$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.cer File: ae9bcb97-e23a-4c94-877e-e9c76c2668bb.cer (raw, json) Hash identifier: e9JLPWF90anEv7M8DHy+R9iBpMPkaoSnRBdpgQn9Xis= Subject key identifier: 68:32:D6:DB:92:21:8A:BB:AF:B2:1D:B8:8C:59:AF:EA:6F:47:4E:26 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B73E5A31EC3B3693002048700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 10:48:21 +0000 Certificate not after: Tue 11 Jan 2028 11:48:21 +0000 Subordinate resources: IP: 23.146.20.0/24 IP: 2602:f54d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:e5:a3:1e:c3:b3:69:30:02:04:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 10:48:21 2025 GMT Not After : Jan 11 11:48:21 2028 GMT Subject: CN=ae9bcb97-e23a-4c94-877e-e9c76c2668bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:19:a4:45:28:4b:39:e2:a3:9a:65:68:ec: 64:26:1b:a4:2c:eb:b9:92:7e:17:ac:9e:a3:ea:9b: c6:74:69:1d:71:78:ae:4d:a4:53:df:b9:dd:03:24: 1f:6d:46:12:9c:02:50:39:6e:ff:ef:bc:a5:2a:41: 99:f0:ae:3d:74:0a:2a:8a:bd:9b:ca:9d:cd:de:6b: 78:41:8b:30:17:6b:19:9a:73:fe:65:b1:f3:26:eb: 34:e1:e3:c9:c4:19:9a:b0:8a:08:c6:24:4c:8d:8f: 49:f0:8f:f7:9b:4a:59:61:4c:14:57:41:3b:70:0e: f4:d2:8e:b3:02:80:a2:1d:81:61:e6:4c:9e:9d:be: 04:12:e5:72:99:53:23:95:c5:b0:9e:6c:bb:60:95: 44:87:40:9b:df:33:70:22:0b:c8:f8:26:1b:4e:23: fd:59:f5:24:8f:9e:f5:7e:7e:fd:cb:71:a1:df:50: 75:46:02:3b:f4:08:ea:e5:d3:ad:9c:17:f3:c9:27: 4e:95:34:2e:8a:d9:82:5a:c1:1a:bd:d6:63:6f:cf: cd:fd:11:45:49:f5:66:14:e7:48:f7:ff:bd:d1:a7: 17:c5:e6:0b:c0:ca:d7:4a:4e:6e:e1:b3:2a:8f:61: 55:3e:7a:05:8f:ab:33:52:73:56:41:28:eb:b2:53: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:D6:DB:92:21:8A:BB:AF:B2:1D:B8:8C:59:AF:EA:6F:47:4E:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.146.20.0/24 IPv6: 2602:f54d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c5:7c:d5:71:a8:f5:dc:37:73:c4:e2:ed:9b:04:6a:02:4b: ca:52:83:71:c8:cd:6e:9e:fc:5e:a2:c9:d4:97:5e:2d:51:3f: d3:7e:10:2f:1f:38:35:b2:0a:68:88:c2:86:b6:73:5c:8c:0e: ec:d2:58:d5:e5:e2:67:a4:c1:67:ab:d7:d7:c1:e0:dc:5d:40: b8:c6:f7:6b:8c:ae:c9:47:df:ba:51:69:52:50:b4:0f:88:69: fb:1c:ab:d2:e2:72:82:ed:b2:6a:f2:82:d8:4d:ca:08:3b:04: 14:3c:ac:1d:8f:dc:cc:f1:9b:be:c5:56:cd:35:52:ec:7e:48: 2c:2e:69:82:dc:1f:fa:30:ab:89:39:86:ee:fc:bd:1e:8d:6a: 44:0c:c8:51:df:f5:1c:54:4f:a3:8e:80:5e:83:18:a4:03:36: e0:20:c6:cd:3d:14:11:8d:67:e3:06:e5:99:60:e5:41:ca:26: 04:5e:7f:2e:dc:4e:f9:c9:03:ff:ca:9f:a5:b0:77:94:61:db: 26:79:21:30:58:98:c7:86:e5:a3:b8:40:7c:d5:fa:b0:e2:7d: f6:15:e4:63:61:dd:45:67:21:a2:92:f4:ad:68:df:96:30:7e: 20:94:61:42:71:fc:40:27:84:12:dc:e7:d6:8e:2c:eb:8a:58: 6f:39:5e:ea -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtz5aMew7NpMAIEhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODEwNDgyMVoXDTI4MDExMTExNDgyMVowLzEtMCsGA1UEAxMk YWU5YmNiOTctZTIzYS00Yzk0LTg3N2UtZTljNzZjMjY2OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEZpEUoSznio5plaOxkJhukLOu5kn4XrJ6j 6pvGdGkdcXiuTaRT37ndAyQfbUYSnAJQOW7/77ylKkGZ8K49dAoqir2byp3N3mt4 QYswF2sZmnP+ZbHzJus04ePJxBmasIoIxiRMjY9J8I/3m0pZYUwUV0E7cA700o6z AoCiHYFh5kyenb4EEuVymVMjlcWwnmy7YJVEh0Cb3zNwIgvI+CYbTiP9WfUkj571 fn79y3Gh31B1RgI79Ajq5dOtnBfzySdOlTQuitmCWsEavdZjb8/N/RFFSfVmFOdI 9/+90acXxeYLwMrXSk5u4bMqj2FVPnoFj6szUnNWQSjrslMFSwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGgy1tuSIYq7r7IduIxZr+pvR04mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h ZTliY2I5Ny1lMjNhLTRjOTQtODc3ZS1lOWM3NmMyNjY4YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2FlOWJjYjk3LWUyM2EtNGM5NC04 NzdlLWU5Yzc2YzI2NjhiYi9hZTliY2I5Ny1lMjNhLTRjOTQtODc3ZS1lOWM3NmMy NjY4YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkhQwDgQCAAIwCAMGACYC9U0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHXFfNVxqPXcN3PE4u2bBGoCS8pSg3HIzW6e/F6iydSXXi1RP9N+EC8fODWyCmiI woa2c1yMDuzSWNXl4mekwWer19fB4NxdQLjG92uMrslH37pRaVJQtA+Iafscq9Li coLtsmrygthNygg7BBQ8rB2P3Mzxm77FVs01Uux+SCwuaYLcH/owq4k5hu78vR6N akQMyFHf9RxUT6OOgF6DGKQDNuAgxs09FBGNZ+MG5Zlg5UHKJgRefy7cTvnJA//K n6Wwd5Rh2yZ5ITBYmMeG5aO4QHzV+rDiffYV5GNh3UVnIaKS9K1o35YwfiCUYUJx /EAnhBLc59aOLOuKWG85Xuo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:26:11 2025 by rpki-client