$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.cer File: acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.cer (raw, json) Hash identifier: 4s6w2myyGoYAwZs5rpjVOrfUoaEfKQCH/EspgYSMxlo= Subject key identifier: 5F:CD:C3:90:C6:13:68:8F:8C:80:D5:D5:53:0F:77:A5:77:C7:FA:1D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584986A6BE2F46751F048D77B480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 18:28:07 +0000 Certificate not after: Sun 18 Jul 2027 18:28:07 +0000 Subordinate resources: AS: 401665 IP: 23.136.204.0/24 IP: 2602:f6c1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:a6:be:2f:46:75:1f:04:8d:77:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 14 18:28:07 2025 GMT Not After : Jul 18 18:28:07 2027 GMT Subject: CN=acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:9b:11:c3:a9:9a:df:72:cc:c0:d6:48:b1: f0:24:6b:a4:63:b3:1d:6b:53:1b:ba:0f:fa:00:20: 05:ad:3e:a1:76:50:11:95:81:a9:12:fe:11:29:27: 26:a5:d1:09:ba:20:94:c8:91:7d:83:ed:d8:56:3d: 6c:7b:5b:61:95:c0:9c:b4:5b:77:41:85:13:b8:09: 4d:14:a6:40:c7:a3:13:5c:7d:f2:3c:a8:cc:92:a5: cb:9e:09:79:da:e0:d6:88:92:aa:f2:03:11:26:c4: d9:e5:35:83:26:7c:57:5d:59:2f:59:7f:1f:90:ce: 7e:43:32:11:b5:68:20:45:84:a4:de:a1:7f:05:5c: 4b:02:d9:fb:6a:7d:0d:7a:96:20:ff:06:61:f6:b4: a5:ca:05:eb:8d:1d:f8:72:7d:62:7d:d8:c0:75:04: 8c:c5:50:c4:7a:35:6c:12:c7:83:94:66:67:e7:49: d4:fc:e5:fd:f0:de:26:32:80:48:ab:55:f5:95:ba: e3:f0:77:08:cc:86:49:2f:5f:a0:d7:18:7a:48:04: da:70:c0:c2:61:58:90:3b:4a:65:7c:4f:72:95:53: 75:4a:12:2d:39:29:a9:35:ef:9d:52:9a:f4:b8:36: 83:62:89:60:51:87:ba:f6:b6:a3:52:c2:4c:4d:26: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CD:C3:90:C6:13:68:8F:8C:80:D5:D5:53:0F:77:A5:77:C7:FA:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.204.0/24 IPv6: 2602:f6c1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:83:fd:57:5e:71:7e:f5:61:d4:1b:88:22:09:47:b4:74:93: 9b:55:cb:df:5f:2e:0a:94:c2:bb:70:e3:ce:8c:b9:31:a7:c2: 70:44:c8:06:bf:91:25:49:0e:33:50:96:2f:f9:6c:89:f5:cb: e8:e8:8f:3e:28:4f:b0:04:8d:a5:fe:8b:2a:7f:a8:57:d4:78: 13:7b:ac:77:2d:f0:60:48:39:4f:cb:dd:36:36:3c:3e:5e:dd: e9:f0:f4:eb:e9:7b:bd:6f:58:e0:a6:20:68:4b:47:d4:a8:b9: 6f:5e:3a:44:ca:89:c2:2f:41:f8:0e:fd:28:56:c8:7e:64:e5: 61:6e:72:e4:a2:8c:68:76:36:c1:60:54:25:d6:0f:81:6b:2b: a8:59:a5:83:19:ff:f0:1e:4b:af:71:55:6b:83:cb:bb:81:f6: 1a:d8:77:10:86:3e:c4:b2:7d:57:9b:6f:c3:4c:c2:6e:f9:cc: 01:23:52:1f:2c:46:3a:bd:62:33:4d:6f:5e:b0:c7:1b:21:8e: 50:06:b3:b2:33:d9:27:38:02:19:d4:36:36:b6:5b:e2:e1:62: e9:c2:a4:f3:a0:06:0c:50:2c:01:55:da:48:24:67:01:6b:a4: 84:7b:f3:7b:11:1d:2f:b5:ba:88:f6:be:8a:02:44:31:03:8b: 25:3f:8e:ed -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmGpr4vRnUfBI13tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNDE4MjgwN1oXDTI3MDcxODE4MjgwN1owLzEtMCsGA1UEAxMk YWNmM2EzYzctMDNhZi00Y2JkLTkxMjAtZmNhOGZmOWZiMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB2bEcOpmt9yzMDWSLHwJGukY7Mda1Mbug/6 ACAFrT6hdlARlYGpEv4RKScmpdEJuiCUyJF9g+3YVj1se1thlcCctFt3QYUTuAlN FKZAx6MTXH3yPKjMkqXLngl52uDWiJKq8gMRJsTZ5TWDJnxXXVkvWX8fkM5+QzIR tWggRYSk3qF/BVxLAtn7an0NepYg/wZh9rSlygXrjR34cn1ifdjAdQSMxVDEejVs EseDlGZn50nU/OX98N4mMoBIq1X1lbrj8HcIzIZJL1+g1xh6SATacMDCYViQO0pl fE9ylVN1ShItOSmpNe+dUpr0uDaDYolgUYe69rajUsJMTSaFjwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF/Nw5DGE2iPjIDV1VMPd6V3x/odMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h Y2YzYTNjNy0wM2FmLTRjYmQtOTEyMC1mY2E4ZmY5ZmIxYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FjZjNhM2M3LTAzYWYtNGNiZC05 MTIwLWZjYThmZjlmYjFjNS9hY2YzYTNjNy0wM2FmLTRjYmQtOTEyMC1mY2E4ZmY5 ZmIxYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiMwwDgQCAAIwCAMGBCYC9sEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBg/1XXnF+9WHUG4giCUe0dJOb VcvfXy4KlMK7cOPOjLkxp8JwRMgGv5ElSQ4zUJYv+WyJ9cvo6I8+KE+wBI2l/osq f6hX1HgTe6x3LfBgSDlPy902Njw+Xt3p8PTr6Xu9b1jgpiBoS0fUqLlvXjpEyonC L0H4Dv0oVsh+ZOVhbnLkooxodjbBYFQl1g+BayuoWaWDGf/wHkuvcVVrg8u7gfYa 2HcQhj7Esn1Xm2/DTMJu+cwBI1IfLEY6vWIzTW9esMcbIY5QBrOyM9knOAIZ1DY2 tlvi4WLpwqTzoAYMUCwBVdpIJGcBa6SEe/N7ER0vtbqI9r6KAkQxA4slP47t -----END CERTIFICATE-----Generated at Wed Nov 5 05:58:26 2025 by rpki-client