$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer File: d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer (raw, json) Hash identifier: MGyhORwZrp8V0CpvN84I9ayGiAgHEYmhjaB8ecR0bLg= Subject key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B74B78DDC77C893827723C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 17:51:18 +0000 Certificate not after: Sat 11 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 396872 IP: 23.132.224.0/23 IP: 130.12.128.0/22 IP: 142.202.24.0/22 IP: 155.254.200.0/22 IP: 170.205.44.0/22 IP: 216.39.236.0/22 IP: 2602:fe65::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:b7:8d:dc:77:c8:93:82:77:23:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 17:51:18 2025 GMT Not After : Dec 11 01:45:25 2027 GMT Subject: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:60:d5:d5:89:00:c1:4f:b6:d9:0a:48:e6: d1:de:f8:e7:9f:45:98:a2:46:5d:4a:3c:96:13:b6: cd:b0:43:1a:37:ab:7f:7f:ce:22:2d:94:2b:02:53: 29:19:81:c3:a4:a6:53:1e:a1:e9:57:ae:34:5e:c7: 35:a0:ba:d9:3f:8f:78:07:31:97:fc:de:52:2e:8f: af:df:78:1d:e7:8a:5c:68:e5:54:e3:29:64:1a:48: 1e:38:ea:75:7b:f4:1e:15:eb:6a:ef:0f:d1:b0:52: 2c:e8:f0:32:cd:20:71:2b:0e:ef:e7:70:4a:20:43: 9b:18:00:d7:4f:21:9c:2b:e1:6c:77:88:40:ac:e5: 08:4b:6b:e5:3f:43:61:13:ba:3a:7e:f8:2a:14:14: b6:f6:ad:bb:6d:0c:f6:f9:6b:4e:fc:96:8c:6b:af: d6:db:c2:cc:ae:33:a8:11:73:39:d8:ea:5d:69:b0: 85:b4:9e:c6:ee:c8:26:34:ae:2f:76:2c:34:b9:9e: b2:62:47:f1:8b:33:59:0f:f2:b7:17:0b:39:eb:b3: e5:10:62:4b:54:6b:54:c2:f4:55:03:87:82:84:09: 45:dc:b8:16:85:e9:c8:55:f4:f2:90:f3:e7:51:00: 2a:5e:93:78:65:2f:1f:da:c2:4c:f6:d9:e8:d2:ac: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.132.224.0/23 130.12.128.0/22 142.202.24.0/22 155.254.200.0/22 170.205.44.0/22 216.39.236.0/22 IPv6: 2602:fe65::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1f:7e:1c:30:ae:49:f3:ab:c5:dc:59:91:72:2d:6f:f3:86: 9d:9c:10:f8:b5:35:0b:b0:54:27:4d:14:2a:fd:a7:4a:fd:34: 42:5d:7f:98:32:52:8a:94:6b:70:bf:e3:e4:30:45:05:e2:5f: e1:a6:93:7a:81:97:77:cf:42:22:7b:1b:a7:ad:0a:f4:3e:1f: c0:c8:95:58:0a:82:c9:2b:24:da:e2:00:b2:1e:39:c5:33:d0: b8:2e:fa:25:76:f8:e6:20:86:29:4a:0a:44:96:72:c2:d1:2b: 65:f3:01:8b:d9:4e:d4:a4:60:68:17:45:9d:2f:17:89:85:95: f6:d9:67:dc:6e:c5:16:43:42:7b:9d:c9:f7:33:66:61:08:e7: 15:03:04:2e:4f:86:ad:4f:1e:bf:db:00:5b:d0:f9:40:5e:37: 25:81:28:ed:bd:39:cf:58:b7:99:b7:66:ff:90:25:50:fd:a9: 0a:70:b0:13:6b:ed:7b:c4:28:1f:14:df:4d:f0:f3:da:dc:f1: b0:87:74:ec:78:ee:11:35:16:a1:ed:6f:30:aa:88:be:d2:4c: ca:80:c5:40:1e:59:66:8b:30:06:27:91:55:24:c4:64:70:04: 98:44:ba:2f:e7:db:18:e9:30:51:b5:89:f2:4b:fe:ed:3a:04: ac:91:30:0b -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEt0t43cd8iTgncjxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODE3NTExOFoXDTI3MTIxMTAxNDUyNVowLzEtMCsGA1UEAxMk ZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2RmZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Ng1dWJAMFPttkKSObR3vjnn0WYokZdSjyW E7bNsEMaN6t/f84iLZQrAlMpGYHDpKZTHqHpV640Xsc1oLrZP494BzGX/N5SLo+v 33gd54pcaOVU4ylkGkgeOOp1e/QeFetq7w/RsFIs6PAyzSBxKw7v53BKIEObGADX TyGcK+Fsd4hArOUIS2vlP0NhE7o6fvgqFBS29q27bQz2+WtO/JaMa6/W28LMrjOo EXM52OpdabCFtJ7G7sgmNK4vdiw0uZ6yYkfxizNZD/K3Fws567PlEGJLVGtUwvRV A4eChAlF3LgWhenIVfTykPPnUQAqXpN4ZS8f2sJM9tno0qyGcQIDAQABo4IESTCC BEUwHQYDVR0OBBYEFLskUcvXUO4XLDsxXb+MQf36lizKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QwOGRlN2NiLWU2N2YtNGY2ZS1h YmQ1LTc3MzI5ZTdkZmZkNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3 ZGZmZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAEXhOADBAKCDIADBAKOyhgDBAKb/sgDBAKqzSwD BALYJ+wwDgQCAAIwCAMGBCYC/mUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYO SDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA7H34cMK5J86vF3FmRci1v84adnBD4tTULsFQnTRQq/adK/TRC XX+YMlKKlGtwv+PkMEUF4l/hppN6gZd3z0IiexunrQr0Ph/AyJVYCoLJKyTa4gCy HjnFM9C4LvoldvjmIIYpSgpElnLC0Stl8wGL2U7UpGBoF0WdLxeJhZX22WfcbsUW Q0J7ncn3M2ZhCOcVAwQuT4atTx6/2wBb0PlAXjclgSjtvTnPWLeZt2b/kCVQ/akK cLATa+17xCgfFN9N8PPa3PGwh3TseO4RNRah7W8wqoi+0kzKgMVAHllmizAGJ5FV JMRkcASYRLov59sY6TBRtYnyS/7tOgSskTAL -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:42 2025 by rpki-client