$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer File: 9a52f880-7957-4bb9-b30a-78f30c289eb1.cer (raw, json) Hash identifier: E53H8Ok8eSa2gXjyJNTQKaK6opkYqfbMuQjj+Iyx+gU= Subject key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B4BA4D12FB5090B9E8FA48600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 00:45:24 +0000 Certificate not after: Tue 28 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 32159 IP: 23.153.216.0/23 IP: 2602:2de::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:a4:d1:2f:b5:09:0b:9e:8f:a4:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 24 00:45:24 2025 GMT Not After : Dec 28 01:45:24 2027 GMT Subject: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:ad:22:25:32:4d:2f:05:1f:ad:fc:a0:0a: a6:44:17:54:34:e6:42:b2:bb:22:50:ad:a1:56:8f: 7c:a9:a0:39:27:15:0b:1c:ef:59:95:be:17:52:bf: b5:f2:7d:a5:9e:7d:02:72:8f:c5:0a:7e:57:39:4f: fe:b7:0c:2e:21:36:e1:6a:fc:06:e8:6b:c5:8c:33: 32:0a:df:9e:4c:da:fb:82:71:5e:6b:54:2c:2c:dc: d1:d3:5e:1c:0f:2a:5f:73:dd:fd:63:13:94:a4:4e: b9:29:cf:a2:c8:f7:59:85:eb:ac:5b:75:5f:df:e1: e1:b0:80:81:56:e3:39:0f:ea:ef:6f:2d:64:f9:d9: bf:3a:77:14:d5:04:e2:e3:62:7b:0c:76:3a:62:55: bf:f2:39:5a:87:71:b7:05:de:5c:5a:1e:7a:a1:f7: 27:c6:98:d8:12:91:d3:50:9d:c2:05:6f:f7:e3:fa: 5e:6a:55:22:49:30:28:51:90:3d:b9:b7:e8:32:16: 2d:62:cf:97:62:e2:e4:92:08:0f:a8:6d:bc:ef:f0: a2:bf:62:19:32:06:58:eb:73:9e:ad:7c:4a:ab:b7: 64:0a:16:0c:88:76:db:80:56:c5:c9:67:3f:b4:c7: 56:bb:ae:48:54:3a:a9:69:c8:fc:29:c6:5f:e1:96: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.153.216.0/23 IPv6: 2602:2de::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3c:e8:18:53:1b:61:91:dd:ef:4f:89:e7:e4:cb:ff:b6:21: 87:f5:13:89:a1:62:5d:45:c8:98:02:e9:40:08:57:a9:eb:d9: fa:46:9c:7f:2f:b9:75:65:c6:6c:6c:f0:a2:4d:49:2e:01:fd: 11:73:5a:15:9b:ea:8b:37:fa:14:db:b6:97:eb:16:92:e6:0e: 61:58:0c:dd:d4:90:73:ad:7c:31:34:1a:66:66:c7:68:31:fe: 2e:1d:46:85:d0:12:6f:10:0c:66:48:2b:d9:0b:dc:b4:fa:a0: 19:8d:f7:64:36:64:32:98:75:2a:2b:ec:9e:e0:94:be:93:f5: af:2c:59:da:bc:28:71:9a:32:a1:a2:b7:36:e0:cb:2e:f0:83: 14:6d:17:78:1d:91:c8:69:26:36:ff:f2:ac:5c:b0:37:4e:66: 97:7d:78:24:82:9e:c4:6a:3e:b8:17:44:a8:c1:c9:4e:8b:dd: bc:0d:11:23:28:53:2a:d1:40:0d:17:b7:e7:25:dc:6a:e9:da: 2c:ae:e6:c8:8f:2b:09:b6:3f:e4:27:65:85:07:4c:e9:f5:8e: 5c:6e:5c:83:2e:64:99:50:b7:4d:d4:94:fa:71:50:e3:42:a8: 3e:d7:b8:87:8f:66:aa:6d:2d:b7:99:7d:76:61:ef:18:60:14: d8:0e:ad:92 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEtLpNEvtQkLno+khgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyNDAwNDUyNFoXDTI3MTIyODAxNDUyNFowLzEtMCsGA1UEAxMk OWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0StIiUyTS8FH638oAqmRBdUNOZCsrsiUK2h Vo98qaA5JxULHO9Zlb4XUr+18n2lnn0Cco/FCn5XOU/+twwuITbhavwG6GvFjDMy Ct+eTNr7gnFea1QsLNzR014cDypfc939YxOUpE65Kc+iyPdZheusW3Vf3+HhsICB VuM5D+rvby1k+dm/OncU1QTi42J7DHY6YlW/8jlah3G3Bd5cWh56ofcnxpjYEpHT UJ3CBW/34/pealUiSTAoUZA9ubfoMhYtYs+XYuLkkggPqG287/Civ2IZMgZY63Oe rXxKq7dkChYMiHbbgFbFyWc/tMdWu65IVDqpacj8KcZf4ZYI+wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKSVi+ajtBfMXpHdh5WsLn9ll1CsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzlhNTJmODgwLTc5NTctNGJiOS1i MzBhLTc4ZjMwYzI4OWViMS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMy ODllYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXmdgwDgQCAAIwCAMGBCYCAt4AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn2fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACI86BhTG2GR3e9Piefky/+2IYf1 E4mhYl1FyJgC6UAIV6nr2fpGnH8vuXVlxmxs8KJNSS4B/RFzWhWb6os3+hTbtpfr FpLmDmFYDN3UkHOtfDE0GmZmx2gx/i4dRoXQEm8QDGZIK9kL3LT6oBmN92Q2ZDKY dSor7J7glL6T9a8sWdq8KHGaMqGitzbgyy7wgxRtF3gdkchpJjb/8qxcsDdOZpd9 eCSCnsRqPrgXRKjByU6L3bwNESMoUyrRQA0Xt+cl3Grp2iyu5siPKwm2P+QnZYUH TOn1jlxuXIMuZJlQt03UlPpxUONCqD7XuIePZqptLbeZfXZh7xhgFNgOrZI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:48 2025 by rpki-client