$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer File: e951b522-4f4b-4128-b8a6-8e3f69803993.cer (raw, json) Hash identifier: 8PEaw4PAKq7hMkDlIgcFwNOZwOZuLy6JxA0mHNqMS0I= Subject key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BAEC016F701B9828381AB7774 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 12:45:23 +0000 Certificate not after: Tue 01 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 398181 IP: 23.247.144.0/22 IP: 52.129.24.0/22 IP: 134.195.64.0/22 IP: 142.202.140.0/22 IP: 172.99.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c0:16:f7:01:b9:82:83:81:ab:77:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 29 12:45:23 2025 GMT Not After : Feb 1 13:45:23 2028 GMT Subject: CN=e951b522-4f4b-4128-b8a6-8e3f69803993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:8b:9c:0f:32:de:01:71:f6:e1:4e:e7:50: 87:f8:d3:b8:1f:71:87:66:30:25:bd:22:28:b0:03: 8d:83:93:aa:9b:df:e9:fd:f6:cb:b3:bc:b5:0a:3c: 1d:da:54:4b:fe:d3:2c:59:24:4b:f7:fa:3f:0f:c5: 7c:f0:c8:73:04:c1:a7:06:6c:b2:a6:05:56:ee:8e: 2d:28:75:4a:ba:98:9c:94:32:cf:e1:50:5d:43:34: 2e:c8:7d:c6:5a:85:86:3e:f6:76:1f:d6:cd:77:22: e8:db:b4:f0:93:2d:23:51:ef:74:9b:b7:31:63:42: 86:a4:5e:7c:29:a2:01:87:b6:19:34:f5:df:c7:06: e2:d8:8d:f1:ae:c6:b2:1b:a3:14:54:8e:da:94:07: 11:34:4f:a5:f7:e9:cc:f2:fb:b1:e2:c5:ba:50:02: 27:ff:0a:fd:11:af:4b:6b:83:84:63:dd:4d:41:5e: a1:32:e6:99:f5:4a:35:26:c9:7c:47:4a:6c:5e:c5: e8:44:9b:e2:b7:da:82:10:7d:7b:7a:15:d3:c1:b5: 2b:22:34:d7:15:69:bb:22:f4:9d:6e:43:bc:70:fd: 84:9e:98:1a:22:44:51:34:d5:4f:fc:88:f8:87:d1: e2:af:4b:af:a7:ee:60:da:8d:30:4b:5f:f9:de:a2: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.247.144.0/22 52.129.24.0/22 134.195.64.0/22 142.202.140.0/22 172.99.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398181 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ca:91:4e:80:22:5e:34:d0:37:bf:bf:50:16:f5:55:32:42: 72:66:17:ff:9a:5b:93:90:3b:28:fd:f7:43:19:b4:93:e2:ea: 20:2e:bd:3c:b6:09:84:ca:87:e6:a0:72:94:92:29:03:59:d5: e7:6e:5b:48:a8:ed:02:5b:37:a6:89:32:79:d5:8d:f5:13:80: cc:f6:8a:51:f0:24:a0:94:01:13:ac:78:2a:58:f5:85:18:61: 1b:e2:f3:6a:05:95:55:9e:f2:0d:b2:de:93:54:2b:ae:ce:72: f2:45:8f:c8:8a:8c:d6:ae:c2:0c:a4:23:3d:bc:34:ce:29:54: 2c:d3:1c:6f:5a:14:69:17:40:72:b3:8c:00:ce:92:e5:17:a5: 42:0f:c6:6f:d6:18:e2:4b:27:a7:7c:3b:87:3b:24:81:d7:7c: b3:84:14:af:98:14:d2:d2:28:b7:05:bd:50:1b:90:f2:83:e2: 53:90:1b:0d:8d:00:81:a0:b8:80:a2:6f:b2:38:67:dc:ee:80: 67:0f:56:69:c5:87:23:7a:7f:57:5b:dc:b8:f6:ca:d4:3a:80: 28:3c:23:86:01:f7:01:9b:84:fe:dd:ad:6a:be:d8:6c:af:56: 3b:8c:a4:ba:99:6d:1e:11:12:c4:8f:6d:cf:18:16:65:e7:f8: 6e:87:cd:37 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEuuwBb3AbmCg4Grd3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyOTEyNDUyM1oXDTI4MDIwMTEzNDUyM1owLzEtMCsGA1UEAxMk ZTk1MWI1MjItNGY0Yi00MTI4LWI4YTYtOGUzZjY5ODAzOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov+LnA8y3gFx9uFO51CH+NO4H3GHZjAlvSIo sAONg5Oqm9/p/fbLs7y1Cjwd2lRL/tMsWSRL9/o/D8V88MhzBMGnBmyypgVW7o4t KHVKupiclDLP4VBdQzQuyH3GWoWGPvZ2H9bNdyLo27Twky0jUe90m7cxY0KGpF58 KaIBh7YZNPXfxwbi2I3xrsayG6MUVI7alAcRNE+l9+nM8vux4sW6UAIn/wr9Ea9L a4OEY91NQV6hMuaZ9Uo1Jsl8R0psXsXoRJvit9qCEH17ehXTwbUrIjTXFWm7IvSd bkO8cP2EnpgaIkRRNNVP/Ij4h9Hir0uvp+5g2o0wS1/53qJC8wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFHZr6eIw1+w+rXhqj2QnlZndFoNkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l OTUxYjUyMi00ZjRiLTQxMjgtYjhhNi04ZTNmNjk4MDM5OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U5NTFiNTIyLTRmNGItNDEyOC1i OGE2LThlM2Y2OTgwMzk5My9lOTUxYjUyMi00ZjRiLTQxMjgtYjhhNi04ZTNmNjk4 MDM5OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAIX95ADBAI0gRgDBAKGw0ADBAKOyowDBAKsY7Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhNlMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADvKkU6AIl400De/ v1AW9VUyQnJmF/+aW5OQOyj990MZtJPi6iAuvTy2CYTKh+agcpSSKQNZ1eduW0io 7QJbN6aJMnnVjfUTgMz2ilHwJKCUAROseCpY9YUYYRvi82oFlVWe8g2y3pNUK67O cvJFj8iKjNauwgykIz28NM4pVCzTHG9aFGkXQHKzjADOkuUXpUIPxm/WGOJLJ6d8 O4c7JIHXfLOEFK+YFNLSKLcFvVAbkPKD4lOQGw2NAIGguICib7I4Z9zugGcPVmnF hyN6f1db3Lj2ytQ6gCg8I4YB9wGbhP7drWq+2GyvVjuMpLqZbR4REsSPbc8YFmXn +G6HzTc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:54:50 2025 by rpki-client