$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer File: 0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer (raw, json) Hash identifier: W/gjDkdZtZjhGfhXZR8fqpitAql9XD6NDxe5o2Sa5cc= Subject key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B407A15EB1DEBAD7A6A516600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Sep 2025 00:45:25 +0000 Certificate not after: Fri 24 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 396507 IP: 23.129.64.0/24 IP: 23.190.144.0/24 IP: 2620:18c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:7a:15:eb:1d:eb:ad:7a:6a:51:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 20 00:45:25 2025 GMT Not After : Dec 24 01:45:25 2027 GMT Subject: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:58:5d:83:9e:66:ec:7a:6b:11:47:8c:38: d3:b7:ac:66:76:68:82:30:43:65:fa:30:06:55:7d: db:4a:6f:99:1d:9b:0e:e6:40:4f:9a:db:56:3d:54: 04:16:c5:03:cb:d9:d6:03:1c:80:3d:98:cf:d0:c4: 18:5b:4b:c0:e6:3d:f8:1c:76:a4:d9:65:8e:b7:e6: 16:cc:48:12:75:ac:7c:d0:dd:b4:76:63:a2:b9:bf: 31:70:07:81:d8:b3:83:ae:87:35:c5:37:aa:d7:a4: a6:c5:1d:cd:75:87:25:fe:19:22:5d:64:e7:9a:2e: 75:a8:e1:a1:1b:2b:f8:58:bc:75:0c:cb:eb:f6:93: 91:b0:bd:07:45:87:29:6e:12:88:af:02:e2:a6:f2: af:fd:c4:68:68:d1:7d:35:ad:07:13:7c:79:8e:38: c6:e3:fa:cc:56:f8:15:e7:5e:f0:b2:13:34:bf:06: 89:64:81:63:a7:29:b9:66:5c:54:3d:3b:c4:bf:bf: 2a:04:aa:7a:c1:f6:e0:e9:4a:a0:7f:19:2b:ff:ed: 8d:e1:12:c4:b5:77:70:65:bc:be:84:66:2d:13:b8: 30:60:ae:5f:e6:65:c2:2e:34:48:a9:9f:5c:38:01: e7:c8:ca:a9:82:02:59:e2:43:54:0f:b8:1d:48:7e: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.64.0/24 23.190.144.0/24 IPv6: 2620:18c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d8:a9:54:1d:88:86:f7:cc:06:5b:60:bc:c4:2d:10:0d:bc: 37:31:75:a3:6c:70:16:00:9f:51:b1:88:bb:30:4d:2d:e6:f8: 00:ad:0a:0e:bf:35:11:4d:6f:42:26:48:a8:f6:65:ba:68:e7: a4:90:66:9f:b9:b0:45:0b:e5:7a:6c:d4:e3:e5:f4:30:4b:17: 60:2b:22:34:c2:e5:bd:52:48:fe:46:86:1d:6c:7b:37:8a:d0: 32:40:c6:ce:8f:32:59:e7:a4:93:04:9a:39:c5:8d:d9:a9:84: 07:84:82:f7:cc:e8:a5:22:ec:54:52:de:9f:bd:a7:56:92:c3: 07:1e:1c:24:f9:1f:1e:83:5f:0a:e0:1a:3e:05:49:44:cb:ea: d8:a0:c5:cd:70:34:bd:3b:5d:94:45:79:91:6b:1e:6a:83:5f: 8b:d7:ff:45:37:00:1c:fb:3f:85:18:50:eb:be:9c:6c:7a:b8: 6d:45:b0:fa:26:8f:e7:f6:c1:ea:29:0f:a5:ae:e0:83:43:12: 30:e7:46:d4:59:12:d1:a9:38:a2:ae:9d:15:73:96:ae:bc:a0: f5:e8:d1:6c:62:a7:56:73:df:4d:f4:6c:71:bc:0c:c6:21:3c: a3:18:e0:7a:f3:3c:86:35:e7:60:39:b1:dc:b1:9d:fb:ff:2a: af:15:d5:19 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtAehXrHeutempRZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkyMDAwNDUyNVoXDTI3MTIyNDAxNDUyNVowLzEtMCsGA1UEAxMk MGU2YjdhM2YtYjIwNS00YzZiLWEwMGYtN2RmYzIwODNiNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqpYXYOeZux6axFHjDjTt6xmdmiCMENl+jAG VX3bSm+ZHZsO5kBPmttWPVQEFsUDy9nWAxyAPZjP0MQYW0vA5j34HHak2WWOt+YW zEgSdax80N20dmOiub8xcAeB2LODroc1xTeq16SmxR3NdYcl/hkiXWTnmi51qOGh Gyv4WLx1DMvr9pORsL0HRYcpbhKIrwLipvKv/cRoaNF9Na0HE3x5jjjG4/rMVvgV 517wshM0vwaJZIFjpym5ZlxUPTvEv78qBKp6wfbg6Uqgfxkr/+2N4RLEtXdwZby+ hGYtE7gwYK5f5mXCLjRIqZ9cOAHnyMqpggJZ4kNUD7gdSH4RcQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHIGrpEXHk7WoDpe1pJj889xjUS9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w ZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4M2I3OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBlNmI3YTNmLWIyMDUtNGM2Yi1h MDBmLTdkZmMyMDgzYjc4ZC8wZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4 M2I3OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgUADBAAXvpAwDgQCAAIwCAMGBCYgAYwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYM2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE2KlUHYiG98wGW2C8 xC0QDbw3MXWjbHAWAJ9RsYi7ME0t5vgArQoOvzURTW9CJkio9mW6aOekkGafubBF C+V6bNTj5fQwSxdgKyI0wuW9Ukj+RoYdbHs3itAyQMbOjzJZ56STBJo5xY3ZqYQH hIL3zOilIuxUUt6fvadWksMHHhwk+R8eg18K4Bo+BUlEy+rYoMXNcDS9O12URXmR ax5qg1+L1/9FNwAc+z+FGFDrvpxserhtRbD6Jo/n9sHqKQ+lruCDQxIw50bUWRLR qTiirp0Vc5auvKD16NFsYqdWc99N9GxxvAzGITyjGOB68zyGNedgObHcsZ37/yqv FdUZ -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:35 2025 by rpki-client