$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer File: 0ec17157-66de-4aab-85e7-28af4de430e2.cer (raw, json) Hash identifier: UFNhOa/bTineE0e7Vzb5DsGC1zcM8sMaq7UjSgKP+D8= Subject key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B6F3FF6C977DE8CEAE95E2E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 18:51:18 +0000 Certificate not after: Sun 02 May 2027 00:45:32 +0000 Subordinate resources: AS: 26561 IP: 23.164.152.0/23 IP: 206.251.56.0/22 IP: 2602:f9fa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:3f:f6:c9:77:de:8c:ea:e9:5e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 6 18:51:18 2025 GMT Not After : May 2 00:45:32 2027 GMT Subject: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:65:20:f1:d6:17:a9:b2:52:bd:f3:89:e2: 76:66:56:89:d0:53:60:9c:44:61:b2:94:b1:5a:8b: 07:97:0d:f3:77:40:96:9c:4d:9d:bb:08:06:8c:9c: ec:9e:8c:1f:d7:34:4e:0f:e3:b2:6d:df:62:fe:a6: 6a:06:03:66:bc:45:a2:58:08:e1:aa:0d:4d:5a:3c: b4:80:43:06:c4:d4:38:5b:2d:14:81:b7:78:a8:0a: 2e:c7:53:c2:df:d0:57:d8:dc:eb:8d:c6:ac:27:bc: 40:69:b6:64:05:a3:06:22:2f:24:70:99:e1:b4:03: 7c:49:7e:1f:10:ff:a9:ef:09:cd:fe:e1:54:54:cb: d3:4c:8e:b5:9e:8b:51:58:45:9e:92:f2:df:85:d0: 4a:00:69:4c:03:e7:bf:37:e3:ba:7e:ea:80:10:13: ba:38:43:d8:5e:f0:c7:90:23:f5:3f:8b:68:ed:9d: 82:df:7a:d2:83:39:ce:da:25:f5:70:c4:e9:a8:d8: 91:1e:d5:34:e7:27:48:a2:bb:38:b2:b5:ef:e6:9e: e2:7f:3b:b8:ce:f1:74:a6:84:7e:91:40:15:c8:2b: a0:93:ea:ee:8d:24:f7:53:8d:c4:2c:73:26:07:69: ec:a8:7a:e8:7f:bc:79:27:81:06:92:88:c7:0c:d4: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.164.152.0/23 206.251.56.0/22 IPv6: 2602:f9fa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26561 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2b:bf:cf:77:c7:06:ea:af:34:a1:0e:7d:82:28:0b:c7:cb: f2:26:bc:a6:b4:79:59:29:d5:fc:5f:4b:57:da:58:d7:fc:e2: 2a:a1:bc:34:c8:ae:8e:c4:f8:99:99:70:92:8a:a7:1b:cd:5d: 96:ab:73:1f:c4:7e:cb:52:47:89:7b:c6:5b:0d:95:5b:1d:83: 03:17:a9:41:13:ae:6b:3d:3a:cd:ea:ad:40:16:01:7f:37:f0: 69:69:cc:83:9c:95:56:fe:f5:26:1f:9e:16:dc:a2:58:df:65: 54:f9:77:39:94:78:a8:ff:59:da:3e:ab:05:2b:48:8b:d9:20: ac:cb:08:22:b1:e3:e4:e8:ec:0a:21:95:07:df:4a:be:3f:05: 81:28:3d:6b:cd:12:c2:67:72:18:9f:5f:50:7d:0f:2b:a0:22: 70:a2:af:ce:6d:21:9c:d1:48:74:63:b4:ab:1c:71:f1:eb:71: 34:75:b1:17:00:08:36:b2:e1:f0:48:3d:b6:dc:42:2d:c4:83: 6a:eb:2a:f1:3a:07:34:5d:4d:fb:ba:97:78:ae:db:8e:c6:79: f6:62:b2:41:b6:95:dd:22:84:68:a7:a8:79:7a:b3:f6:d5:e7: 29:0b:ce:75:4d:37:93:cd:d5:31:47:7d:a6:15:ae:bc:50:1e: 5d:eb:ea:30 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEtvP/bJd96M6uleLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAwNjE4NTExOFoXDTI3MDUwMjAwNDUzMlowLzEtMCsGA1UEAxMk MGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQzMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9dlIPHWF6myUr3zieJ2ZlaJ0FNgnERhspSx WosHlw3zd0CWnE2duwgGjJzsnowf1zROD+Oybd9i/qZqBgNmvEWiWAjhqg1NWjy0 gEMGxNQ4Wy0Ugbd4qAoux1PC39BX2NzrjcasJ7xAabZkBaMGIi8kcJnhtAN8SX4f EP+p7wnN/uFUVMvTTI61notRWEWekvLfhdBKAGlMA+e/N+O6fuqAEBO6OEPYXvDH kCP1P4to7Z2C33rSgznO2iX1cMTpqNiRHtU05ydIors4srXv5p7ifzu4zvF0poR+ kUAVyCugk+rujST3U43ELHMmB2nsqHrof7x5J4EGkojHDNThBwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMtUfb8kh6VxsrDHiJaZ5zkgP3JjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w ZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBlYzE3MTU3LTY2ZGUtNGFhYi04 NWU3LTI4YWY0ZGU0MzBlMi8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRl NDMwZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXpJgDBALO+zgwDgQCAAIwCAMGBCYC+foAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmfBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADMrv893xwbqrzShDn2C KAvHy/ImvKa0eVkp1fxfS1faWNf84iqhvDTIro7E+JmZcJKKpxvNXZarcx/EfstS R4l7xlsNlVsdgwMXqUETrms9Os3qrUAWAX838GlpzIOclVb+9SYfnhbcoljfZVT5 dzmUeKj/Wdo+qwUrSIvZIKzLCCKx4+To7AohlQffSr4/BYEoPWvNEsJnchifX1B9 DyugInCir85tIZzRSHRjtKsccfHrcTR1sRcACDay4fBIPbbcQi3Eg2rrKvE6BzRd Tfu6l3iu247GefZiskG2ld0ihGinqHl6s/bV5ykLznVNN5PN1TFHfaYVrrxQHl3r 6jA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:24 2025 by rpki-client