$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer File: 5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer (raw, json) Hash identifier: 9DpyK1+7D0WMCC11W1qzu0BVootoniLyq/82SQgVqy8= Subject key identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BB2F01B571B98DA1C58B84A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 00:45:22 +0000 Certificate not after: Thu 03 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 401214 IP: 23.183.152.0/24 IP: 2602:f888::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f0:1b:57:1b:98:da:1c:58:b8:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 31 00:45:22 2025 GMT Not After : Feb 3 01:45:22 2028 GMT Subject: CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d8:62:98:cc:50:48:26:71:a2:1d:b6:28:67: 09:f4:e8:d4:28:ab:54:87:67:9f:72:ea:51:2e:65: d0:0b:6d:d5:37:d2:29:16:b6:60:82:3c:c5:9a:e3: b9:ea:61:ae:3b:fc:30:85:1d:34:18:1a:31:47:0a: 3f:2f:7c:2c:62:ce:22:a3:a2:4c:72:de:58:f1:3f: 65:6e:ce:62:b4:21:3e:af:5b:c5:40:f2:f5:bd:6c: 37:39:f1:e7:66:05:3b:00:7c:e9:29:df:92:8b:36: a1:f9:b3:db:73:3f:70:76:ed:0f:7f:53:3b:2d:4a: 22:15:f5:2d:a9:34:3a:d1:08:5d:73:61:9e:f9:34: 5a:a7:89:39:1c:af:c7:67:e9:69:93:1d:fe:aa:51: d9:ad:19:02:54:cb:45:e0:c0:e1:ca:cd:a2:57:94: 35:54:bd:13:d1:26:ad:29:f1:e9:5a:80:25:01:67: f8:64:78:43:30:74:41:ea:11:2f:40:75:d9:74:39: 38:f2:40:b1:b8:46:62:40:66:7d:e1:9e:08:9a:6e: 21:df:96:89:22:6e:fd:e0:99:3d:7f:5f:e7:b1:f8: 1f:9d:d5:c7:19:44:6a:42:bc:11:9c:bc:07:68:af: 92:31:52:d1:2a:30:20:6b:95:a9:0b:fd:f8:11:54: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.183.152.0/24 IPv6: 2602:f888::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401214 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bb:a5:aa:49:75:2b:9c:77:0c:f8:fd:53:a3:71:97:33:0d: ac:bf:60:b7:92:11:07:2d:f1:43:3e:e9:a5:0c:1a:6e:23:61: 38:1c:8e:41:26:5b:42:21:df:1c:fc:74:a7:6c:68:73:63:0d: a0:76:65:b5:93:a4:ea:6a:a3:a0:5f:0f:67:4b:34:f1:a3:4d: 45:25:9c:ae:83:bf:df:3d:23:ef:6e:4b:c2:6d:62:ad:53:98: 5b:8a:e5:a4:e2:3f:9f:2d:d0:73:2a:53:6a:73:14:39:94:20: 60:86:66:6c:36:97:e1:43:0e:c2:33:3a:6a:5d:cd:27:02:ad: f4:66:46:69:c3:47:54:39:c6:32:4a:7e:cb:a7:20:7c:ce:77: ae:82:9e:66:3d:2e:76:15:14:ac:5f:22:1a:18:4a:ea:4c:31: ee:d8:a6:0b:c6:ae:03:6b:d2:11:da:03:ed:47:86:22:54:38: 82:d6:c6:a9:34:84:a4:f9:27:77:a4:a2:70:64:30:b1:8c:f4: bd:d5:bc:5f:2a:0e:e3:85:f4:9d:bc:1c:19:b4:48:ea:a1:61: 17:14:18:08:8f:25:52:88:33:e4:20:2f:88:7b:95:ab:65:c1: 83:82:a8:94:d2:a0:91:21:61:75:54:22:56:f5:12:3d:a7:a4: c6:b1:5e:7d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuy8BtXG5jaHFi4SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAzMTAwNDUyMloXDTI4MDIwMzAxNDUyMlowLzEtMCsGA1UEAxMk NWQyODQ1YTQtYjk1Mi00YWI3LTljZGItZDQzMmNhNTMwZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNhimMxQSCZxoh22KGcJ9OjUKKtUh2efcupR LmXQC23VN9IpFrZggjzFmuO56mGuO/wwhR00GBoxRwo/L3wsYs4io6JMct5Y8T9l bs5itCE+r1vFQPL1vWw3OfHnZgU7AHzpKd+Sizah+bPbcz9wdu0Pf1M7LUoiFfUt qTQ60Qhdc2Ge+TRap4k5HK/HZ+lpkx3+qlHZrRkCVMtF4MDhys2iV5Q1VL0T0Sat KfHpWoAlAWf4ZHhDMHRB6hEvQHXZdDk48kCxuEZiQGZ94Z4Imm4h35aJIm794Jk9 f1/nsfgfndXHGURqQrwRnLwHaK+SMVLRKjAga5WpC/34EVT45QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA1LJKBuzJpjD3VhtWPycLiVVyErMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1MzBkZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVkMjg0NWE0LWI5NTItNGFiNy05 Y2RiLWQ0MzJjYTUzMGRkOS81ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1 MzBkZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXt5gwDgQCAAIwCAMGACYC+IgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfPjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZu6WqSXUrnHcM+P1To3GXMw2s v2C3khEHLfFDPumlDBpuI2E4HI5BJltCId8c/HSnbGhzYw2gdmW1k6TqaqOgXw9n SzTxo01FJZyug7/fPSPvbkvCbWKtU5hbiuWk4j+fLdBzKlNqcxQ5lCBghmZsNpfh Qw7CMzpqXc0nAq30ZkZpw0dUOcYySn7LpyB8zneugp5mPS52FRSsXyIaGErqTDHu 2KYLxq4Da9IR2gPtR4YiVDiC1sapNISk+Sd3pKJwZDCxjPS91bxfKg7jhfSdvBwZ tEjqoWEXFBgIjyVSiDPkIC+Ie5WrZcGDgqiU0qCRIWF1VCJW9RI9p6TGsV59 -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:06 2025 by rpki-client