$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer File: f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer (raw, json) Hash identifier: E6sZpeksIGzat82ROPy/Vn/GS91l8ntj0V5fgDlKN/g= Subject key identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A612375E03AA3E3B059209480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 00:45:37 +0000 Certificate not after: Tue 05 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 23.174.168.0/24 IP: 2602:f935::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:23:75:e0:3a:a3:e3:b0:59:20:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 2 00:45:37 2025 GMT Not After : Oct 5 00:45:37 2027 GMT Subject: CN=f9c69ad2-7fee-4064-9683-23ee7a48db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:11:52:f4:8b:5d:8d:db:00:ad:9f:56:3d: 4c:75:dd:af:34:9a:09:c5:00:db:24:c2:47:28:35: f6:a3:ea:3a:a7:5f:26:6c:94:b5:c5:e6:ac:75:62: 57:ef:11:13:4d:0d:e3:cd:5e:64:8e:4f:a7:68:8b: 46:7f:c1:fc:ed:b2:38:bb:8b:53:d0:96:3d:9d:70: a6:17:54:25:fd:27:d7:49:23:7a:03:1e:40:9a:fa: b8:c6:fd:cd:cc:8a:91:0b:36:4e:af:8a:53:0b:79: 97:5c:1f:6d:22:df:0b:b7:cf:b5:77:32:48:8d:a9: 19:a2:79:fe:e2:e5:1a:b4:5e:ff:74:03:88:2f:36: 0c:8a:9b:08:70:ab:fd:02:6f:86:b5:48:c5:1b:74: ed:58:1c:d4:a4:4c:e5:35:f8:56:29:33:17:06:ba: 0b:3d:c4:d5:d8:49:b3:e7:cc:78:92:36:be:64:6c: 0f:52:c1:69:54:64:4e:6f:d3:54:2b:28:58:2d:95: f4:84:b3:bc:4e:84:23:bc:4d:4b:ed:60:0f:4d:99: 52:e2:29:b0:a4:a3:1e:b3:7d:a0:44:fe:32:f7:fe: ec:21:c8:d8:bc:37:34:02:cf:d7:c5:2c:3c:a8:4a: f7:8e:6a:3e:04:66:55:06:14:ed:3c:38:f4:eb:6b: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.168.0/24 IPv6: 2602:f935::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e0:89:ac:16:f1:6c:5b:9d:bc:ba:36:ed:20:37:a6:33:ac: df:b0:f1:4d:a0:6e:7c:51:ab:35:4c:ea:a6:5c:42:3b:5d:cb: 58:02:f2:f9:55:5f:18:72:4c:0c:c1:f6:a4:4b:ce:ff:2c:bb: 8e:e7:ff:fa:a1:bc:ef:f8:14:de:2a:d0:65:89:45:79:47:16: bc:28:f7:22:c9:81:37:2a:dd:d7:31:ca:05:95:04:58:a2:d2: 2c:3d:e1:26:fb:96:6a:ce:c6:fc:52:ac:87:c3:2f:a3:21:21: b2:69:cb:9b:74:8d:6e:b6:58:95:d2:4b:1c:25:1c:9e:16:1b: 3c:1a:fe:89:b5:fb:ef:de:6c:c1:f4:b6:e5:a9:9b:6e:53:38: 7e:0a:05:b1:22:d3:99:b1:6a:9f:80:6b:b0:9e:29:c4:33:15: f9:47:66:d3:93:d5:4b:65:44:d5:b7:e3:16:cd:e5:27:18:0d: 7a:53:90:aa:f3:45:9f:c4:3c:36:87:d1:69:f7:ab:19:d6:25: 78:50:53:c0:60:f5:47:86:8b:e6:72:c0:49:98:38:28:e4:a8: 75:d9:86:22:ba:b8:f7:3a:f2:e3:cd:2e:94:3f:a8:98:a7:7c: 5c:c0:5e:1b:b0:5a:6c:3e:77:fa:b0:0f:6b:c9:ac:bd:93:b3: d7:bc:0d:2c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEphI3XgOqPjsFkglIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwMjAwNDUzN1oXDTI3MTAwNTAwNDUzN1owLzEtMCsGA1UEAxMk ZjljNjlhZDItN2ZlZS00MDY0LTk2ODMtMjNlZTdhNDhkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqsRUvSLXY3bAK2fVj1Mdd2vNJoJxQDbJMJH KDX2o+o6p18mbJS1xeasdWJX7xETTQ3jzV5kjk+naItGf8H87bI4u4tT0JY9nXCm F1Ql/SfXSSN6Ax5Amvq4xv3NzIqRCzZOr4pTC3mXXB9tIt8Lt8+1dzJIjakZonn+ 4uUatF7/dAOILzYMipsIcKv9Am+GtUjFG3TtWBzUpEzlNfhWKTMXBroLPcTV2Emz 58x4kja+ZGwPUsFpVGROb9NUKyhYLZX0hLO8ToQjvE1L7WAPTZlS4imwpKMes32g RP4y9/7sIcjYvDc0As/XxSw8qEr3jmo+BGZVBhTtPDj062sE6wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHHVjDTxNSRvJfoKSk2lhoIZWcQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m OWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0OGRiNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y5YzY5YWQyLTdmZWUtNDA2NC05 NjgzLTIzZWU3YTQ4ZGI0Zi9mOWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0 OGRiNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrqgwDgQCAAIwCAMGACYC+TUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGzgiawW8Wxbnby6Nu0gN6YzrN+w8U2gbnxRqzVM6qZcQjtdy1gC8vlVXxhyTAzB 9qRLzv8su47n//qhvO/4FN4q0GWJRXlHFrwo9yLJgTcq3dcxygWVBFii0iw94Sb7 lmrOxvxSrIfDL6MhIbJpy5t0jW62WJXSSxwlHJ4WGzwa/om1++/ebMH0tuWpm25T OH4KBbEi05mxap+Aa7CeKcQzFflHZtOT1UtlRNW34xbN5ScYDXpTkKrzRZ/EPDaH 0Wn3qxnWJXhQU8Bg9UeGi+ZywEmYOCjkqHXZhiK6uPc68uPNLpQ/qJinfFzAXhuw Wmw+d/qwD2vJrL2Ts9e8DSw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:42 2025 by rpki-client