$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer File: b673aad8-2248-407c-90e8-0781473d6616.cer (raw, json) Hash identifier: IxYO2id6mT3BWe6YgM3MMvrFMJQd/B3xeNLUKDeH6BY= Subject key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499EF02A216738BE412A5EB500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 11:15:27 +0000 Certificate not after: Thu 22 Jul 2027 16:56:30 +0000 Subordinate resources: AS: 19922 AS: 401676 IP: 23.138.4.0/24 IP: 2602:f676::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9e:f0:2a:21:67:38:be:41:2a:5e:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 23 11:15:27 2025 GMT Not After : Jul 22 16:56:30 2027 GMT Subject: CN=b673aad8-2248-407c-90e8-0781473d6616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:0d:d0:dd:c4:6d:19:de:32:cd:38:89:4d: 24:da:10:71:fc:f7:f5:4a:67:bd:11:03:0b:9e:7a: 87:8e:c1:4e:c8:eb:d4:67:85:c0:8a:15:dd:7f:89: 8c:44:d5:cf:53:a9:c7:72:56:bc:c2:4d:25:52:a6: 7e:99:1c:a0:ff:7b:1b:2d:10:00:21:77:b1:e7:59: 30:3f:a1:42:1b:61:af:41:c0:e3:a5:f8:2f:1a:1c: b0:c9:40:a5:59:97:76:f0:e9:06:72:5b:40:c8:3a: d8:ee:36:5e:82:4e:6d:5d:38:63:30:39:84:59:97: 0f:6b:5b:c0:2e:0b:be:7f:80:14:29:7d:7c:d9:fe: 29:53:a6:d7:cd:e8:05:29:17:97:5c:e8:a9:66:23: fc:0a:1e:a6:44:be:3f:69:da:bc:7a:94:3c:4a:e6: e3:20:66:17:b4:50:32:b0:1a:94:40:c8:4a:0d:07: d0:86:2c:b3:5c:c0:b5:91:a5:70:97:29:76:1b:ae: d3:64:df:8a:d5:4b:19:f1:2d:1b:6c:2c:d4:88:44: 3f:42:80:fe:78:e2:d5:8a:17:05:2c:a3:07:54:cc: b4:08:78:3f:62:67:c9:6e:32:cb:ac:bd:fc:ea:3b: ec:96:0b:1e:10:df:6f:7d:1c:37:fa:67:64:1d:37: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.4.0/24 IPv6: 2602:f676::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19922 401676 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a7:36:3f:cb:73:93:13:3a:98:3d:8e:b2:d9:12:5a:23:af: 31:06:23:a8:f0:df:45:b5:ae:a8:fb:c3:c5:1d:cf:b6:b7:ba: 5b:29:41:bf:8c:cb:0b:49:34:56:29:19:2c:97:0f:44:0f:75: 4b:7b:f9:28:c1:1c:ab:3f:73:be:62:fb:9a:64:5b:c8:2a:f9: ff:ef:61:d2:e0:12:19:63:42:f9:07:4b:7c:da:cd:1b:23:fd: 46:06:60:22:db:14:90:42:76:a9:95:2b:fd:c1:72:fb:bf:d6: 96:8a:21:fb:16:b2:9c:c4:88:40:59:97:4f:bb:8a:84:b9:eb: 44:3c:50:57:65:3f:4f:9d:d0:85:87:cf:1b:78:f0:6e:da:fa: 22:ce:61:91:64:ab:6e:32:c4:80:50:c1:c5:88:74:a5:04:22: 9c:20:40:42:2b:a3:6c:da:72:f7:d7:fe:13:b9:8f:d0:39:e8: b0:d8:b3:67:50:72:97:b4:81:2a:79:5e:01:ca:80:8d:71:1b: 66:fb:a6:53:7c:49:24:31:6e:d9:53:17:35:68:92:a9:f3:bc: 9a:cb:f9:5b:e0:e0:bf:bd:41:c2:6c:bf:1b:ca:4a:f1:88:54: bf:e0:6c:fc:fe:48:e7:91:31:99:fa:8f:cc:30:13:93:a4:39: d9:8f:e8:bd -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEme8CohZzi+QSpetQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMzExMTUyN1oXDTI3MDcyMjE2NTYzMFowLzEtMCsGA1UEAxMk YjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ0N0N3EbRneMs04iU0k2hBx/Pf1Sme9EQML nnqHjsFOyOvUZ4XAihXdf4mMRNXPU6nHcla8wk0lUqZ+mRyg/3sbLRAAIXex51kw P6FCG2GvQcDjpfgvGhywyUClWZd28OkGcltAyDrY7jZegk5tXThjMDmEWZcPa1vA Lgu+f4AUKX182f4pU6bXzegFKReXXOipZiP8Ch6mRL4/adq8epQ8SubjIGYXtFAy sBqUQMhKDQfQhiyzXMC1kaVwlyl2G67TZN+K1UsZ8S0bbCzUiEQ/QoD+eOLVihcF LKMHVMy0CHg/YmfJbjLLrL386jvslgseEN9vfRw3+mdkHTcQawIDAQABo4IELzCC BCswHQYDVR0OBBYEFPn9/b2mHe5H7EOVQUEAtn0KaFSiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i NjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2I2NzNhYWQ4LTIyNDgtNDA3Yy05 MGU4LTA3ODE0NzNkNjYxNi9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDcz ZDY2MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXigQwDgQCAAIwCAMGACYC9nYAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAk3SAgMGIQwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALqc2P8tzkxM6mD2OstkS WiOvMQYjqPDfRbWuqPvDxR3Ptre6WylBv4zLC0k0VikZLJcPRA91S3v5KMEcqz9z vmL7mmRbyCr5/+9h0uASGWNC+QdLfNrNGyP9RgZgItsUkEJ2qZUr/cFy+7/Wlooh +xaynMSIQFmXT7uKhLnrRDxQV2U/T53QhYfPG3jwbtr6Is5hkWSrbjLEgFDBxYh0 pQQinCBAQiujbNpy99f+E7mP0DnosNizZ1Byl7SBKnleAcqAjXEbZvumU3xJJDFu 2VMXNWiSqfO8msv5W+Dgv71Bwmy/G8pK8YhUv+Bs/P5I55ExmfqPzDATk6Q52Y/o vQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:49 2025 by rpki-client