$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer File: 1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer (raw, json) Hash identifier: X5FkIM1zwM8l2bia1gYH6x9q3E3qCSetPai0bekbg2I= Subject key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BBB6DF07F2D9BFBFB6000E0F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 01:45:22 +0000 Certificate not after: Sun 06 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 36530 AS: 401776 IP: 23.185.104.0/24 IP: 130.12.16.0/22 IP: 2602:f864::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:6d:f0:7f:2d:9b:fb:fb:60:00:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 3 01:45:22 2025 GMT Not After : Feb 6 01:45:22 2028 GMT Subject: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:23:72:ba:2c:f8:07:36:2a:56:ce:88:11: b4:c7:4c:67:1b:be:0f:ca:24:fd:07:f3:d0:37:41: 7f:91:b8:d2:53:05:ca:78:7d:58:00:a4:e7:a8:a4: 6c:ab:1e:49:db:e9:8e:c4:d1:ec:1c:ff:00:fc:0f: 51:29:49:8b:0a:93:e1:67:9d:49:8d:e6:65:f9:35: 40:ce:c5:06:01:55:0d:78:f8:87:5f:52:03:0c:e5: ce:ec:a7:02:14:b8:d1:21:ff:6b:c0:7f:e1:16:b0: ef:1d:0c:a3:92:9c:b3:0c:16:cf:ae:36:d7:55:93: f7:8b:06:30:88:c0:dc:31:e4:ed:de:48:e5:9c:18: a7:ea:4e:4a:27:b2:99:d9:32:85:e6:36:c2:03:73: f0:30:ab:07:2a:22:e7:6e:78:23:54:e4:6b:2a:3a: 13:e7:d3:8c:e3:38:7d:76:3e:ea:9c:bd:ae:75:fe: 30:98:b3:f2:29:b0:07:09:19:25:b0:a5:db:a4:41: ad:a1:f2:2d:8f:ac:ac:3f:e7:50:a8:02:24:a4:17: e4:92:59:11:58:93:52:e8:90:00:4b:d0:cd:2a:af: c1:0b:70:77:19:44:86:91:6b:8b:61:34:51:8c:e6: 35:21:b0:22:a2:1f:33:fd:db:2c:41:aa:29:a0:13: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.185.104.0/24 130.12.16.0/22 IPv6: 2602:f864::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36530 401776 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:df:51:03:21:30:bb:87:6f:e5:e8:67:10:93:10:5e:59:49: 6e:d8:2c:29:9e:b5:2c:ca:aa:a9:01:ec:33:29:81:b8:d1:1b: e2:1e:cb:82:00:7a:e3:dd:9e:6f:fc:d3:75:d6:59:1c:36:03: 76:2e:2a:f1:9d:b9:20:11:ad:3b:bb:bb:ac:9f:31:aa:59:b9: 28:63:da:ed:5f:d6:e7:4d:89:21:59:1d:f8:e5:9f:db:db:ad: fe:d1:25:da:f3:17:fa:e2:96:7f:7d:4c:9b:a0:ad:02:54:a8: ab:3b:78:69:8c:3a:02:4b:e7:49:34:7e:3d:15:a0:23:48:47: 75:b7:3c:31:3b:73:ab:50:47:70:1f:d5:3b:24:1b:4d:18:c7: ae:ad:7f:97:25:18:53:70:8d:5e:08:3c:6f:44:86:8c:3b:8d: 0d:a2:63:9d:27:d9:11:b4:f1:3b:a2:a3:fb:46:c0:4b:81:97: 36:1d:50:9f:ba:ef:f5:bb:6a:13:56:16:15:4f:b0:03:72:26: 22:fa:ed:4a:f3:40:28:3e:ca:58:62:18:86:31:07:76:fe:6d: 02:a4:da:6d:8f:8c:07:24:3b:54:f5:d0:77:a7:28:1b:16:a2: fb:01:b6:87:c2:4d:54:95:ec:9f:af:cb:20:d2:99:80:4d:50: 05:83:2e:4a -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEu7bfB/LZv7+2AA4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwMzAxNDUyMloXDTI4MDIwNjAxNDUyMlowLzEtMCsGA1UEAxMk MTI1MmM3OTYtNmFiMi00ZWI5LWJhYTAtMTQ0NWZjODBjYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHEjcros+Ac2KlbOiBG0x0xnG74PyiT9B/PQ N0F/kbjSUwXKeH1YAKTnqKRsqx5J2+mOxNHsHP8A/A9RKUmLCpPhZ51JjeZl+TVA zsUGAVUNePiHX1IDDOXO7KcCFLjRIf9rwH/hFrDvHQyjkpyzDBbPrjbXVZP3iwYw iMDcMeTt3kjlnBin6k5KJ7KZ2TKF5jbCA3PwMKsHKiLnbngjVORrKjoT59OM4zh9 dj7qnL2udf4wmLPyKbAHCRklsKXbpEGtofItj6ysP+dQqAIkpBfkklkRWJNS6JAA S9DNKq/BC3B3GUSGkWuLYTRRjOY1IbAioh8z/dssQaopoBOAFQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFAL+jYIRPN3UQbUJOrogMdQQKbPxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x MjUyYzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1ZmM4MGNhODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzEyNTJjNzk2LTZhYjItNGViOS1i YWEwLTE0NDVmYzgwY2E4NC8xMjUyYzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1ZmM4 MGNhODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXuWgDBAKCDBAwDgQCAAIwCAMGBCYC+GQAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCOsgIDBiFwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAELfUQMhMLuH b+XoZxCTEF5ZSW7YLCmetSzKqqkB7DMpgbjRG+Iey4IAeuPdnm/803XWWRw2A3Yu KvGduSARrTu7u6yfMapZuShj2u1f1udNiSFZHfjln9vbrf7RJdrzF/riln99TJug rQJUqKs7eGmMOgJL50k0fj0VoCNIR3W3PDE7c6tQR3Af1TskG00Yx66tf5clGFNw jV4IPG9Ehow7jQ2iY50n2RG08Tuio/tGwEuBlzYdUJ+67/W7ahNWFhVPsANyJiL6 7UrzQCg+ylhiGIYxB3b+bQKk2m2PjAckO1T10HenKBsWovsBtofCTVSV7J+vyyDS mYBNUAWDLko= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:43 2025 by rpki-client