:58:22:2e:e1:a6:8d:b5:a4:d2:77:e3:ae:6e:5b: 94:45:47:09:5e:14:9b:cf:8b:6a:35:bb:86:55:c0:6d:9f:83: 1a:f7:38:4a:41:20:4b:4c:89:cf:8b:08:5d:ca:92:cf:5d:83: 08:26:4f:19:e8:88:b6:55:53:1f:4b:2c:6b:a3:92:53:6b:a0: 99:f1:73:0c:20:5f:8a:9d:77:2e:2b:ca:28:12:f6:ec:16:67: 20:cf:4b:73:0c:40:a1:7d:75:d0:cc:cf:17:21:1f:cd:19:f1: bd:0a:55:35:94:b5:b4:8b:31:bc:ae:a0:35:5a:0d:8d:10:c0: fd:28:b9:c8:7b:b4:b3:f2:28:16:92:cb:e7:df:29:12:cb:88: 5d:1d:52:04:c2:5e:e5:ab:ae:ac:81:d7:54:6f:76:9c:fd:ff: 77:1a:56:21:b5:89:af:e6:fc:52:96:03:9e:cf:9c:1c:f4:db: e0:bc:b7:6b:ac:09:90:88:d8:4a:e1:44:82:cf:f8:15:ee:35: ab:ba:24:38:cc:0e:9a:4f:e5:d5:5f:e3:d2:cc:d9:33:45:ec: 0f:b0:f4:89:cc:81:34:54:15:ca:c2:80:e5:12:44:a1:4f:e2: 95:58:cd:f8:33:95:03:70:b7:b1:25:a6:12:69:a2:d2:55:28: 14:16:80:14 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEoaEXm5UXITLXF7oiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNjEzNDY1OVoXDTI3MDkwOTEzNDY1OVowLzEtMCsGA1UEAxMk YTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1ZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF6+ZQ/1Ug+hGqI9dfIthXmT6K5HMolBZjJf MNUZmtEImaGdyeJ9mx99Q9d2JL5e7Op+hLKuKUHI5oLdEC0ixbaplv72qnq4BKIO ofPFz+sFmeuldwk3gv7GT+237V+1DShLWhFUwVFocNLZRnUEi+zsbH3xk3S0slnN crvzNt3nH5yP38fLhaJpgV+bBMIo+eBYir0xG3PcTibg/Ke7KtjnB3C5/nGslVoP t1+ryc/DiyDDJbYfvpwgmKJVIQhxsF97ftU3vDF5YYLVAfXr8QDSzLJfO4SzojjD yTMI7v3Qtrhm9D+RGEa/3XItHDFlx+c1buMAjidC3I2WYQH6yQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNalguE5+i11B9ttzJGplpIMcTuuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E0ZjJmMWE3LTA3ZTUtNDJmOC1i MWFhLTFlMmU5NWE2NWZmOC9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVh NjVmZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi/wwDgQCAAIwCAMGACYC9h0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADuoP/RYIi7hpo21pNJ3465uW5RFRwleFJvPi2o1u4ZVwG2fgxr3OEpBIEtMic+L CF3Kks9dgwgmTxnoiLZVUx9LLGujklNroJnxcwwgX4qddy4ryigS9uwWZyDPS3MM QKF9ddDMzxchH80Z8b0KVTWUtbSLMbyuoDVaDY0QwP0ouch7tLPyKBaSy+ffKRLL iF0dUgTCXuWrrqyB11Rvdpz9/3caViG1ia/m/FKWA57PnBz02+C8t2usCZCI2Erh RILP+BXuNau6JDjMDppP5dVf49LM2TNF7A+w9InMgTRUFcrCgOUSRKFP4pVYzfgz lQNwt7ElphJpotJVKBQWgBQ= -----END CERTIFICATE-----Generated at Sun Oct 26 00:37:50 2025 by rpki-client