$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.cer File: 6cdd8b44-43e6-416a-bf05-93e5fc5417b0.cer (raw, json) Hash identifier: ivzDmnV+kwBmMBfGmqaW3qn8ALuKMFcrA4dNaAEkn+w= Subject key identifier: AF:04:0D:0C:F8:E5:96:3C:CA:71:15:12:48:21:EE:48:6F:00:EA:44 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B56CF8DC5784E1F9C904E8400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Sep 2025 00:45:24 +0000 Certificate not after: Sat 01 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 55004 IP: 23.147.104.0 -- 23.147.108.255 IP: 2602:2a1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:cf:8d:c5:78:4e:1f:9c:90:4e:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 28 00:45:24 2025 GMT Not After : Jan 1 01:45:24 2028 GMT Subject: CN=6cdd8b44-43e6-416a-bf05-93e5fc5417b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:79:a0:1a:82:84:51:8a:f9:53:fb:c9:ba: 0a:eb:ef:8a:f2:44:13:ff:eb:4c:91:a2:ff:dd:cc: 75:61:33:d3:e2:30:3f:b1:8c:37:87:3e:13:04:91: 07:d7:0f:e9:b9:d4:34:72:7e:1d:2f:81:57:3d:77: c7:23:10:63:48:d1:7d:d4:89:db:05:60:ec:9b:73: d2:02:14:bf:84:98:0a:19:92:cf:84:4b:dc:5a:7f: 7a:63:74:29:87:56:ad:39:8a:ac:1a:4d:dd:fb:c2: a3:d3:4f:cd:d4:d5:ba:ed:80:f9:08:1e:4a:47:87: e2:5d:cf:6c:bf:ea:79:1a:2b:39:d2:7b:cc:37:3d: f2:a4:99:e9:ce:34:c7:d5:b9:3a:6a:d6:53:2e:81: 3c:54:10:91:fd:37:74:55:58:7f:72:25:01:c0:57: d1:e4:28:a4:c1:7b:60:85:a6:40:2f:c4:c2:6f:78: f2:c6:49:0e:de:57:d8:56:3d:6e:93:34:bd:13:b3: 50:19:87:2b:aa:e4:9e:6b:14:78:cd:f8:9b:e7:f3: 2d:d5:00:59:67:29:be:17:2b:ae:3d:fe:1e:c8:a7: c0:50:5f:80:bf:ae:63:39:37:b5:94:1b:17:85:3f: 77:4e:4e:15:36:9e:1f:a1:11:64:86:ab:3b:cb:f2: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:04:0D:0C:F8:E5:96:3C:CA:71:15:12:48:21:EE:48:6F:00:EA:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.104.0-23.147.108.255 IPv6: 2602:2a1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55004 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:42:d8:66:63:fa:7f:58:9e:55:43:0e:25:7a:c3:6f:73:3d: a1:2a:e6:28:fd:d9:88:34:59:b0:6d:bd:50:25:f3:93:47:49: bd:5f:35:4f:53:5d:ea:34:d4:87:fd:7c:3e:25:f9:d8:ab:ec: ac:30:fc:0e:eb:6c:67:74:2b:62:aa:55:46:d3:23:0c:a7:ef: 9e:dd:86:ef:d9:06:f8:fe:57:60:eb:2f:5c:2c:31:12:98:12: 45:47:ab:67:91:58:90:09:8b:bc:ec:ec:4f:f4:27:23:6f:4b: 76:d8:12:dc:b3:7d:75:31:b9:50:6e:32:88:26:56:34:56:18: 00:74:5a:e1:9e:00:59:98:83:7b:24:fe:1a:a6:bc:00:53:1a: 6d:a1:99:b6:02:0d:be:6d:0a:bd:74:67:b9:cd:c0:94:3e:16: 2d:25:93:2c:e6:aa:21:a3:0e:c1:d3:a1:e2:b8:35:5c:c6:9a: d8:9a:78:e4:f0:78:e9:8a:af:76:0e:1c:1c:2d:fd:f7:22:58: 86:d3:81:b9:3f:97:5b:f8:25:87:52:ff:91:e7:3d:2d:97:2e: 2c:1f:6c:4f:ca:e5:01:4c:d8:c3:05:79:07:a9:5c:23:31:3b: c4:ef:c3:62:87:65:ff:ef:a4:d1:ba:05:7b:88:86:86:93:05: cf:67:72:ab -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEtWz43FeE4fnJBOhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyODAwNDUyNFoXDTI4MDEwMTAxNDUyNFowLzEtMCsGA1UEAxMk NmNkZDhiNDQtNDNlNi00MTZhLWJmMDUtOTNlNWZjNTQxN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nt5oBqChFGK+VP7yboK6++K8kQT/+tMkaL/ 3cx1YTPT4jA/sYw3hz4TBJEH1w/pudQ0cn4dL4FXPXfHIxBjSNF91InbBWDsm3PS AhS/hJgKGZLPhEvcWn96Y3Qph1atOYqsGk3d+8Kj00/N1NW67YD5CB5KR4fiXc9s v+p5Gis50nvMNz3ypJnpzjTH1bk6atZTLoE8VBCR/Td0VVh/ciUBwFfR5CikwXtg haZAL8TCb3jyxkkO3lfYVj1ukzS9E7NQGYcrquSeaxR4zfib5/Mt1QBZZym+Fyuu Pf4eyKfAUF+Av65jOTe1lBsXhT93Tk4VNp4foRFkhqs7y/JoawIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFK8EDQz45ZY8ynEVEkgh7khvAOpEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 Y2RkOGI0NC00M2U2LTQxNmEtYmYwNS05M2U1ZmM1NDE3YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZjZGQ4YjQ0LTQzZTYtNDE2YS1i ZjA1LTkzZTVmYzU0MTdiMC82Y2RkOGI0NC00M2U2LTQxNmEtYmYwNS05M2U1ZmM1 NDE3YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEAxeTaAMEABeTbDAOBAIAAjAIAwYEJgICoQAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANbcMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADNC2GZj+n9YnlVD DiV6w29zPaEq5ij92Yg0WbBtvVAl85NHSb1fNU9TXeo01If9fD4l+dir7Kww/A7r bGd0K2KqVUbTIwyn757dhu/ZBvj+V2DrL1wsMRKYEkVHq2eRWJAJi7zs7E/0JyNv S3bYEtyzfXUxuVBuMogmVjRWGAB0WuGeAFmYg3sk/hqmvABTGm2hmbYCDb5tCr10 Z7nNwJQ+Fi0lkyzmqiGjDsHToeK4NVzGmtiaeOTweOmKr3YOHBwt/fciWIbTgbk/ l1v4JYdS/5HnPS2XLiwfbE/K5QFM2MMFeQepXCMxO8Tvw2KHZf/vpNG6BXuIhoaT Bc9ncqs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:00 2025 by rpki-client