$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer File: de70a194-124d-4ea2-9bff-570049254664.cer (raw, json) Hash identifier: U1vEyGs5qk0fx+RBZhRktaJZX3bRgJV/FFOGPlPpbhI= Subject key identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA853E4D7928BFCF62337F3F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Jul 2025 12:45:36 +0000 Certificate not after: Sat 30 Oct 2027 12:45:36 +0000 Subordinate resources: AS: 399338 IP: 23.174.48.0/24 IP: 2602:fcbf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:53:e4:d7:92:8b:fc:f6:23:37:f3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 27 12:45:36 2025 GMT Not After : Oct 30 12:45:36 2027 GMT Subject: CN=de70a194-124d-4ea2-9bff-570049254664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:54:e4:4f:25:d7:f7:43:26:d1:15:dc:4c:ae: c2:44:7a:ef:4b:76:54:1a:80:c1:ff:69:88:5f:3f: fb:04:bd:ae:81:11:e3:1d:1d:cc:e9:45:e8:6b:0c: c3:8b:2b:6a:01:19:ea:2d:97:ee:3e:6a:a8:a0:b6: 87:f6:93:98:b1:13:69:79:45:21:61:36:ad:9c:b2: ba:62:36:b9:b8:06:87:0f:c2:8e:b2:92:fc:78:f9: 01:81:f2:dc:66:42:32:61:8b:43:2b:c3:c0:fb:25: ee:ad:19:f9:77:e4:a2:d8:07:d4:d0:37:59:98:e6: 54:3a:49:ef:39:68:f0:68:d3:e0:54:de:c3:05:d6: 8b:63:c0:8b:4a:5a:01:f5:21:1c:12:80:4e:94:25: 22:f6:44:d6:74:22:f9:f3:cd:8d:35:b0:aa:40:73: 79:f3:9f:56:dd:b3:b6:40:21:5f:24:7a:9b:e0:70: 59:ed:b6:b0:e8:9b:d8:aa:83:95:eb:5d:33:81:31: c7:56:25:0c:ff:67:ae:b6:86:1f:2c:07:aa:c3:9b: 06:cb:57:0f:a8:78:1f:e1:d5:71:a5:f3:2c:e2:4f: f4:26:71:1b:65:d7:39:eb:df:e2:1b:15:ad:db:bc: 54:4c:ee:d3:7a:3e:25:56:6d:0d:2e:54:de:93:8d: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.174.48.0/24 IPv6: 2602:fcbf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c8:14:d3:85:34:66:18:70:21:90:5e:f0:ca:54:5e:65:da: 8b:4a:7a:07:bd:9d:75:42:39:c2:0e:51:f7:2a:88:d4:0f:62: ba:c8:3b:30:a4:81:aa:72:b8:91:ad:b4:d3:73:9a:21:39:6c: 80:da:07:63:a0:34:be:1e:9d:47:11:48:02:c7:bc:fc:5a:9b: 2a:b0:75:42:48:13:f0:9d:67:98:f0:16:b5:3e:76:e4:81:58: 0a:2a:01:94:ca:ee:58:db:24:0d:96:a4:c8:91:3a:79:2d:78: be:41:11:25:64:ff:ac:70:a9:81:46:47:03:1a:a4:d2:b1:56: bf:44:62:67:89:eb:ad:cc:1b:24:2c:05:06:cc:dd:fb:10:0f: 8f:da:45:82:a6:19:c1:d8:fc:a2:1e:6e:a5:56:f3:8d:30:4a: b7:66:f5:c0:74:59:af:55:e1:06:ef:ce:96:f2:00:7e:ec:aa: 32:4e:7f:20:d4:3d:97:e5:69:63:16:d6:43:f2:8d:b4:fd:bc: 17:fa:1e:97:a0:1e:0f:f7:e6:28:47:33:05:fd:35:a1:31:24: 42:b1:a4:84:e7:79:32:4a:60:a9:95:a0:1e:d4:f5:2a:3b:6b: 7b:52:9a:ec:18:b9:93:f1:47:3a:fc:c6:63:68:54:e3:24:9d: bf:06:0d:b7 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqoU+TXkov89iM38/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyNzEyNDUzNloXDTI3MTAzMDEyNDUzNlowLzEtMCsGA1UEAxMk ZGU3MGExOTQtMTI0ZC00ZWEyLTliZmYtNTcwMDQ5MjU0NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FTkTyXX90Mm0RXcTK7CRHrvS3ZUGoDB/2mI Xz/7BL2ugRHjHR3M6UXoawzDiytqARnqLZfuPmqooLaH9pOYsRNpeUUhYTatnLK6 Yja5uAaHD8KOspL8ePkBgfLcZkIyYYtDK8PA+yXurRn5d+Si2AfU0DdZmOZUOknv OWjwaNPgVN7DBdaLY8CLSloB9SEcEoBOlCUi9kTWdCL5882NNbCqQHN5859W3bO2 QCFfJHqb4HBZ7baw6JvYqoOV610zgTHHViUM/2eutoYfLAeqw5sGy1cPqHgf4dVx pfMs4k/0JnEbZdc569/iGxWt27xUTO7Tej4lVm0NLlTek40ZXQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGhkzOnJWcaKF+4KhaSuuUI+AijoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k ZTcwYTE5NC0xMjRkLTRlYTItOWJmZi01NzAwNDkyNTQ2NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2RlNzBhMTk0LTEyNGQtNGVhMi05 YmZmLTU3MDA0OTI1NDY2NC9kZTcwYTE5NC0xMjRkLTRlYTItOWJmZi01NzAwNDky NTQ2NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrjAwDgQCAAIwCAMGBCYC/L8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX6jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqyBTThTRmGHAhkF7wylReZdqL SnoHvZ11QjnCDlH3KojUD2K6yDswpIGqcriRrbTTc5ohOWyA2gdjoDS+Hp1HEUgC x7z8WpsqsHVCSBPwnWeY8Ba1PnbkgVgKKgGUyu5Y2yQNlqTIkTp5LXi+QRElZP+s cKmBRkcDGqTSsVa/RGJnieutzBskLAUGzN37EA+P2kWCphnB2PyiHm6lVvONMEq3 ZvXAdFmvVeEG786W8gB+7KoyTn8g1D2X5WljFtZD8o20/bwX+h6XoB4P9+YoRzMF /TWhMSRCsaSE53kySmCplaAe1PUqO2t7UprsGLmT8Uc6/MZjaFTjJJ2/Bg23 -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:15 2025 by rpki-client