$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer File: 9fa1f513-7800-4b16-b8c2-e28305418287.cer (raw, json) Hash identifier: Dj6G0Rtw9uTqdcWOLrxjJ9hBGTZkJKnGVrDGPQoKr3Q= Subject key identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584AA0130D1A658F13CD62FE9D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Jul 2025 13:48:29 +0000 Certificate not after: Thu 12 Aug 2027 18:21:00 +0000 Subordinate resources: AS: 401370 IP: 23.142.196.0/24 IP: 2602:f651::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:13:0d:1a:65:8f:13:cd:62:fe:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 24 13:48:29 2025 GMT Not After : Aug 12 18:21:00 2027 GMT Subject: CN=9fa1f513-7800-4b16-b8c2-e28305418287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:6a:ec:b2:6d:37:1a:41:df:a6:84:95:d3: cb:b8:e1:a3:43:f5:91:1a:e1:6d:0e:a2:cd:91:88: 8e:87:79:56:18:72:f0:af:65:97:5c:dc:56:1a:ff: f8:3f:8b:4e:27:54:ad:18:07:1c:aa:11:3f:6f:44: ca:10:c3:fa:72:f5:a8:1b:78:f4:17:88:94:1a:ea: c2:5a:33:46:fc:6a:04:39:cb:e8:62:69:fa:7c:9c: 9b:06:b8:c1:3f:1b:5c:b5:ec:40:e1:c5:c2:76:0f: e2:c0:04:fe:63:fb:f5:0a:d5:ed:a2:ae:39:95:ec: f6:bb:e3:7a:1a:00:ea:38:1f:0c:b2:95:ac:f3:0f: e2:cf:53:ab:a4:05:67:1f:41:72:c7:e7:28:73:83: a0:57:57:d4:07:90:1a:10:05:67:03:2b:35:a8:76: 6e:91:0a:ff:a9:8c:ad:3f:9c:f5:8a:55:83:9c:e4: 44:4b:1a:45:3e:1a:7e:b8:1f:03:9c:74:3c:00:75: 93:15:b3:a5:28:fe:a1:75:d7:7b:f1:13:65:15:38: 17:56:a4:84:bc:77:56:83:ca:c8:2f:de:81:6f:d7: 71:cc:f5:b0:9b:c9:50:ea:0a:df:e0:8f:29:40:ae: 67:49:17:59:6d:94:a9:55:df:b5:38:cf:10:6d:d7: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.196.0/24 IPv6: 2602:f651::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401370 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:44:54:e6:b7:a3:88:f3:5d:d4:e8:b7:46:65:44:12:e3:3c: 0e:92:fb:e3:d0:5d:4e:0a:c3:56:ba:65:19:0c:d6:9d:6f:71: 29:80:0c:e9:a1:a4:05:a9:d4:bc:54:d1:ca:17:2e:ad:93:3b: 6b:5f:f3:49:e1:2b:75:df:38:3b:c7:7c:f1:61:c4:00:ce:d9: 72:14:83:34:8e:d9:af:44:9b:7a:ec:b7:05:de:ab:db:59:68: e8:fb:f2:05:34:44:e1:fc:08:09:49:fd:d9:82:cb:c5:58:53: e8:d7:df:f0:a1:b7:d5:7a:d9:71:9d:1a:ff:de:39:bd:65:43: 39:58:ea:c1:f5:af:99:4a:c1:0e:cc:0c:f0:85:60:c6:3f:83: 63:d4:63:c1:8c:59:a6:ee:e1:15:a2:34:f7:e5:80:73:51:fa: fb:72:bc:fc:2b:0a:d6:e0:59:06:3b:d3:b2:54:fc:08:42:6e: 47:ac:6e:45:af:48:41:fc:83:93:5b:a1:21:31:f0:a5:62:0d: 3a:e6:16:da:3d:61:f0:e7:b4:69:e9:2b:f2:fb:a4:38:0a:ab: 5b:50:4f:b2:63:5a:4c:e5:ea:78:53:bd:88:fa:04:78:20:b3: c0:e5:73:46:6a:50:af:c9:e5:94:72:70:af:29:f8:11:d8:69: 99:ac:96:56 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqgEw0aZY8TzWL+nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDcyNDEzNDgyOVoXDTI3MDgxMjE4MjEwMFowLzEtMCsGA1UEAxMk OWZhMWY1MTMtNzgwMC00YjE2LWI4YzItZTI4MzA1NDE4Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEdq7LJtNxpB36aEldPLuOGjQ/WRGuFtDqLN kYiOh3lWGHLwr2WXXNxWGv/4P4tOJ1StGAccqhE/b0TKEMP6cvWoG3j0F4iUGurC WjNG/GoEOcvoYmn6fJybBrjBPxtctexA4cXCdg/iwAT+Y/v1CtXtoq45lez2u+N6 GgDqOB8MspWs8w/iz1OrpAVnH0Fyx+coc4OgV1fUB5AaEAVnAys1qHZukQr/qYyt P5z1ilWDnORESxpFPhp+uB8DnHQ8AHWTFbOlKP6hddd78RNlFTgXVqSEvHdWg8rI L96Bb9dxzPWwm8lQ6grf4I8pQK5nSRdZbZSpVd+1OM8QbdfqgQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDSICx+no2sm+g0ETtGZst00EyqHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0MTgyODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzlmYTFmNTEzLTc4MDAtNGIxNi1i OGMyLWUyODMwNTQxODI4Ny85ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0 MTgyODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjsQwDgQCAAIwCAMGBCYC9lEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf2jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBORFTmt6OI813U6LdGZUQS4zwO kvvj0F1OCsNWumUZDNadb3EpgAzpoaQFqdS8VNHKFy6tkztrX/NJ4St13zg7x3zx YcQAztlyFIM0jtmvRJt67LcF3qvbWWjo+/IFNETh/AgJSf3ZgsvFWFPo19/wobfV etlxnRr/3jm9ZUM5WOrB9a+ZSsEOzAzwhWDGP4Nj1GPBjFmm7uEVojT35YBzUfr7 crz8KwrW4FkGO9OyVPwIQm5HrG5Fr0hB/IOTW6EhMfClYg065hbaPWHw57Rp6Svy +6Q4CqtbUE+yY1pM5ep4U72I+gR4ILPA5XNGalCvyeWUcnCvKfgR2GmZrJZW -----END CERTIFICATE-----Generated at Wed Aug 13 20:19:12 2025 by rpki-client