$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer File: eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer (raw, json) Hash identifier: mZRNfP1TuVGwfI6kJBESp0c75yKeR2ojZzXMBB35qpY= Subject key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584A606C3F76AD3C8C8E7F9FAB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 18:36:28 +0000 Certificate not after: Wed 12 May 2027 00:45:33 +0000 Subordinate resources: AS: 396908 AS: 401012 IP: 23.175.88.0/24 IP: 199.245.97.0/24 IP: 2602:f956::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:6c:3f:76:ad:3c:8c:8e:7f:9f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 1 18:36:28 2025 GMT Not After : May 12 00:45:33 2027 GMT Subject: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:e9:57:35:2d:c7:6d:48:e0:01:31:96:3b: 18:26:23:a8:7e:00:ed:6b:13:98:0c:3a:7b:62:61: 07:21:a2:3a:37:b0:dc:07:14:a8:8f:47:36:fe:d1: 5f:cc:bc:aa:f3:08:57:67:2c:f8:0d:ab:12:c0:78: da:2d:e5:3a:d8:62:32:88:98:62:34:44:bc:be:54: 63:0d:d5:21:f4:af:d4:7a:77:ff:fa:6a:e2:c9:b0: 77:ce:aa:d0:d9:01:2f:de:4a:6b:a9:39:cb:2a:0d: 34:69:69:f9:14:6b:86:90:24:5a:cd:36:0a:c4:0e: d0:b5:af:f5:50:db:58:01:2d:ac:f0:25:66:17:74: 2b:fb:96:a5:1d:45:d7:64:d8:38:54:fc:59:26:86: bb:b1:0b:4e:14:28:ac:a4:47:3b:f2:c5:11:0f:fd: a3:84:ab:a1:41:dc:46:03:5c:c6:3d:2c:eb:20:af: 58:e7:0b:29:0f:8a:0e:6f:cb:c7:02:81:80:82:43: ff:77:58:71:a5:ee:6c:a9:72:d9:ed:4a:62:aa:4e: 3c:30:a2:ef:a7:9d:aa:c5:5b:0c:3b:5f:33:8c:b1: a3:9d:82:fa:2a:11:9f:ec:5d:90:55:74:39:f1:e1: df:18:1e:f9:f7:e6:2f:06:0b:30:e6:3c:3c:c9:fe: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.175.88.0/24 199.245.97.0/24 IPv6: 2602:f956::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396908 401012 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:66:6d:2a:08:90:ab:14:b3:30:5b:aa:9d:2c:c3:f6:a6:c9: c4:4e:01:c4:e9:4c:1d:fd:1c:3e:1d:0e:b2:2c:95:15:8b:28: bf:46:b6:e4:28:1a:52:ef:5c:e9:d5:e6:fb:21:b7:9a:11:a9: 4f:dd:6b:6d:90:4e:0f:f8:9d:4f:0c:f5:19:0f:29:36:76:15: d6:c5:f6:b1:7e:ff:52:2f:3b:85:f1:76:4e:9f:29:37:3d:92: ca:d6:e5:c5:c0:3a:00:b7:a4:49:e5:a7:71:e9:d3:8e:a4:10: 34:a3:5a:59:8d:4d:8f:43:d2:37:04:01:59:c8:3e:97:91:dc: 39:81:c8:32:3a:ca:42:3a:3c:12:d8:eb:7e:e3:d4:59:95:e6: 96:e9:4c:51:b5:1f:a8:c8:3f:37:8a:7b:3a:c9:d9:85:c5:18: 22:89:45:dc:9d:ac:85:de:38:43:19:79:c6:b8:38:d2:ae:54: 69:2f:4e:29:a2:37:3a:c1:f2:42:99:52:2a:86:50:77:00:fa: 7b:47:c4:fa:e1:e9:87:2d:23:80:00:88:17:59:e5:61:a4:05: fc:8f:2c:2d:a9:be:f2:9a:d6:d3:05:07:0d:9b:a7:82:da:ed: 5d:88:57:81:df:25:ab:5d:35:df:70:74:b9:fa:b3:21:7f:8f: 99:e7:fa:80 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEpgbD92rTyMjn+fq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDcwMTE4MzYyOFoXDTI3MDUxMjAwNDUzM1owLzEtMCsGA1UEAxMk ZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYfpVzUtx21I4AExljsYJiOofgDtaxOYDDp7 YmEHIaI6N7DcBxSoj0c2/tFfzLyq8whXZyz4DasSwHjaLeU62GIyiJhiNES8vlRj DdUh9K/Uenf/+mriybB3zqrQ2QEv3kprqTnLKg00aWn5FGuGkCRazTYKxA7Qta/1 UNtYAS2s8CVmF3Qr+5alHUXXZNg4VPxZJoa7sQtOFCispEc78sURD/2jhKuhQdxG A1zGPSzrIK9Y5wspD4oOb8vHAoGAgkP/d1hxpe5sqXLZ7Upiqk48MKLvp52qxVsM O18zjLGjnYL6KhGf7F2QVXQ58eHfGB759+YvBgsw5jw8yf4sIwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFM+5WqI8GyD/EMp0jyVc9QmJor5RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l YjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ViMmMyN2NhLWZiN2MtNGNhZC05 ZjliLTRmNzU0Zjg2NDI2My9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4 NjQyNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXr1gDBADH9WEwDgQCAAIwCAMGACYC+VYAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYObAIDBh50MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH9mbSoIkKsU szBbqp0sw/amycROAcTpTB39HD4dDrIslRWLKL9GtuQoGlLvXOnV5vsht5oRqU/d a22QTg/4nU8M9RkPKTZ2FdbF9rF+/1IvO4Xxdk6fKTc9ksrW5cXAOgC3pEnlp3Hp 046kEDSjWlmNTY9D0jcEAVnIPpeR3DmByDI6ykI6PBLY637j1FmV5pbpTFG1H6jI PzeKezrJ2YXFGCKJRdydrIXeOEMZeca4ONKuVGkvTimiNzrB8kKZUiqGUHcA+ntH xPrh6YctI4AAiBdZ5WGkBfyPLC2pvvKa1tMFBw2bp4La7V2IV4HfJatdNd9wdLn6 syF/j5nn+oA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:28 2025 by rpki-client