$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer File: f936a1e1-90de-4d04-8bef-ca6fea25558c.cer (raw, json) Hash identifier: QaRdcgm8ZwS7P3qEZ2WbfcKIT7jw2j8uerHRtCYjGOU= Subject key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A0892B99F07ADC15A4D7D7AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 May 2025 07:22:52 +0000 Certificate not after: Fri 03 Sep 2027 07:22:52 +0000 Subordinate resources: AS: 20387 IP: 23.139.132.0/24 IP: 2602:f638::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:08:92:b9:9f:07:ad:c1:5a:4d:7d:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 31 07:22:52 2025 GMT Not After : Sep 3 07:22:52 2027 GMT Subject: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:e5:c2:68:9c:6c:5f:84:00:85:98:74:c9: b4:47:76:dd:5a:90:d6:b1:9c:82:14:53:e4:b0:71: 4b:27:16:6c:1d:bb:bb:9b:33:b4:f5:7b:51:f9:50: 95:73:52:ec:a3:ba:9d:74:0c:89:ed:6f:63:aa:a0: e3:59:16:bc:ef:ab:0c:f8:5c:21:5f:36:0b:1b:95: 20:e2:be:be:1b:fa:ca:c8:a7:3e:81:69:20:cf:2c: 76:04:a7:58:6d:dc:b1:33:40:a4:1a:ab:01:71:3f: d4:08:6b:21:4a:88:e7:9b:aa:b7:ae:66:1c:d0:75: a4:3f:a0:c4:8c:ee:eb:0d:9a:92:7c:29:c3:11:6b: e7:67:8f:bf:dd:12:06:d8:32:5a:0a:7f:96:f5:f7: cb:73:2b:80:d1:22:96:bc:11:1b:84:84:88:c1:62: e0:fc:c6:74:5c:65:dd:8e:de:77:5e:66:78:e2:f6: c4:9e:a9:68:5c:39:02:fe:45:a0:94:43:16:42:6c: 78:e9:f4:ba:77:33:28:0e:64:3b:e5:ac:ad:00:4f: fd:36:33:80:54:22:cf:00:97:11:89:f9:36:87:82: 3c:74:79:9c:72:c9:da:cc:4e:e4:42:ec:22:d2:64: f5:9c:4c:34:ea:69:61:4e:74:b9:e2:01:7a:c2:ff: db:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.132.0/24 IPv6: 2602:f638::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:da:66:9b:6b:db:21:c6:ce:bb:9d:89:35:3f:e3:40:93:4d: 91:07:3a:7a:00:8d:fb:72:1b:9e:91:0e:81:08:17:dc:fd:b5: c4:d8:c2:a7:75:d3:4f:54:65:b6:05:85:5b:81:97:13:20:22: d0:b9:61:94:14:51:26:ce:86:5e:1d:df:fd:2f:b3:97:c8:48: c3:be:fe:82:19:88:06:4a:4d:f4:ab:02:09:c6:74:55:a9:b1: 0f:74:27:97:d7:ea:89:c3:22:85:37:7f:96:c2:da:36:4d:fd: da:fa:fd:ac:dd:20:8c:4f:bb:57:22:2b:45:e8:ae:3c:d7:90: e1:4e:de:4a:ed:f6:38:9a:ba:06:aa:35:72:25:08:fb:dd:f4: 8f:83:b7:4c:c4:bb:ae:23:a6:11:ce:55:5c:3b:20:06:1e:6f: 75:48:1f:cd:2c:b0:51:52:28:07:69:94:ab:90:07:d3:e0:6f: 86:68:81:5e:d0:56:69:ad:dc:06:a3:49:3d:db:eb:20:5f:47: 0c:66:b6:76:be:88:57:22:51:d7:fb:ff:8f:2f:56:cf:0f:51: 58:a5:11:8d:c7:03:42:ae:6d:6e:9b:4b:79:9b:3f:f9:7c:ab: ce:7c:fb:38:63:d9:99:0b:7a:ba:13:98:5a:6d:03:7d:87:f6: 02:52:f3:23 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEoIkrmfB63BWk19esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUzMTA3MjI1MloXDTI3MDkwMzA3MjI1MlowLzEtMCsGA1UEAxMk ZjkzNmExZTEtOTBkZS00ZDA0LThiZWYtY2E2ZmVhMjU1NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUHlwmicbF+EAIWYdMm0R3bdWpDWsZyCFFPk sHFLJxZsHbu7mzO09XtR+VCVc1Lso7qddAyJ7W9jqqDjWRa876sM+FwhXzYLG5Ug 4r6+G/rKyKc+gWkgzyx2BKdYbdyxM0CkGqsBcT/UCGshSojnm6q3rmYc0HWkP6DE jO7rDZqSfCnDEWvnZ4+/3RIG2DJaCn+W9ffLcyuA0SKWvBEbhISIwWLg/MZ0XGXd jt53XmZ44vbEnqloXDkC/kWglEMWQmx46fS6dzMoDmQ75aytAE/9NjOAVCLPAJcR ifk2h4I8dHmccsnazE7kQuwi0mT1nEw06mlhTnS54gF6wv/bhwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFC3gRL3MfyoQzovVHvprs457XH1zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m OTM2YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZmZWEyNTU1OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Y5MzZhMWUxLTkwZGUtNGQwNC04 YmVmLWNhNmZlYTI1NTU4Yy9mOTM2YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZmZWEy NTU1OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi4QwDgQCAAIwCAMGACYC9jgAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk+jMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA7aZptr2yHGzrudiTU/40CTTZEH OnoAjftyG56RDoEIF9z9tcTYwqd1009UZbYFhVuBlxMgItC5YZQUUSbOhl4d3/0v s5fISMO+/oIZiAZKTfSrAgnGdFWpsQ90J5fX6onDIoU3f5bC2jZN/dr6/azdIIxP u1ciK0XorjzXkOFO3krt9jiaugaqNXIlCPvd9I+Dt0zEu64jphHOVVw7IAYeb3VI H80ssFFSKAdplKuQB9Pgb4ZogV7QVmmt3AajST3b6yBfRwxmtna+iFciUdf7/48v Vs8PUVilEY3HA0KubW6bS3mbP/l8q858+zhj2ZkLeroTmFptA32H9gJS8yM= -----END CERTIFICATE-----Generated at Sun Oct 26 00:39:49 2025 by rpki-client