$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f895ab-70c5-4a1a-85b3-fe87c2cf2936.cer File: 46f895ab-70c5-4a1a-85b3-fe87c2cf2936.cer (raw, json) Hash identifier: 3QoOeZS/gGkPoT4P6V1APWCb4Xs3iIN7FWkF6DX2yJ0= Subject key identifier: 23:65:66:72:AA:80:01:17:70:A5:D5:EF:C0:C9:F5:4E:05:C1:1C:58 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BB8857890C5D87DF2FA2C8080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f895ab-70c5-4a1a-85b3-fe87c2cf2936/46f895ab-70c5-4a1a-85b3-fe87c2cf2936.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f895ab-70c5-4a1a-85b3-fe87c2cf2936/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 00:45:21 +0000 Certificate not after: Sat 05 Feb 2028 01:45:21 +0000 Subordinate resources: AS: 23237 IP: 2604:1700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:85:78:90:c5:d8:7d:f2:fa:2c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 2 00:45:21 2025 GMT Not After : Feb 5 01:45:21 2028 GMT Subject: CN=46f895ab-70c5-4a1a-85b3-fe87c2cf2936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:b7:c5:e4:08:3c:45:da:24:34:d8:91:ef: 37:d2:5b:da:b3:76:45:bc:76:ba:1c:19:b0:0d:a8: 4a:8b:d5:7a:0b:59:98:34:e3:bf:ed:d7:de:a9:8e: ce:00:98:6c:0d:98:4d:e9:e1:7d:3b:8f:c5:9d:bf: 32:20:e2:1d:f5:52:5b:a2:ab:cb:f4:26:f5:ba:a6: 68:9f:4c:d5:3c:33:3a:9e:97:cf:9b:33:15:04:40: b7:66:93:9a:e6:44:98:8d:de:88:4c:d2:a3:66:fd: 50:57:29:26:db:ef:2f:21:42:6f:fa:3e:e0:ca:e5: 3f:e7:c8:3a:1e:ee:6f:b7:cc:39:52:ab:50:1c:ff: b8:0a:bb:27:05:1e:a6:a7:c0:32:9c:27:71:93:4e: 41:e9:7e:b7:b5:d0:ef:ce:e8:b1:9f:74:63:78:0a: a6:17:d9:99:63:4d:56:f0:de:a9:c1:4c:95:90:5d: d4:b1:f0:cc:9c:29:80:16:41:f1:2b:da:91:97:dd: a9:44:0a:5c:d0:29:13:b1:a4:cf:e1:1a:62:17:90: d1:89:fd:f8:b8:dd:6e:e1:bf:f8:92:87:35:36:ec: 3c:35:26:75:46:d2:9b:b9:eb:66:80:db:74:57:6c: 92:8e:a8:2e:95:d3:13:8d:b8:5c:af:5f:8c:d3:00: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:65:66:72:AA:80:01:17:70:A5:D5:EF:C0:C9:F5:4E:05:C1:1C:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f895ab-70c5-4a1a-85b3-fe87c2cf2936/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f895ab-70c5-4a1a-85b3-fe87c2cf2936/46f895ab-70c5-4a1a-85b3-fe87c2cf2936.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2604:1700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23237 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0b:6a:4c:54:cf:53:94:1a:5d:6b:f6:de:66:0c:80:2d:de: 8a:a8:c4:33:71:f4:42:e5:77:44:c5:95:26:ba:c4:24:5a:5a: 09:00:9c:e1:e7:34:09:0b:dd:f5:83:4a:a4:c4:fd:85:7b:4e: 35:66:50:a0:59:af:84:67:34:80:ff:2d:b9:61:fc:80:57:0a: 7c:24:8a:31:11:23:44:16:9d:fb:9a:57:a7:9c:f9:36:7f:cf: 47:da:59:a2:02:99:36:f8:04:2a:93:71:93:ed:c8:db:2f:67: f9:07:20:2f:f8:ad:82:fe:fe:61:11:52:9b:93:99:1d:f4:4f: 6f:94:c1:54:d7:27:df:ab:28:15:99:65:f9:0f:12:08:68:70: e3:e6:dd:12:77:bd:db:6f:e6:9f:19:33:d9:a7:c3:2b:ce:96: 8a:21:d4:73:1e:54:f3:e3:3c:fe:69:2f:ea:0a:3c:ea:bf:48: 36:e6:b3:70:27:0d:9a:80:64:98:6b:f0:cf:40:2f:44:4e:8c: b8:05:d3:4e:8c:6b:58:5b:45:f5:ff:e8:7d:29:49:a4:31:0c: c3:0e:e0:ea:5b:58:91:d8:8c:e7:71:6d:2c:e6:71:c0:ec:ea: 21:5f:8f:0a:15:a4:b0:4d:b5:a5:a4:65:91:d8:43:7b:dd:81: 92:a4:ae:78 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEu4hXiQxdh98vosgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwMjAwNDUyMVoXDTI4MDIwNTAxNDUyMVowLzEtMCsGA1UEAxMk NDZmODk1YWItNzBjNS00YTFhLTg1YjMtZmU4N2MyY2YyOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIm3xeQIPEXaJDTYke830lvas3ZFvHa6HBmw DahKi9V6C1mYNOO/7dfeqY7OAJhsDZhN6eF9O4/Fnb8yIOId9VJboqvL9Cb1uqZo n0zVPDM6npfPmzMVBEC3ZpOa5kSYjd6ITNKjZv1QVykm2+8vIUJv+j7gyuU/58g6 Hu5vt8w5UqtQHP+4CrsnBR6mp8AynCdxk05B6X63tdDvzuixn3RjeAqmF9mZY01W 8N6pwUyVkF3UsfDMnCmAFkHxK9qRl92pRApc0CkTsaTP4RpiF5DRif34uN1u4b/4 koc1Nuw8NSZ1RtKbuetmgNt0V2ySjqguldMTjbhcr1+M0wAWdwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCNlZnKqgAEXcKXV78DJ9U4FwRxYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 NmY4OTVhYi03MGM1LTRhMWEtODViMy1mZTg3YzJjZjI5MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQ2Zjg5NWFiLTcwYzUtNGExYS04 NWIzLWZlODdjMmNmMjkzNi80NmY4OTVhYi03MGM1LTRhMWEtODViMy1mZTg3YzJj ZjI5MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBBcAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlrFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFsLakxUz1OUGl1r9t5mDIAt3oqoxDNx9ELld0TFlSa6xCRa WgkAnOHnNAkL3fWDSqTE/YV7TjVmUKBZr4RnNID/Lblh/IBXCnwkijERI0QWnfua V6ec+TZ/z0faWaICmTb4BCqTcZPtyNsvZ/kHIC/4rYL+/mERUpuTmR30T2+UwVTX J9+rKBWZZfkPEghocOPm3RJ3vdtv5p8ZM9mnwyvOlooh1HMeVPPjPP5pL+oKPOq/ SDbms3AnDZqAZJhr8M9AL0ROjLgF006Ma1hbRfX/6H0pSaQxDMMO4OpbWJHYjOdx bSzmccDs6iFfjwoVpLBNtaWkZZHYQ3vdgZKkrng= -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:56 2025 by rpki-client