$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer File: c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer (raw, json) Hash identifier: dgbaCQ374b4Yyov7Jp8eefJPr+l3yU42OF2r4IOeTPQ= Subject key identifier: AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A1F36DFDC0C3A11A9B992300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 13:09:27 +0000 Certificate not after: Tue 27 Jul 2027 13:13:38 +0000 Subordinate resources: AS: 20071 IP: 23.138.76.0/24 IP: 2602:f66f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:f3:6d:fd:c0:c3:a1:1a:9b:99:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 24 13:09:27 2025 GMT Not After : Jul 27 13:13:38 2027 GMT Subject: CN=c281b0a3-3805-4846-a1fe-91a9aacd11a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:16:44:fb:8c:b6:da:be:bd:3d:78:6c:a7: 49:75:a7:14:bb:93:e0:ae:bd:c1:12:c3:6d:b4:57: c8:3e:38:1b:7f:3b:0c:a2:59:c8:9d:b5:83:65:53: f4:7a:b4:d1:0f:ba:41:a6:72:c2:03:76:1c:81:52: 73:25:db:99:10:09:56:0d:99:b7:e2:64:01:3e:f5: dc:e0:fb:8b:0c:9a:2d:0d:45:ff:28:9a:93:9b:48: 57:c3:7c:a2:f6:0e:79:36:fd:77:ad:88:7e:a7:37: 28:2e:3f:3e:e6:ca:ea:cb:eb:7b:ae:8b:ed:40:a6: dc:62:b0:46:89:a6:25:ac:bb:77:d3:86:46:8c:1c: be:fa:82:af:ec:48:af:aa:ee:ea:9b:26:b6:29:dc: 2e:3c:d6:58:b0:97:f1:de:66:3d:ca:5b:43:bd:4a: 1a:e1:76:12:3e:b8:e0:7c:4e:aa:01:a1:7c:be:d7: 08:6d:a9:b9:96:3e:01:04:7d:5e:20:57:41:01:69: a2:d2:8e:75:da:b9:b1:3e:ba:5d:2e:0d:2e:ad:22: 88:11:28:bb:34:41:8c:4e:4a:e0:b7:6d:dc:39:2e: de:87:69:d0:08:c8:ac:1c:d7:44:d9:ac:21:54:d4: d0:0a:58:b3:59:d3:85:b2:62:88:74:51:d2:f0:01: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.76.0/24 IPv6: 2602:f66f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:67:99:40:6f:10:9c:13:11:64:8a:e9:48:90:23:2c:b1:11: 8b:d4:75:20:d6:73:41:e7:31:59:f9:7c:4c:22:3d:4e:3d:f9: 49:26:f6:73:13:23:fb:05:af:c8:9f:04:93:d8:80:39:89:0e: 2a:4b:5e:91:53:0a:a0:c1:dd:29:aa:d9:03:e2:a7:72:86:6f: 19:86:2b:fe:e8:a5:29:30:03:a3:1e:8e:9b:1f:f2:71:8c:60: d1:9f:21:05:01:ba:d2:9d:a6:43:7b:41:84:a8:4e:f8:ad:bd: 5f:03:a8:f4:cf:aa:9e:de:c6:83:22:b2:c4:35:82:11:08:7b: de:ca:94:f9:e8:72:e7:59:e0:e2:a2:b9:13:65:1f:cb:b2:a5: b8:d9:df:d4:2d:36:ce:de:b5:82:6a:6f:0d:a0:c6:55:97:56: 03:fb:3d:a9:d5:cb:ab:26:ee:32:dc:a6:06:51:c9:b0:86:52: 6c:59:86:42:11:6d:cc:77:64:62:25:5a:67:48:ad:2a:fe:d4: 7b:c9:95:05:4c:68:3e:7d:4e:8d:3f:64:7a:b4:64:bd:f0:27: 44:ae:19:7c:37:6e:26:65:30:3b:aa:2d:53:1c:62:ff:03:e1: 7e:78:c2:5f:f9:59:16:b4:cd:4a:47:5b:3c:46:2a:38:f0:ab: 50:c3:4e:16 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmh8239wMOhGpuZIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNDEzMDkyN1oXDTI3MDcyNzEzMTMzOFowLzEtMCsGA1UEAxMk YzI4MWIwYTMtMzgwNS00ODQ2LWExZmUtOTFhOWFhY2QxMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5MWRPuMttq+vT14bKdJdacUu5Pgrr3BEsNt tFfIPjgbfzsMolnInbWDZVP0erTRD7pBpnLCA3YcgVJzJduZEAlWDZm34mQBPvXc 4PuLDJotDUX/KJqTm0hXw3yi9g55Nv13rYh+pzcoLj8+5srqy+t7rovtQKbcYrBG iaYlrLt304ZGjBy++oKv7Eivqu7qmya2KdwuPNZYsJfx3mY9yltDvUoa4XYSPrjg fE6qAaF8vtcIbam5lj4BBH1eIFdBAWmi0o512rmxPrpdLg0urSKIESi7NEGMTkrg t23cOS7eh2nQCMisHNdE2awhVNTQClizWdOFsmKIdFHS8AEefQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK5eaES3e17KfXpVrH2e9GkmSA2SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j MjgxYjBhMy0zODA1LTQ4NDYtYTFmZS05MWE5YWFjZDExYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2MyODFiMGEzLTM4MDUtNDg0Ni1h MWZlLTkxYTlhYWNkMTFhOC9jMjgxYjBhMy0zODA1LTQ4NDYtYTFmZS05MWE5YWFj ZDExYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXikwwDgQCAAIwCAMGACYC9m8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk5nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAINnmUBvEJwTEWSK6UiQIyyxEYvU dSDWc0HnMVn5fEwiPU49+Ukm9nMTI/sFr8ifBJPYgDmJDipLXpFTCqDB3Smq2QPi p3KGbxmGK/7opSkwA6Mejpsf8nGMYNGfIQUButKdpkN7QYSoTvitvV8DqPTPqp7e xoMissQ1ghEIe97KlPnocudZ4OKiuRNlH8uypbjZ39QtNs7etYJqbw2gxlWXVgP7 PanVy6sm7jLcpgZRybCGUmxZhkIRbcx3ZGIlWmdIrSr+1HvJlQVMaD59To0/ZHq0 ZL3wJ0SuGXw3biZlMDuqLVMcYv8D4X54wl/5WRa0zUpHWzxGKjjwq1DDThY= -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:52 2025 by rpki-client