$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer File: 4164770e-1f48-4239-921d-775b5152fa2e.cer (raw, json) Hash identifier: 7vIDFEDZqfSEgpgawaIFqxaArJHT5ebvVEp5ssuEO9w= Subject key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B407A15BD0DDDD8FC8B219080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Sep 2025 00:45:25 +0000 Certificate not after: Fri 24 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 23.131.120.0/24 IP: 2606:acc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:7a:15:bd:0d:dd:d8:fc:8b:21:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 20 00:45:25 2025 GMT Not After : Dec 24 01:45:25 2027 GMT Subject: CN=4164770e-1f48-4239-921d-775b5152fa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:c4:44:11:bd:03:81:f8:aa:94:30:a0:8f: f7:6c:41:36:4f:f7:7f:cd:99:d8:09:62:41:ba:05: 81:1a:c7:fa:31:25:23:bf:6a:ec:96:3b:69:02:c8: a0:39:59:a8:4b:f6:46:3c:42:f9:f1:8f:98:f9:e2: d7:e7:64:34:66:ed:d8:69:46:38:5a:3c:c6:a3:27: 0b:a8:fc:e9:c2:44:f2:e2:4f:8d:0a:32:5a:c2:36: 3e:c0:30:00:aa:e3:ef:56:ba:69:20:33:07:36:ac: 15:8f:34:ea:6d:f5:82:62:1e:71:16:1f:a3:f8:59: 00:c3:96:f4:23:46:e9:e9:48:62:85:37:0b:93:30: 62:32:47:e5:76:c6:6b:83:5d:8b:33:08:62:6f:e7: a3:0f:48:c7:bb:cd:93:15:9c:1b:40:d3:2d:04:84: ab:5d:9e:d7:e2:1d:7b:b1:e1:8d:67:9a:05:0b:a9: aa:e2:b6:43:0d:dd:3a:83:96:10:09:81:c3:9b:67: 55:50:fc:c6:fb:c3:42:39:b4:13:a1:8e:d9:5d:1e: d9:56:75:31:98:b6:c9:81:d3:eb:7c:4a:8a:41:d1: 02:cc:b6:76:53:01:6c:a1:6e:c2:61:f1:79:b3:75: 53:6b:76:0c:ed:cd:0c:e2:77:1e:32:18:1e:a5:28: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.131.120.0/24 IPv6: 2606:acc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5f:08:08:6b:df:5e:6f:b2:b0:03:9d:b5:2b:2c:eb:9c:87: 95:cd:7b:51:52:f4:a6:0d:15:26:c4:84:7a:90:9c:c8:4d:23: 15:07:2e:22:7b:93:81:d9:74:68:b8:83:ec:93:e2:1d:2d:bd: 5f:28:80:06:75:0e:c1:57:c9:10:97:c4:ff:51:f4:32:73:a8: 9f:2f:57:85:12:12:69:f0:8b:a6:b7:70:ef:ca:9c:28:1b:5a: a7:7f:17:d7:02:27:f3:9f:97:5c:c4:e9:dc:9b:31:65:e5:d5: e1:94:a5:d3:1a:f9:ed:85:a9:2c:a5:dd:aa:22:3c:e4:75:bd: f0:7b:7a:48:e5:81:2a:cc:eb:d5:9c:8d:ae:24:bb:41:93:d2: 9c:17:d5:57:f8:65:0a:50:a9:e7:cb:21:59:a3:1a:72:75:aa: e3:ee:3d:95:f5:ec:f0:af:89:ef:e9:0c:3a:06:ed:cc:7a:dc: 4d:7b:40:18:e7:d4:0d:d8:1e:38:ba:2f:5e:db:3c:f6:7d:17: 3e:bf:ce:57:28:02:70:5f:da:24:7c:8c:53:80:94:b5:bf:6e: 17:b5:b3:52:23:46:39:41:8d:48:11:2a:bb:fc:4b:60:28:57: 5a:04:1c:7d:12:46:5d:6a:60:57:8a:35:2b:b4:63:f0:f8:7b: 3c:f5:97:ba -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEtAehW9Dd3Y/IshkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyMDAwNDUyNVoXDTI3MTIyNDAxNDUyNVowLzEtMCsGA1UEAxMk NDE2NDc3MGUtMWY0OC00MjM5LTkyMWQtNzc1YjUxNTJmYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkobERBG9A4H4qpQwoI/3bEE2T/d/zZnYCWJB ugWBGsf6MSUjv2rsljtpAsigOVmoS/ZGPEL58Y+Y+eLX52Q0Zu3YaUY4WjzGoycL qPzpwkTy4k+NCjJawjY+wDAAquPvVrppIDMHNqwVjzTqbfWCYh5xFh+j+FkAw5b0 I0bp6UhihTcLkzBiMkfldsZrg12LMwhib+ejD0jHu82TFZwbQNMtBISrXZ7X4h17 seGNZ5oFC6mq4rZDDd06g5YQCYHDm2dVUPzG+8NCObQToY7ZXR7ZVnUxmLbJgdPr fEqKQdECzLZ2UwFsoW7CYfF5s3VTa3YM7c0M4nceMhgepSg9iwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFIPLi+uFTfIXnjca9vffUgUEdrVqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1MmZhMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQxNjQ3NzBlLTFmNDgtNDIzOS05 MjFkLTc3NWI1MTUyZmEyZS80MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1 MmZhMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXg3gwDQQCAAIwBwMFACYGrMAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA dF8ICGvfXm+ysAOdtSss65yHlc17UVL0pg0VJsSEepCcyE0jFQcuInuTgdl0aLiD 7JPiHS29XyiABnUOwVfJEJfE/1H0MnOony9XhRISafCLprdw78qcKBtap38X1wIn 85+XXMTp3JsxZeXV4ZSl0xr57YWpLKXdqiI85HW98Ht6SOWBKszr1ZyNriS7QZPS nBfVV/hlClCp58shWaMacnWq4+49lfXs8K+J7+kMOgbtzHrcTXtAGOfUDdgeOLov Xts89n0XPr/OVygCcF/aJHyMU4CUtb9uF7WzUiNGOUGNSBEqu/xLYChXWgQcfRJG XWpgV4o1K7Rj8Ph7PPWXug== -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:11 2025 by rpki-client