$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer File: 6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer (raw, json) Hash identifier: CL8lxoq/oFgGUc6o2ZElBEKaJ+feaYgjmFTewPaqAgs= Subject key identifier: 8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C900062EED2448F54EB2CE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 12:51:21 +0000 Certificate not after: Wed 11 Aug 2027 12:51:21 +0000 Subordinate resources: AS: 13942 IP: 205.236.20.0 -- 205.236.22.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:00:06:2e:ed:24:48:f5:4e:b2:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 12:51:21 2025 GMT Not After : Aug 11 12:51:21 2027 GMT Subject: CN=6ce6a780-3db7-4d76-a9eb-20b6247f5f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:0a:cc:bc:d7:8d:df:69:4d:5b:a5:c8:57: 3f:fb:5d:fb:c9:b8:97:2f:ed:9b:7c:46:fa:08:c6: d6:35:b4:1f:7d:df:be:38:c4:3f:43:4d:10:59:a5: 1e:e2:76:20:c7:8a:57:c8:cd:0c:03:66:a8:92:43: 7d:05:e1:e2:bf:ab:e8:69:a1:73:d8:53:00:06:28: 39:27:73:7e:48:e4:4d:ce:bd:5e:66:ac:e6:20:b4: 41:f0:95:66:33:38:9d:57:aa:98:c4:5f:f9:65:93: ec:b4:c4:5f:af:80:db:cf:4a:93:f9:0a:76:6e:ef: e4:81:18:bf:1c:33:cc:af:c9:b9:72:df:0c:07:1d: 6e:8e:d5:9c:b8:4c:b0:d5:00:58:7b:3c:42:be:9a: 81:e5:67:a8:d2:d1:1c:6e:d1:5b:1b:f8:ef:8b:18: 81:13:ba:6c:b0:88:22:c4:ba:54:a4:f8:91:df:56: b6:90:b0:a9:0e:8d:ca:37:8c:44:a1:ec:1d:d0:7f: bd:73:55:b4:9b:9f:7a:2d:6d:a6:a9:1d:42:01:fb: d3:9e:c1:91:79:9c:6c:dd:cc:6a:4d:f7:d0:d5:83: 81:fd:53:7a:44:ee:e4:c0:8e:14:5d:f1:f4:7a:5d: 2e:2e:25:56:5c:ce:7e:a4:99:86:c5:76:e4:0b:d7: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 205.236.20.0-205.236.22.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13942 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:70:c4:de:72:6e:f3:40:00:72:6e:7c:f9:88:bd:58:bd:f0: 20:93:1b:49:a9:dd:14:25:41:57:0b:8d:6a:61:cf:6f:82:b2: 68:bc:96:ad:b0:d6:9a:b2:14:95:ca:76:ac:08:73:33:bf:dd: 8d:5e:21:c8:83:20:8b:8f:3e:6f:2a:4e:5b:13:2f:f0:3f:04: 18:6c:ba:ee:9b:81:ff:0a:fb:df:9c:0c:0c:4f:9e:3c:94:14: 04:2b:ae:f4:b7:22:11:7d:d9:b0:f5:a3:0b:89:e3:8d:c1:73: f0:74:e8:37:eb:ba:e6:4e:33:e1:07:af:88:be:13:8a:65:06: 6f:f0:ea:34:87:6e:2e:f6:87:68:d7:4d:4f:44:bf:43:92:44: d4:ad:71:fb:4b:80:d9:c7:89:36:50:cd:4b:02:e9:9f:87:cc: 5e:f1:6a:70:13:91:c4:b7:cc:1d:04:33:4e:e3:89:d2:e4:49: 31:f0:39:69:90:a2:e9:0a:ea:2e:2e:eb:f7:ad:31:30:fc:3c: 32:12:bd:94:5e:9d:1a:fc:6e:cc:48:eb:a1:43:3c:cf:b4:2e: 6d:c6:f0:c8:0b:8e:0b:f2:33:a2:00:5e:b9:7b:20:46:95:8d: 34:33:ce:52:27:66:e7:41:1f:3b:29:ae:df:42:30:4b:47:9d: b0:ed:44:54 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEnJAAYu7SRI9U6yzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwODEyNTEyMVoXDTI3MDgxMTEyNTEyMVowLzEtMCsGA1UEAxMk NmNlNmE3ODAtM2RiNy00ZDc2LWE5ZWItMjBiNjI0N2Y1ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0kKzLzXjd9pTVulyFc/+137ybiXL+2bfEb6 CMbWNbQffd++OMQ/Q00QWaUe4nYgx4pXyM0MA2aokkN9BeHiv6voaaFz2FMABig5 J3N+SORNzr1eZqzmILRB8JVmMzidV6qYxF/5ZZPstMRfr4Dbz0qT+Qp2bu/kgRi/ HDPMr8m5ct8MBx1ujtWcuEyw1QBYezxCvpqB5Weo0tEcbtFbG/jvixiBE7pssIgi xLpUpPiR31a2kLCpDo3KN4xEoewd0H+9c1W0m596LW2mqR1CAfvTnsGReZxs3cxq TffQ1YOB/VN6RO7kwI4UXfH0el0uLiVWXM5+pJmGxXbkC9dp5QIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFI0dWqQYsvrKC5S8apSft/yOH88aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 Y2U2YTc4MC0zZGI3LTRkNzYtYTllYi0yMGI2MjQ3ZjVmMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZjZTZhNzgwLTNkYjctNGQ3Ni1h OWViLTIwYjYyNDdmNWYzNi82Y2U2YTc4MC0zZGI3LTRkNzYtYTllYi0yMGI2MjQ3 ZjVmMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAs3sFAMEAM3sFjAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgI2djBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARcMTecm7zQABybnz5iL1YvfAgkxtJqd0UJUFX C41qYc9vgrJovJatsNaashSVynasCHMzv92NXiHIgyCLjz5vKk5bEy/wPwQYbLru m4H/CvvfnAwMT548lBQEK670tyIRfdmw9aMLieONwXPwdOg367rmTjPhB6+IvhOK ZQZv8Oo0h24u9odo101PRL9DkkTUrXH7S4DZx4k2UM1LAumfh8xe8WpwE5HEt8wd BDNO44nS5Ekx8DlpkKLpCuouLuv3rTEw/DwyEr2UXp0a/G7MSOuhQzzPtC5txvDI C44L8jOiAF65eyBGlY00M85SJ2bnQR87Ka7fQjBLR52w7URU -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:20 2025 by rpki-client