$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer File: cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer (raw, json) Hash identifier: 5t8Tjv66hAtoJPxyjrps1B+z3KN4s8DFUoMdtpD1zxo= Subject key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B9C9AA6015462ACB422447B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 00:45:24 +0000 Certificate not after: Wed 26 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 401010 IP: 23.148.136.0/24 IP: 130.51.77.0/24 IP: 142.248.204.0/23 IP: 2602:face::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:9a:a6:01:54:62:ac:b4:22:44:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 23 00:45:24 2025 GMT Not After : Jan 26 01:45:24 2028 GMT Subject: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:c8:9a:d5:8f:a3:b3:1b:f7:0c:da:89:7c: 29:3d:d8:87:55:92:53:64:e8:42:bd:1b:4e:6a:c0: c2:1e:33:4f:2c:a1:63:01:94:66:bb:86:c0:f4:85: a7:ec:84:49:dc:85:63:b1:95:04:aa:28:e1:a3:26: bf:d9:00:97:86:4f:20:15:44:e0:89:08:1c:0d:f3: 08:09:ec:08:5a:81:2b:9e:1f:1d:19:44:5b:06:fd: bf:32:08:00:ed:a6:23:34:c2:1f:1d:3a:3e:93:af: 63:a5:53:2a:03:1d:fb:00:49:d3:b8:df:cd:84:bf: 64:23:a2:84:ab:9f:e5:d3:ac:5c:d5:11:f8:89:20: ee:98:d4:2a:05:77:36:e5:27:31:cf:b0:dd:95:35: 16:42:07:c8:0d:15:8e:9f:19:10:20:3d:6e:e2:58: 25:03:c5:28:7b:ac:20:81:2f:4f:4f:7a:92:e6:4d: 1d:36:6e:41:db:d1:eb:95:2f:37:63:84:3b:b7:cc: 38:72:ee:af:19:b4:65:98:79:d4:4b:56:3d:fd:03: db:00:a7:46:d7:37:5c:de:dd:37:2b:7e:67:73:4e: e7:91:cf:39:65:4e:35:2c:7d:ca:a6:3d:41:5c:a2: 17:79:8f:78:7a:fd:ed:4e:9a:54:b0:7e:06:de:e8: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 142.248.204.0/23 IPv6: 2602:face::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:94:e1:51:d4:ff:18:3d:30:3e:42:e8:d8:5f:9a:82:b5:2c: aa:52:66:73:82:d9:ce:63:4d:3f:72:29:55:f2:b6:81:38:59: 62:32:9f:cf:20:58:f4:02:69:6b:9a:5d:5c:0e:44:cd:88:28: 20:83:72:ae:2c:2b:7a:89:60:83:6d:d6:90:73:34:f2:65:32: 16:94:50:37:54:c9:36:69:d1:34:6f:6e:7a:1e:29:ee:3d:88: 19:6d:ae:2d:b7:ce:8b:9d:b5:aa:3a:5b:cb:5d:b3:fb:b9:58: 07:9b:51:fb:3b:e2:60:1e:7a:fb:8a:36:15:53:70:f5:ee:d3: 53:a4:4e:e8:c9:bd:a0:8e:18:24:57:6a:70:72:59:cf:88:09: bc:38:e4:84:e0:e5:87:fd:26:db:de:4b:0d:ef:e2:33:17:f6: 55:24:c9:c8:30:56:1d:7a:8a:e1:ff:9f:7e:a3:ef:b4:58:d2: b2:9b:1e:9e:fe:fa:f1:d7:cb:8e:13:0c:c1:06:b7:31:63:cf: ed:a6:4b:4d:d3:8a:e5:8c:dd:ab:31:83:cd:a4:9b:76:9d:ea: 85:08:69:09:b8:d1:cd:4b:ad:6d:ee:9d:5b:44:9e:26:cd:2d: 66:ad:b6:1e:56:4b:41:11:7a:33:ae:93:56:83:fb:87:ef:46: 5e:69:3d:be -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEucmqYBVGKstCJEewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMzAwNDUyNFoXDTI4MDEyNjAxNDUyNFowLzEtMCsGA1UEAxMk Y2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEzMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjImtWPo7Mb9wzaiXwpPdiHVZJTZOhCvRtO asDCHjNPLKFjAZRmu4bA9IWn7IRJ3IVjsZUEqijhoya/2QCXhk8gFUTgiQgcDfMI CewIWoErnh8dGURbBv2/MggA7aYjNMIfHTo+k69jpVMqAx37AEnTuN/NhL9kI6KE q5/l06xc1RH4iSDumNQqBXc25Scxz7DdlTUWQgfIDRWOnxkQID1u4lglA8Uoe6wg gS9PT3qS5k0dNm5B29HrlS83Y4Q7t8w4cu6vGbRlmHnUS1Y9/QPbAKdG1zdc3t03 K35nc07nkc85ZU41LH3Kpj1BXKIXeY94ev3tTppUsH4G3uiEHQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKGady/9cOgHZOLjHKRBJLZCUQXRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j YjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NiNWIxNGRjLTY5ZWUtNGI1OC1i MjdkLTc4ZmU1MWIxMzM1Zi9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFi MTMzNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXlIgDBACCM00DBAGO+MwwDgQCAAIwCAMGBCYC +s4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYecjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFlOFR1P8Y PTA+QujYX5qCtSyqUmZzgtnOY00/cilV8raBOFliMp/PIFj0Amlrml1cDkTNiCgg g3KuLCt6iWCDbdaQczTyZTIWlFA3VMk2adE0b256HinuPYgZba4tt86LnbWqOlvL XbP7uVgHm1H7O+JgHnr7ijYVU3D17tNTpE7oyb2gjhgkV2pwclnPiAm8OOSE4OWH /Sbb3ksN7+IzF/ZVJMnIMFYdeorh/59+o++0WNKymx6e/vrx18uOEwzBBrcxY8/t pktN04rljN2rMYPNpJt2neqFCGkJuNHNS61t7p1bRJ4mzS1mrbYeVktBEXozrpNW g/uH70ZeaT2+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:26 2025 by rpki-client