$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer File: 221e0287-8ab4-430b-9f09-0c45fa8d7713.cer (raw, json) Hash identifier: fx1DwrNcZMfhfsNbh/2xODTjagB1vNvSxApOYtGdn7g= Subject key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849AE4E9DBC118274CFDB978140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 23:22:53 +0000 Certificate not after: Sun 01 Aug 2027 23:22:53 +0000 Subordinate resources: AS: 398174 IP: 23.147.80.0/24 IP: 2602:802:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:4e:9d:bc:11:82:74:cf:db:97:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 23:22:53 2025 GMT Not After : Aug 1 23:22:53 2027 GMT Subject: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:c8:ed:4d:55:4b:09:02:6e:05:0f:0b:d0: 57:8a:09:1b:42:6e:d7:90:0c:44:e9:db:dc:4c:97: 72:6d:c4:87:be:66:81:2f:5f:76:fc:b8:fe:b4:85: c9:1d:a9:d5:e7:81:d4:d6:e8:7b:48:bb:6c:13:d0: ff:91:8a:71:39:d9:4e:dd:24:41:a1:68:1f:6c:fd: 83:38:f5:9d:e9:85:6c:74:39:de:b4:6d:ad:dd:8d: 43:0a:85:ec:7a:4a:50:2b:19:76:ab:81:f8:6d:c1: f8:e8:67:aa:ea:de:87:42:e0:87:4b:2f:56:65:cd: 04:68:aa:dc:74:a9:1c:42:47:40:e8:d7:1d:fc:9f: 1a:c9:e1:f1:59:93:a6:80:ce:cc:0f:d8:50:c6:5d: 53:2e:22:37:a0:65:1f:f2:0d:08:e1:d5:5e:1c:11: b2:c5:13:f8:1e:56:6d:11:f9:ed:42:f1:40:f4:17: 54:60:e4:cc:91:89:74:dd:ce:d0:c9:a2:a1:4c:43: a5:c9:46:57:f3:2a:61:5f:dc:db:89:a4:3d:71:5b: 4f:6c:c1:71:3a:95:cd:02:4e:52:cf:5d:8b:8c:19: f0:7f:a9:27:f4:80:cc:30:c4:61:d4:0d:3d:af:de: 31:4a:15:74:12:86:14:c8:90:93:40:07:09:31:a0: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.147.80.0/24 IPv6: 2602:802:7000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398174 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5b:63:0a:b6:37:1c:f4:5e:a8:2d:39:5d:5f:a0:ef:00:7c: 69:76:7c:c7:e2:8b:89:e0:10:2d:5d:65:0e:26:ea:dd:1b:2f: 0e:b2:e7:3b:a4:d3:68:f6:a4:4a:7b:ac:fb:b0:3c:a6:0d:b7: 60:b8:87:26:71:24:16:e2:59:02:13:78:d3:f2:9d:6c:07:37: ee:7b:e2:88:aa:be:59:53:1e:78:87:60:8e:b8:b1:67:b0:6a: 39:6d:cf:f0:08:7f:ff:51:fa:e2:d4:f0:95:14:53:ed:1c:01: 21:21:9d:52:5d:85:49:ce:79:5f:a7:f7:82:e0:9d:9d:dc:ad: 6f:5b:a1:85:89:2c:35:65:a4:b8:ce:c0:8f:94:32:73:15:5d: 2c:7b:2f:bb:af:6d:97:b1:ce:21:ef:86:1a:1d:69:4a:20:3c: a5:e0:06:7b:61:c6:9c:7c:22:4e:3f:70:1c:d9:90:b5:01:c3: 2c:76:2e:1e:2b:5a:be:42:2a:ee:f4:26:5d:66:ef:2b:3a:51: 06:b4:0b:d3:11:24:a0:5e:8f:49:57:24:04:ca:e6:3a:d0:93: 7c:33:fd:88:52:5d:39:70:1c:92:6a:9c:5d:cb:a5:e6:17:fb: ab:1e:8a:91:d0:ce:f2:05:12:7b:75:d9:58:85:f7:da:f1:a0: dc:5a:92:a5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmuTp28EYJ0z9uXgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODIzMjI1M1oXDTI3MDgwMTIzMjI1M1owLzEtMCsGA1UEAxMk MjIxZTAyODctOGFiNC00MzBiLTlmMDktMGM0NWZhOGQ3NzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU3I7U1VSwkCbgUPC9BXigkbQm7XkAxE6dvc TJdybcSHvmaBL192/Lj+tIXJHanV54HU1uh7SLtsE9D/kYpxOdlO3SRBoWgfbP2D OPWd6YVsdDnetG2t3Y1DCoXsekpQKxl2q4H4bcH46Geq6t6HQuCHSy9WZc0EaKrc dKkcQkdA6Ncd/J8ayeHxWZOmgM7MD9hQxl1TLiI3oGUf8g0I4dVeHBGyxRP4HlZt EfntQvFA9BdUYOTMkYl03c7QyaKhTEOlyUZX8yphX9zbiaQ9cVtPbMFxOpXNAk5S z12LjBnwf6kn9IDMMMRh1A09r94xShV0EoYUyJCTQAcJMaB9OwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBxBqwVq0XEOvMVy/c6hgd+u36d7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4ZDc3MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIyMWUwMjg3LThhYjQtNDMwYi05 ZjA5LTBjNDVmYThkNzcxMy8yMjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4 ZDc3MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk1AwDgQCAAIwCAMGACYCCAJwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYTXjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFW2MKtjcc9F6oLTldX6DvAHxp dnzH4ouJ4BAtXWUOJurdGy8Osuc7pNNo9qRKe6z7sDymDbdguIcmcSQW4lkCE3jT 8p1sBzfue+KIqr5ZUx54h2COuLFnsGo5bc/wCH//Ufri1PCVFFPtHAEhIZ1SXYVJ znlfp/eC4J2d3K1vW6GFiSw1ZaS4zsCPlDJzFV0sey+7r22Xsc4h74YaHWlKIDyl 4AZ7YcacfCJOP3Ac2ZC1AcMsdi4eK1q+Qiru9CZdZu8rOlEGtAvTESSgXo9JVyQE yuY60JN8M/2IUl05cBySapxdy6XmF/urHoqR0M7yBRJ7ddlYhffa8aDcWpKl -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:33 2025 by rpki-client