$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer File: 3d9879da-145f-4f21-a7c3-da6b59a01625.cer (raw, json) Hash identifier: 6uqXobBz+CAysnDfpa9bNwRalAv3giWwr/haCjC0vg0= Subject key identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B6EE6A4C901DF87EB2E1B2610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 15:51:20 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 46766 IP: 23.170.72.0/24 IP: 199.241.60.0/23 IP: 2602:f9a2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:e6:a4:c9:01:df:87:eb:2e:1b:26:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 6 15:51:20 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=3d9879da-145f-4f21-a7c3-da6b59a01625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:05:4e:af:7d:fe:02:2d:1a:e4:a2:fa:52: e0:e9:e9:d5:ac:2f:59:44:ad:c6:de:e8:06:1d:17: 50:f2:84:79:b4:cc:5f:b0:d0:13:79:ff:fd:3b:d1: 9b:ad:59:ca:e5:8f:14:bd:d1:c1:73:16:2d:fa:33: 48:f6:f4:0d:91:2e:10:55:5c:b8:20:9a:28:b7:60: c9:8a:04:12:11:8c:42:17:81:35:66:10:7a:45:e3: ce:97:e2:d4:1b:df:2e:30:4e:9d:32:e5:25:9b:d2: 9e:09:d9:c9:42:9a:28:fc:c1:b6:2e:de:ab:b5:aa: 9d:10:b2:5d:02:e5:ee:39:3a:da:b0:22:d3:52:a2: 53:23:c4:80:3c:01:55:fb:9c:98:a0:de:78:cc:ba: 16:ef:29:cc:24:11:97:f5:cf:d1:f1:7d:32:ae:8f: 9a:1b:28:e8:6f:94:11:b6:98:40:5f:35:4e:d8:e3: bb:e0:07:41:52:fc:3c:1a:33:4e:d6:56:4d:a9:02: d7:a6:40:a3:bb:87:77:8c:9c:bb:78:00:c2:ce:12: ca:2d:45:54:9d:2f:d5:24:d8:ed:6b:43:85:72:4c: 8b:fa:df:14:0d:51:61:b5:de:f8:cb:ac:f3:4e:de: ec:15:0c:fa:9c:6d:d8:27:82:01:34:3c:01:1d:b6: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.72.0/24 199.241.60.0/23 IPv6: 2602:f9a2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:06:98:15:8f:64:5c:6c:d2:d3:d4:af:b4:10:c6:d2:99: 64:9b:3a:6f:2b:d6:72:64:f6:18:12:c5:a5:ab:86:c4:f4:0d: 61:f7:7a:a7:ce:48:20:3b:b8:96:3e:8e:41:66:af:e2:f0:d0: b8:36:3e:9c:1c:15:80:53:95:ed:68:92:91:dd:fb:02:d1:0d: 50:e6:0e:10:a2:78:ee:72:d8:12:4e:00:c2:88:70:65:ea:90: fb:42:fd:a0:ab:7b:12:74:bd:61:52:8d:09:ad:e3:28:b5:b6: 9b:2d:19:02:6a:06:3a:0e:f2:60:1a:b8:f6:11:55:e9:ad:73: 7b:fd:f1:55:b4:4c:ee:f7:af:72:5d:65:bd:4e:29:7f:0c:d2: b1:e4:99:2a:90:19:43:ea:8e:46:e9:c1:e3:b9:37:87:fd:8c: a8:1c:e6:d1:9c:7f:e5:3f:c4:8e:29:5a:35:66:5b:8a:d0:10: 51:f9:55:ba:8a:97:29:34:c4:7f:6e:d2:39:ba:85:7a:09:28: 81:d4:10:70:97:6e:2b:a6:ea:c6:b2:c1:fb:1c:d1:69:54:4f: 1b:21:e5:16:0b:cc:17:52:88:b2:02:c5:ef:af:22:72:b9:4b: 43:c0:fb:ca:1f:ae:42:c1:78:ca:ae:5d:8c:87:f8:0d:e5:fb: 92:a4:70:15 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtu5qTJAd+H6y4bJhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MTAwNjE1NTEyMFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk M2Q5ODc5ZGEtMTQ1Zi00ZjIxLWE3YzMtZGE2YjU5YTAxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cFTq99/gItGuSi+lLg6enVrC9ZRK3G3ugG HRdQ8oR5tMxfsNATef/9O9GbrVnK5Y8UvdHBcxYt+jNI9vQNkS4QVVy4IJoot2DJ igQSEYxCF4E1ZhB6RePOl+LUG98uME6dMuUlm9KeCdnJQpoo/MG2Lt6rtaqdELJd AuXuOTrasCLTUqJTI8SAPAFV+5yYoN54zLoW7ynMJBGX9c/R8X0yro+aGyjob5QR tphAXzVO2OO74AdBUvw8GjNO1lZNqQLXpkCju4d3jJy7eADCzhLKLUVUnS/VJNjt a0OFckyL+t8UDVFhtd74y6zzTt7sFQz6nG3YJ4IBNDwBHbabJwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCDmWdT5QlIKbr62y3iDbSbs+k3kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlhMDE2MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNkOTg3OWRhLTE0NWYtNGYyMS1h N2MzLWRhNmI1OWEwMTYyNS8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlh MDE2MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXqkgDBAHH8TwwDgQCAAIwCAMGACYC+aIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC2rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBB3QaYFY9kXGzS09Sv tBDG0plkmzpvK9ZyZPYYEsWlq4bE9A1h93qnzkggO7iWPo5BZq/i8NC4Nj6cHBWA U5XtaJKR3fsC0Q1Q5g4QonjuctgSTgDCiHBl6pD7Qv2gq3sSdL1hUo0JreMotbab LRkCagY6DvJgGrj2EVXprXN7/fFVtEzu969yXWW9Til/DNKx5JkqkBlD6o5G6cHj uTeH/YyoHObRnH/lP8SOKVo1ZluK0BBR+VW6ipcpNMR/btI5uoV6CSiB1BBwl24r purGssH7HNFpVE8bIeUWC8wXUoiyAsXvryJyuUtDwPvKH65CwXjKrl2Mh/gN5fuS pHAV -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:07 2025 by rpki-client