$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer File: 2ca5e7d8-de7d-48b8-9cb1-491065714227.cer (raw, json) Hash identifier: +fB6V6cptAj3dbPUDT/LzX1PVc+oMrDVDaEXaxoLNmQ= Subject key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B20A5625B87DD0C8107BEFE70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 15:06:48 +0000 Certificate not after: Sun 12 Dec 2027 16:06:48 +0000 Subordinate resources: AS: 25618 IP: 23.144.164.0/24 IP: 2602:f585::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:a5:62:5b:87:dd:0c:81:07:be:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 8 15:06:48 2025 GMT Not After : Dec 12 16:06:48 2027 GMT Subject: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:b5:b4:9c:10:ea:61:a3:f8:fa:41:46:67: 26:49:b9:b1:75:75:eb:53:0f:32:3f:67:f2:6f:a1: e8:1b:65:27:51:83:14:2a:e0:b9:c6:66:b5:8f:6c: ed:6b:01:96:47:40:70:c6:73:03:0c:b4:42:49:47: 24:2b:04:f3:a8:65:fc:94:9d:42:40:b7:cd:ef:4d: c8:dd:ee:10:1b:33:0d:62:c3:ee:2c:cc:90:94:55: 0c:47:b8:d9:93:cc:eb:ed:62:e0:d6:a6:90:24:31: 31:b4:df:9e:fc:7d:8f:da:38:e8:01:55:b5:46:bc: 42:cd:70:9c:97:b6:54:58:21:c7:25:fe:e2:9b:95: 0f:21:fd:3f:f2:27:87:72:78:7e:c8:be:d7:dc:74: 45:ad:a4:1e:95:bc:7d:88:38:fd:d0:1e:a4:12:7c: 40:90:cd:21:e8:4b:a6:5f:44:3d:ad:8c:ce:24:87: 63:d7:c4:b9:46:9c:61:91:d7:5e:5f:92:8a:f9:db: 23:c9:dd:37:e1:02:0a:c8:4f:99:49:66:0c:79:de: 2d:79:98:4e:8c:4f:21:f2:d4:ac:b2:fc:46:6d:dc: 83:0d:18:7d:36:0a:01:c8:d1:da:9d:6a:d6:29:a9: 07:5f:ed:f7:bc:7d:98:3e:ee:f1:0d:23:2d:88:d2: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.144.164.0/24 IPv6: 2602:f585::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25618 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:07:2c:ab:99:4c:61:93:c6:69:94:75:ef:cb:32:fd:69:37: 20:23:e9:b0:01:f2:8d:fa:5f:ee:a3:84:a2:51:04:8d:67:e9: 00:4d:6b:d7:08:47:ed:7e:97:3c:40:46:07:c6:0b:fa:16:48: 7d:17:c3:8d:a9:e3:a8:29:ae:ec:2f:7b:14:67:90:e8:f2:d9: 02:21:7f:9b:2e:90:3a:f5:94:cf:09:ab:43:e9:2b:64:10:4d: 39:6f:8b:ee:bc:c8:3d:b9:22:9f:1d:37:2c:bf:87:b6:5f:66: ab:18:78:c3:67:16:6a:21:80:a9:4e:0b:5b:4f:63:1a:cf:52: ea:54:56:75:1d:f0:66:c6:d4:e8:53:6d:f9:97:3d:5d:2c:dd: f0:e8:40:fd:78:d1:83:9e:1e:30:9e:3a:52:26:30:92:8d:3c: 38:26:21:cc:53:11:35:5b:2d:36:d1:f3:73:2f:07:58:0a:8b: e4:4b:0d:a9:33:90:d3:5f:c0:7c:9b:2e:8b:06:57:8b:1e:c1: bd:82:06:42:1a:93:47:fe:3d:1b:36:09:2c:70:38:5f:b8:c7: ba:58:ae:71:56:34:ba:d9:ab:1d:95:c6:87:e3:d0:c1:83:fc: 71:73:1d:7d:27:92:4e:cc:ae:ae:5b:49:72:79:4d:28:85:31: 77:92:0d:0f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEsgpWJbh90MgQe+/nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDkwODE1MDY0OFoXDTI3MTIxMjE2MDY0OFowLzEtMCsGA1UEAxMk MmNhNWU3ZDgtZGU3ZC00OGI4LTljYjEtNDkxMDY1NzE0MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOy1tJwQ6mGj+PpBRmcmSbmxdXXrUw8yP2fy b6HoG2UnUYMUKuC5xma1j2ztawGWR0BwxnMDDLRCSUckKwTzqGX8lJ1CQLfN703I 3e4QGzMNYsPuLMyQlFUMR7jZk8zr7WLg1qaQJDExtN+e/H2P2jjoAVW1RrxCzXCc l7ZUWCHHJf7im5UPIf0/8ieHcnh+yL7X3HRFraQelbx9iDj90B6kEnxAkM0h6Eum X0Q9rYzOJIdj18S5RpxhkddeX5KK+dsjyd034QIKyE+ZSWYMed4teZhOjE8h8tSs svxGbdyDDRh9NgoByNHanWrWKakHX+33vH2YPu7xDSMtiNLpFwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCY6sjahKhPMCnqTdonEqqokLYqaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y Y2E1ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEwNjU3MTQyMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJjYTVlN2Q4LWRlN2QtNDhiOC05 Y2IxLTQ5MTA2NTcxNDIyNy8yY2E1ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEwNjU3 MTQyMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkKQwDgQCAAIwCAMGACYC9YUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmQSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA0HLKuZTGGTxmmUde/LMv1pNyAj 6bAB8o36X+6jhKJRBI1n6QBNa9cIR+1+lzxARgfGC/oWSH0Xw42p46gpruwvexRn kOjy2QIhf5sukDr1lM8Jq0PpK2QQTTlvi+68yD25Ip8dNyy/h7ZfZqsYeMNnFmoh gKlOC1tPYxrPUupUVnUd8GbG1OhTbfmXPV0s3fDoQP140YOeHjCeOlImMJKNPDgm IcxTETVbLTbR83MvB1gKi+RLDakzkNNfwHybLosGV4sewb2CBkIak0f+PRs2CSxw OF+4x7pYrnFWNLrZqx2Vxofj0MGD/HFzHX0nkk7Mrq5bSXJ5TSiFMXeSDQ8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:59 2025 by rpki-client