$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer File: ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer (raw, json) Hash identifier: 9LaHu5l5m2vfAS2UiGzLWUlHJQotk8l904fBOncLHiY= Subject key identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584877DFB1EBF99FFC48C9133600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 18:38:48 +0000 Certificate not after: Mon 12 Apr 2027 17:38:48 +0000 Subordinate resources: AS: 26939 IP: 23.130.220.0/24 IP: 2602:f76b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:df:b1:eb:f9:9f:fc:48:c9:13:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 7 18:38:48 2025 GMT Not After : Apr 12 17:38:48 2027 GMT Subject: CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:e5:da:a8:6c:fc:dc:2c:70:1d:50:23:46: 6c:d7:ad:fd:2e:aa:bf:d4:00:2c:2f:71:f4:d0:07: 8b:98:85:5f:be:81:25:dc:2a:29:73:ec:b5:ad:6b: 45:ac:18:a7:95:ec:14:45:17:1b:81:c0:1b:c5:fd: 8c:bd:da:d6:c6:cb:70:7a:a3:63:73:28:65:ac:34: e4:98:e7:eb:14:04:bb:6f:46:d2:9d:0c:16:ee:47: ff:17:a7:cd:6d:ae:a4:d2:34:7d:fa:49:0d:98:5d: 2a:b0:c3:6c:96:07:5f:83:10:4e:49:1e:fb:a7:72: 34:75:59:c1:ca:aa:31:bd:17:66:87:32:44:cb:68: e2:e5:31:3f:61:28:c9:d8:0e:97:46:3a:92:d4:d0: 59:bd:ae:10:66:74:90:5e:c4:d2:11:e4:8b:67:a4: d1:b9:23:47:30:56:11:39:2c:ea:a5:b5:59:65:42: eb:4f:27:5d:f4:19:3f:0f:da:e2:5f:2d:7d:b8:3d: b6:50:2d:75:a6:fb:23:44:1d:f5:91:a1:90:6e:49: 06:88:47:4b:05:7e:9a:8c:4c:f6:71:14:51:42:46: 2c:45:4a:25:b9:e0:0d:3c:dd:6d:43:98:34:63:b8: c8:e2:39:af:0e:0e:8c:40:6a:98:94:fb:95:d2:54: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.130.220.0/24 IPv6: 2602:f76b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4f:0c:2a:76:6a:81:c4:06:e3:e6:1a:0b:9d:c8:ed:a5:48: 60:02:68:de:d0:b2:f2:6a:31:68:96:0e:7c:85:6d:9a:b8:1d: 65:b7:a1:c8:be:3c:1e:17:70:f5:c7:9e:92:b5:ab:30:1f:24: b3:6b:78:02:bf:f2:56:4a:32:6d:da:f2:ac:32:fe:ad:c5:d3: 95:8a:12:5e:67:e3:25:bc:8e:40:32:9b:3a:b5:9b:b0:70:7f: a5:22:64:d3:0c:fb:51:56:80:48:3d:24:f1:8c:d0:2d:50:24: f2:12:48:8a:5f:47:f0:3f:b7:c3:85:8b:41:2d:78:cf:8d:72: 27:bf:fb:7c:6b:bd:08:61:03:c3:53:0f:78:46:f8:df:ff:67: f6:cb:6c:b4:be:ea:b3:c2:45:fd:c1:dc:11:e4:26:69:11:82: f1:01:47:a8:5b:94:e8:a0:23:33:65:49:a9:3a:73:4f:ad:93: 7c:2d:db:a5:21:a8:ae:36:87:24:42:4c:2f:ec:89:f4:10:98: aa:e4:1c:c6:b6:f2:fd:1a:b3:00:be:e4:54:90:12:66:6d:e1: 7c:03:d6:1b:36:9d:5b:b6:ac:46:8e:2e:46:a4:77:76:3e:2c: ad:bd:7d:9a:92:dd:c1:8c:27:91:81:0c:96:62:07:d9:2c:8e: 9e:c5:ce:2a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEh337Hr+Z/8SMkTNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwNzE4Mzg0OFoXDTI3MDQxMjE3Mzg0OFowLzEtMCsGA1UEAxMk Y2UzZjFjYWItNWE4Ny00YmUzLThhMmUtZmMxMmU1ZWU2MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArubl2qhs/NwscB1QI0Zs1639Lqq/1AAsL3H0 0AeLmIVfvoEl3Copc+y1rWtFrBinlewURRcbgcAbxf2MvdrWxstweqNjcyhlrDTk mOfrFAS7b0bSnQwW7kf/F6fNba6k0jR9+kkNmF0qsMNslgdfgxBOSR77p3I0dVnB yqoxvRdmhzJEy2ji5TE/YSjJ2A6XRjqS1NBZva4QZnSQXsTSEeSLZ6TRuSNHMFYR OSzqpbVZZULrTydd9Bk/D9riXy19uD22UC11pvsjRB31kaGQbkkGiEdLBX6ajEz2 cRRRQkYsRUolueANPN1tQ5g0Y7jI4jmvDg6MQGqYlPuV0lQRJwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJVWKd000wF1Y273Nwfsizxus3I2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j ZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVlZTYzMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NlM2YxY2FiLTVhODctNGJlMy04 YTJlLWZjMTJlNWVlNjMxOS9jZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVl ZTYzMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgtwwDgQCAAIwCAMGBCYC92sAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmk7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABJPDCp2aoHEBuPmGgudyO2lSGAC aN7QsvJqMWiWDnyFbZq4HWW3oci+PB4XcPXHnpK1qzAfJLNreAK/8lZKMm3a8qwy /q3F05WKEl5n4yW8jkAymzq1m7Bwf6UiZNMM+1FWgEg9JPGM0C1QJPISSIpfR/A/ t8OFi0EteM+Ncie/+3xrvQhhA8NTD3hG+N//Z/bLbLS+6rPCRf3B3BHkJmkRgvEB R6hblOigIzNlSak6c0+tk3wt26UhqK42hyRCTC/sifQQmKrkHMa28v0aswC+5FSQ EmZt4XwD1hs2nVu2rEaOLkakd3Y+LK29fZqS3cGMJ5GBDJZiB9ksjp7Fzio= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:05 2025 by rpki-client