$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer File: 1aea854c-b5a0-4772-a924-0abe91b36c2c.cer (raw, json) Hash identifier: YjQWS5CZJFVkf3IoTrUzTGW0gx2D/49zfun2ah7BjJ8= Subject key identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ACC9EAF88349C0EDB24DD6280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 Aug 2025 12:45:24 +0000 Certificate not after: Fri 12 Nov 2027 13:45:24 +0000 Subordinate resources: AS: 17387 IP: 23.167.72.0/24 IP: 2602:fa46::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:9e:af:88:34:9c:0e:db:24:dd:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 9 12:45:24 2025 GMT Not After : Nov 12 13:45:24 2027 GMT Subject: CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:7f:f9:99:ac:bd:b9:0a:a7:a8:e7:d3:ef: dc:87:50:85:05:08:a0:44:0c:47:e9:ce:d7:c1:b1: 58:93:f8:a2:05:5b:77:2c:3f:b4:5a:ee:96:d8:d6: 34:97:e7:58:a0:c9:4f:20:ad:3b:af:8f:19:55:ef: 24:64:7b:21:91:c8:00:45:a3:be:c9:1b:60:8a:3f: 35:4e:00:d0:cb:dd:18:2b:fd:01:ff:ec:dd:1e:06: 49:f1:60:12:35:d7:b2:37:fc:12:73:af:f4:7d:22: d5:a9:61:d9:7f:64:65:57:1b:d7:e4:d3:13:fe:48: 85:e1:f4:e7:a6:35:60:a4:36:f2:16:10:70:a1:3b: 4a:d5:65:86:06:39:c6:b9:93:3e:d9:27:87:69:78: 60:bf:59:e7:6b:c6:62:a3:91:b7:b8:e6:76:41:8e: c8:0c:62:4f:3b:ff:d8:84:c8:a7:ba:96:18:6d:3f: a5:07:d2:84:b8:86:76:05:61:ae:c4:5f:29:0c:f7: b1:44:0c:86:a3:f4:7f:e5:40:a7:90:67:63:9e:e4: 0e:56:c5:1e:4e:3b:7c:c3:99:1d:60:3e:ff:c5:e1: 24:ef:89:b2:e9:40:86:08:79:39:5b:fe:dc:c8:e6: fe:c8:e3:63:3b:2b:36:58:f2:8c:c1:1d:33:21:81: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.167.72.0/24 IPv6: 2602:fa46::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:bd:a4:9b:e6:11:27:f3:d5:2c:88:ae:e6:25:a4:a9:b3:d1: a4:57:8a:5c:67:01:20:9d:0d:ab:99:b9:36:b5:61:b3:15:9d: 21:35:8f:47:ea:02:15:ed:af:38:3a:9b:be:27:fd:27:0b:5b: 12:a3:02:81:f5:b9:d5:7e:5e:e4:f5:4e:b0:cd:33:ff:a1:8e: f9:de:af:ea:09:15:a5:31:be:52:37:56:37:96:ac:4f:13:04: c0:47:45:69:88:61:3b:2b:8a:18:56:d7:79:4a:6f:aa:c7:7d: d2:59:0e:ae:91:76:ce:3e:c7:ed:47:5b:04:4d:cc:3c:5f:37: 32:3a:57:63:a8:37:9f:75:1c:1d:5b:07:50:74:49:1e:76:0b: 08:ff:77:37:5a:bd:0f:fd:1f:c2:60:cf:3d:8b:9f:12:1e:be: c4:a9:91:d3:b2:59:a0:81:c5:e0:94:15:df:ce:ac:e5:9c:27: 91:c1:0e:b4:67:ea:ff:2b:ec:45:12:c9:df:5e:58:fc:06:ba: a7:29:39:cb:55:8d:6b:89:e4:f3:59:6c:ec:49:2d:04:40:fd: 1b:25:bc:12:c0:17:8c:d7:eb:bf:d0:9f:4f:85:84:1b:4d:62: ac:c9:33:b2:f4:cb:48:5b:72:e1:ce:62:f3:d0:c0:31:41:21: b1:9e:ee:06 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWErMnq+INJwO2yTdYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwOTEyNDUyNFoXDTI3MTExMjEzNDUyNFowLzEtMCsGA1UEAxMk MWFlYTg1NGMtYjVhMC00NzcyLWE5MjQtMGFiZTkxYjM2YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntJ/+ZmsvbkKp6jn0+/ch1CFBQigRAxH6c7X wbFYk/iiBVt3LD+0Wu6W2NY0l+dYoMlPIK07r48ZVe8kZHshkcgARaO+yRtgij81 TgDQy90YK/0B/+zdHgZJ8WASNdeyN/wSc6/0fSLVqWHZf2RlVxvX5NMT/kiF4fTn pjVgpDbyFhBwoTtK1WWGBjnGuZM+2SeHaXhgv1nna8Zio5G3uOZ2QY7IDGJPO//Y hMinupYYbT+lB9KEuIZ2BWGuxF8pDPexRAyGo/R/5UCnkGdjnuQOVsUeTjt8w5kd YD7/xeEk74my6UCGCHk5W/7cyOb+yONjOys2WPKMwR0zIYHiJwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN6uiHjIs9cjOHmyx70wqPMwXVz4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x YWVhODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJlOTFiMzZjMmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFhZWE4NTRjLWI1YTAtNDc3Mi1h OTI0LTBhYmU5MWIzNmMyYy8xYWVhODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJlOTFi MzZjMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXp0gwDgQCAAIwCAMGBCYC+kYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkPrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA69pJvmESfz1SyIruYlpKmz0aRX ilxnASCdDauZuTa1YbMVnSE1j0fqAhXtrzg6m74n/ScLWxKjAoH1udV+XuT1TrDN M/+hjvner+oJFaUxvlI3VjeWrE8TBMBHRWmIYTsrihhW13lKb6rHfdJZDq6Rds4+ x+1HWwRNzDxfNzI6V2OoN591HB1bB1B0SR52Cwj/dzdavQ/9H8Jgzz2LnxIevsSp kdOyWaCBxeCUFd/OrOWcJ5HBDrRn6v8r7EUSyd9eWPwGuqcpOctVjWuJ5PNZbOxJ LQRA/RslvBLAF4zX67/Qn0+FhBtNYqzJM7L0y0hbcuHOYvPQwDFBIbGe7gY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:18 2025 by rpki-client