$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer File: 24c594b2-08c8-4864-afae-a607d79beb73.cer (raw, json) Hash identifier: BDNJVKI8jRQ++f2lMcMUChYciIj3iIH9jcQjYETXfeA= Subject key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BAA900E780D535F35E2B17100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 00:45:22 +0000 Certificate not after: Mon 31 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 398178 IP: 138.43.208.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:90:0e:78:0d:53:5f:35:e2:b1:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 28 00:45:22 2025 GMT Not After : Jan 31 01:45:22 2028 GMT Subject: CN=24c594b2-08c8-4864-afae-a607d79beb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:4c:d2:64:96:e5:09:5b:de:a3:d1:d2:1e: c0:ed:75:e7:5c:e0:e3:19:ad:fe:99:cd:84:95:c0: e0:53:04:0d:4a:d9:9e:ca:57:14:d1:89:ce:4f:b9: 33:ed:8d:e2:52:8f:44:d1:7b:06:17:ae:b8:7b:c3: 33:5f:5c:1c:b0:2a:5a:a8:f1:df:46:18:3c:6d:5e: 37:d5:f9:c2:b9:76:e5:e6:fc:59:e6:a5:b7:ac:6c: 9c:0b:2e:53:87:90:df:d5:f1:9c:32:a3:e8:a9:b6: 4b:9b:97:8f:61:e3:21:2b:24:94:87:7b:c0:19:2b: f5:bb:eb:46:dc:27:37:a9:eb:d0:83:db:7f:92:ef: f4:f2:77:1c:0b:49:77:c4:72:ef:17:ab:38:ed:1f: be:a8:e1:ff:34:a5:a0:48:11:d8:da:fb:49:58:f5: e1:9c:b5:c8:16:9c:e3:34:ad:ea:99:ca:4a:fb:3e: 54:40:7d:1d:26:74:84:2b:f6:f6:95:e9:06:06:83: e6:b5:95:69:96:35:ea:da:b7:63:28:e2:bc:21:17: c7:f2:83:41:bf:bf:d6:c4:83:5a:86:5b:97:68:d8: 01:49:30:f2:16:86:66:0d:0a:9c:71:04:11:d8:06: 8e:b3:56:5c:24:a0:9a:34:e4:e0:7d:cc:f2:1a:9b: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 138.43.208.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398178 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7d:57:37:9c:a8:40:34:fc:75:8f:e0:a9:e7:db:49:a2:47: f0:13:dd:7d:19:e5:ed:d8:9d:b1:71:4a:9b:6e:70:2c:67:b1: 40:e5:e6:0d:92:26:73:6e:b4:dd:e3:fd:bb:ad:67:2c:08:f4: 64:78:6e:0c:a6:0b:e7:75:0c:dc:a4:a2:7c:ef:7f:97:32:85: 21:5b:87:d2:16:f4:72:a4:34:7e:9a:51:3d:d4:5e:a3:24:79: 22:ab:b3:d6:b1:3f:9a:5e:8b:dd:39:06:d4:b5:04:aa:ee:5b: 2e:85:b5:01:c8:3e:6a:ce:96:a7:d3:9f:92:4d:9f:2f:ba:72: e6:77:97:b4:d5:3d:b8:d2:ac:3e:e9:e5:81:a0:11:64:3c:93: 26:3a:3f:3b:43:59:4b:91:be:fe:39:6f:cd:d4:f4:2d:04:b5: 31:d3:e1:2c:ba:58:92:1c:27:ae:61:80:b1:30:29:16:9a:d7: e1:0a:b2:dd:6a:ac:82:5d:0d:9e:b3:d3:23:2b:85:9c:d6:00: be:75:34:99:04:1d:cd:d3:a3:6c:20:76:37:b2:a4:7c:d5:55: 2b:52:88:77:bc:2c:17:0a:ac:2a:be:b7:a4:da:f8:5e:a0:9d: 96:e5:3b:60:54:c4:87:ad:39:0e:3f:23:e7:cd:62:6a:0c:1e: 48:e1:63:97 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuqkA54DVNfNeKxcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyODAwNDUyMloXDTI4MDEzMTAxNDUyMlowLzEtMCsGA1UEAxMk MjRjNTk0YjItMDhjOC00ODY0LWFmYWUtYTYwN2Q3OWJlYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNFM0mSW5Qlb3qPR0h7A7XXnXODjGa3+mc2E lcDgUwQNStmeylcU0YnOT7kz7Y3iUo9E0XsGF664e8MzX1wcsCpaqPHfRhg8bV43 1fnCuXbl5vxZ5qW3rGycCy5Th5Df1fGcMqPoqbZLm5ePYeMhKySUh3vAGSv1u+tG 3Cc3qevQg9t/ku/08nccC0l3xHLvF6s47R++qOH/NKWgSBHY2vtJWPXhnLXIFpzj NK3qmcpK+z5UQH0dJnSEK/b2lekGBoPmtZVpljXq2rdjKOK8IRfH8oNBv7/WxINa hluXaNgBSTDyFoZmDQqccQQR2AaOs1ZcJKCaNOTgfczyGpviHwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIKHhSoK+ApOKT+sGmIC5E+o7DBgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y NGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5YmViNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzI0YzU5NGIyLTA4YzgtNDg2NC1h ZmFlLWE2MDdkNzliZWI3My8yNGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5 YmViNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKK9AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhNiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAER9VzecqEA0/HWP4Knn20miR/AT3X0Z5e3YnbFxSptucCxn sUDl5g2SJnNutN3j/butZywI9GR4bgymC+d1DNykonzvf5cyhSFbh9IW9HKkNH6a UT3UXqMkeSKrs9axP5pei905BtS1BKruWy6FtQHIPmrOlqfTn5JNny+6cuZ3l7TV PbjSrD7p5YGgEWQ8kyY6PztDWUuRvv45b83U9C0EtTHT4Sy6WJIcJ65hgLEwKRaa 1+EKst1qrIJdDZ6z0yMrhZzWAL51NJkEHc3To2wgdjeypHzVVStSiHe8LBcKrCq+ t6Ta+F6gnZblO2BUxIetOQ4/I+fNYmoMHkjhY5c= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:10 2025 by rpki-client