$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer File: b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer (raw, json) Hash identifier: c/FRafXvyASv+3E0N16M3ObP4Jr+cb76VY5pAk1oJdI= Subject key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B76EA6BB6330988EE07658DF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 12:45:25 +0000 Certificate not after: Tue 16 Feb 2027 13:45:33 +0000 Subordinate resources: AS: 30671 IP: 23.160.24.0/24 IP: 142.249.244.0/22 IP: 2602:fa45::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:ea:6b:b6:33:09:88:ee:07:65:8d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 9 12:45:25 2025 GMT Not After : Feb 16 13:45:33 2027 GMT Subject: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:f7:d8:7b:9e:84:71:14:42:28:b4:75:5c: 0f:f2:bb:9c:43:70:28:87:83:51:b3:dc:96:da:24: 32:42:27:1d:4a:40:39:3e:73:6c:f7:76:33:49:31: 12:25:b4:3d:28:1e:42:b0:e5:76:87:b4:1f:35:73: 01:84:c5:40:71:cf:40:b1:9f:e0:e6:cd:44:05:5d: 95:d7:48:01:c7:d4:bc:6c:e1:52:e4:40:aa:4a:0a: 89:46:23:b3:02:0c:3d:2f:fd:d8:18:90:71:b5:36: d6:ba:62:75:cb:99:ac:ad:e1:53:80:d0:19:00:37: 31:e4:7c:04:8e:03:b1:f0:e9:8a:20:8a:66:78:ad: e5:4a:bc:54:4c:24:d0:60:bb:46:8b:90:36:5f:03: bb:9c:f1:06:20:7e:60:50:e3:37:0c:c7:f5:df:82: de:2d:f1:a2:b9:8a:ad:4d:ef:57:16:41:b9:98:2a: 89:7d:63:b4:d0:ac:72:20:46:5e:27:8e:b3:12:fb: a9:81:3d:5e:a4:b8:a7:bd:1a:9a:b0:71:94:06:a6: 76:f8:14:7b:69:a6:11:73:30:a9:fb:9c:19:de:aa: ea:03:fd:4a:a0:7e:bc:d1:51:f6:d3:c6:37:5e:30: 68:f8:bf:86:03:cc:f7:ea:35:a5:ac:d3:b8:0a:8e: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.24.0/24 142.249.244.0/22 IPv6: 2602:fa45::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6a:74:62:ea:b4:fe:7e:ab:5e:78:f8:3c:d3:39:ad:32:2c: 13:1c:0f:8c:a7:ac:77:35:9c:a8:3b:5f:00:db:f2:2f:ce:b9: d5:42:e6:a4:24:79:01:47:97:1c:59:be:ed:76:a7:64:1f:34: 3e:8a:06:2e:36:8b:b0:fb:e3:b6:be:71:a7:1b:01:cf:b9:a3: dd:03:8b:b4:1d:1c:3b:5f:c8:61:0a:26:62:a8:89:b4:cd:ca: 13:01:e4:fa:bb:00:c3:27:71:5d:97:5c:7a:c7:ba:c4:5c:ce: c4:58:2f:b5:7c:01:6c:27:2f:0e:f5:4f:97:f3:44:0b:96:6a: 06:7f:15:4d:44:07:1a:6b:3f:00:73:57:4f:b2:6c:16:72:c1: 4f:06:ff:bf:d3:70:5d:83:a9:d0:fd:d0:17:d6:0b:c9:c4:92: 8c:32:6c:07:b3:94:c4:8e:ce:e9:68:34:1f:b9:24:ae:45:b9: 39:00:96:62:cb:6b:53:e6:33:49:fa:ad:51:66:1d:c9:7b:46: f5:b8:52:4e:fd:c2:38:c9:cd:0a:e6:a3:f1:33:3d:b0:0e:26: 0d:f6:c4:59:20:1a:e2:86:0e:3b:9e:c2:98:e7:ae:45:48:33: f4:82:37:26:2b:23:7e:07:a6:9e:9e:2b:40:20:42:c5:5e:38: 53:d4:c7:ca -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt26mu2MwmI7gdljfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAwOTEyNDUyNVoXDTI3MDIxNjEzNDUzM1owLzEtMCsGA1UEAxMk YjY4ZDhhNTUtOTlkMS00YzVhLWI0MjYtOTYzMjk0NGVlNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSf32HuehHEUQii0dVwP8rucQ3Aoh4NRs9yW 2iQyQicdSkA5PnNs93YzSTESJbQ9KB5CsOV2h7QfNXMBhMVAcc9AsZ/g5s1EBV2V 10gBx9S8bOFS5ECqSgqJRiOzAgw9L/3YGJBxtTbWumJ1y5msreFTgNAZADcx5HwE jgOx8OmKIIpmeK3lSrxUTCTQYLtGi5A2XwO7nPEGIH5gUOM3DMf134LeLfGiuYqt Te9XFkG5mCqJfWO00KxyIEZeJ46zEvupgT1epLinvRqasHGUBqZ2+BR7aaYRczCp +5wZ3qrqA/1KoH680VH208Y3XjBo+L+GA8z36jWlrNO4Co7klQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFE25bckVTqQ9drfoHIfF8fB3oXPVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i NjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0ZWU0YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I2OGQ4YTU1LTk5ZDEtNGM1YS1i NDI2LTk2MzI5NDRlZTRjNS9iNjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0 ZWU0YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoBgDBAKO+fQwDgQCAAIwCAMGACYC+kUAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnfPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFpqdGLqtP5+q154+DzT Oa0yLBMcD4ynrHc1nKg7XwDb8i/OudVC5qQkeQFHlxxZvu12p2QfND6KBi42i7D7 47a+cacbAc+5o90Di7QdHDtfyGEKJmKoibTNyhMB5Pq7AMMncV2XXHrHusRczsRY L7V8AWwnLw71T5fzRAuWagZ/FU1EBxprPwBzV0+ybBZywU8G/7/TcF2DqdD90BfW C8nEkowybAezlMSOzuloNB+5JK5FuTkAlmLLa1PmM0n6rVFmHcl7RvW4Uk79wjjJ zQrmo/EzPbAOJg32xFkgGuKGDjuewpjnrkVIM/SCNyYrI34Hpp6eK0AgQsVeOFPU x8o= -----END CERTIFICATE-----Generated at Wed Nov 5 17:42:07 2025 by rpki-client