$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer File: 68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer (raw, json) Hash identifier: LPixf+75GD3XeE5wTGQpayTH6yQsfGeVSQN+5FQ+kKw= Subject key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B397F5EED1B7B15B96EFBBF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 12:45:25 +0000 Certificate not after: Tue 21 Dec 2027 13:45:25 +0000 Subordinate resources: AS: 401021 IP: 23.176.152.0/24 IP: 2620:0:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:7f:5e:ed:1b:7b:15:b9:6e:fb:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 17 12:45:25 2025 GMT Not After : Dec 21 13:45:25 2027 GMT Subject: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:6c:20:e2:27:b8:d2:94:59:01:b3:12:23: 6a:ab:41:b0:23:b3:cf:68:d6:a6:38:ad:f5:c8:e3: 0a:d6:72:10:14:fd:ac:a3:77:75:31:f9:30:0c:c6: 38:16:28:4b:3b:64:50:74:09:f7:73:9b:ed:09:61: 0f:48:eb:de:2e:2e:40:81:d2:1d:c1:19:a4:3a:93: 18:52:6b:ee:b7:91:d5:cc:bb:8e:7e:1c:60:ed:d6: 28:7a:56:ec:c2:34:9d:32:ae:fe:c7:09:68:01:cb: a1:78:41:b9:71:6f:14:6a:5b:e7:9c:b9:f2:99:1d: 75:fc:37:7d:4b:94:bb:27:b6:24:c4:49:3b:fb:33: 15:a6:22:31:91:1b:29:6b:44:27:02:7b:3b:9f:1f: 6a:d2:63:4b:0e:6a:7d:40:c9:67:4d:e8:2f:da:41: cb:22:26:d4:1f:9a:01:a2:4e:83:f5:76:e5:c8:8e: 5f:93:24:01:01:ee:7b:8b:73:7a:31:3e:1a:51:71: f9:31:ad:77:6c:66:59:6c:37:86:a9:32:46:ee:7d: d9:42:9c:aa:df:a9:c8:4e:86:85:8f:b5:5b:2c:74: 4a:d5:aa:23:b0:8e:27:32:b3:fb:bc:80:4a:a9:5e: 88:e4:f2:06:d3:8c:11:c0:26:36:f7:08:dc:ae:fe: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.176.152.0/24 IPv6: 2620:0:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401021 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a5:d7:3b:e7:44:4d:a4:74:ca:fd:22:06:0f:00:b6:51:e8: 6a:c2:97:5d:8c:72:20:a3:ed:04:cb:10:22:aa:3f:81:de:e6: b3:90:de:36:ef:54:cc:e7:e1:15:77:65:a2:5a:e5:ad:29:60: 50:e6:f1:13:dc:4f:36:60:0d:94:3d:62:6a:f1:0e:ac:e5:97: e1:f3:05:25:9b:6c:9c:44:25:41:73:94:78:d3:4d:86:8d:5a: f3:ed:e7:d7:6b:8c:89:78:4a:76:65:ab:74:a8:d2:49:f6:49: 29:d3:43:f0:d4:01:29:92:17:8f:d5:94:dc:6d:82:c4:f7:ab: 3d:ac:d9:9e:d2:05:80:14:55:04:4a:f0:c8:cf:15:ef:ef:c9: 13:3c:3d:1c:0e:61:51:81:47:5a:22:f2:59:92:bc:2a:4f:a9: 09:d6:75:57:39:cf:ce:0a:b4:69:48:db:0c:44:fa:c6:37:4a: bd:2d:c8:41:01:a1:52:92:11:7b:f9:73:66:60:72:92:6a:a9: db:ae:6e:91:ad:41:d1:d9:51:bb:42:50:ca:59:fc:bc:02:94: d1:08:ec:9d:47:14:37:aa:7b:c0:e7:7c:9b:ab:6a:fb:cb:25: a5:af:7b:97:90:72:50:f4:ed:6d:c3:75:95:2d:35:d3:53:3a: 83:d8:bd:55 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEs5f17tG3sVuW77v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNzEyNDUyNVoXDTI3MTIyMTEzNDUyNVowLzEtMCsGA1UEAxMk NjhhMzU1NTItNDI3Ny00ZTYyLWE1MWUtNGIzMWFiOGQ0Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7FsIOInuNKUWQGzEiNqq0GwI7PPaNamOK31 yOMK1nIQFP2so3d1MfkwDMY4FihLO2RQdAn3c5vtCWEPSOveLi5AgdIdwRmkOpMY Umvut5HVzLuOfhxg7dYoelbswjSdMq7+xwloAcuheEG5cW8UalvnnLnymR11/Dd9 S5S7J7YkxEk7+zMVpiIxkRspa0QnAns7nx9q0mNLDmp9QMlnTegv2kHLIibUH5oB ok6D9XblyI5fkyQBAe57i3N6MT4aUXH5Ma13bGZZbDeGqTJG7n3ZQpyq36nIToaF j7VbLHRK1aojsI4nMrP7vIBKqV6I5PIG04wRwCY29wjcrv52KwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBayTa3IMGeulKtmz1ToxirmOlJZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 OGEzNTU1Mi00Mjc3LTRlNjItYTUxZS00YjMxYWI4ZDRjYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY4YTM1NTUyLTQyNzctNGU2Mi1h NTFlLTRiMzFhYjhkNGNhMC82OGEzNTU1Mi00Mjc3LTRlNjItYTUxZS00YjMxYWI4 ZDRjYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXsJgwDwQCAAIwCQMHBCYgAACAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGHn0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgKXXO+dETaR0yv0iBg8AtlHo asKXXYxyIKPtBMsQIqo/gd7ms5DeNu9UzOfhFXdlolrlrSlgUObxE9xPNmANlD1i avEOrOWX4fMFJZtsnEQlQXOUeNNNho1a8+3n12uMiXhKdmWrdKjSSfZJKdND8NQB KZIXj9WU3G2CxPerPazZntIFgBRVBErwyM8V7+/JEzw9HA5hUYFHWiLyWZK8Kk+p CdZ1VznPzgq0aUjbDET6xjdKvS3IQQGhUpIRe/lzZmBykmqp265uka1B0dlRu0JQ yln8vAKU0QjsnUcUN6p7wOd8m6tq+8slpa97l5ByUPTtbcN1lS0101M6g9i9VQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:41 2025 by rpki-client