$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23.cer File: b9efc906-b95a-4dc3-bdb9-79e0b1f84f23.cer (raw, json) Hash identifier: 0i5q7IL5dQkimiPgyKEqSA+DuyqYggABJqFdh1HO1xc= Subject key identifier: 14:6D:3E:14:CC:75:F4:A2:5A:70:22:D7:97:0A:92:AC:12:7E:61:36 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584991A979267AF463541FF465C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 17:07:30 +0000 Certificate not after: Thu 22 Jul 2027 17:07:30 +0000 Subordinate resources: AS: 54151 IP: 75.127.117.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:a9:79:26:7a:f4:63:54:1f:f4:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 17:07:30 2025 GMT Not After : Jul 22 17:07:30 2027 GMT Subject: CN=b9efc906-b95a-4dc3-bdb9-79e0b1f84f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:35:9f:88:52:54:5d:a8:32:fa:ce:c3:41: 25:91:50:dc:80:36:27:5b:e5:c0:d3:cd:8f:78:9f: a0:9d:c0:a1:0d:41:0e:9d:62:cc:ba:a3:3d:c8:74: 92:49:cb:9e:42:c5:44:8a:54:90:03:76:fc:68:62: 0b:82:74:de:63:aa:01:94:01:ed:48:04:cd:fc:c5: 18:4d:4b:23:c9:69:16:0a:8c:97:c6:b3:b8:a7:02: 2b:c0:d1:e8:15:ae:b5:9d:f2:d5:13:0d:8c:45:8c: f5:dc:60:ae:76:3d:3f:9e:93:85:d4:70:9b:49:32: ef:7a:34:03:48:45:b8:91:a8:c6:fa:5c:12:c9:e9: a7:1c:9f:de:21:70:f8:52:b9:8f:c6:b1:05:d5:bb: 3a:67:37:d1:c6:93:02:44:35:98:24:a3:4c:cb:ff: 39:a9:33:07:f2:c7:6d:4a:15:96:32:17:a7:f3:03: 65:81:7e:e6:d3:de:07:40:f7:00:12:f1:a4:a7:1a: 77:58:7c:41:44:46:66:48:1f:6d:1b:71:4c:1a:84: 85:e9:d2:9b:ea:4b:97:35:a4:b5:7e:e5:01:9e:7f: 2d:9c:9d:26:06:a1:33:88:65:a2:21:cf:e6:52:80: b2:a6:3a:18:09:5e:ab:3e:ed:74:46:6f:e9:36:be: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6D:3E:14:CC:75:F4:A2:5A:70:22:D7:97:0A:92:AC:12:7E:61:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23/b9efc906-b95a-4dc3-bdb9-79e0b1f84f23.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 75.127.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54151 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4b:24:3b:63:0d:5c:54:6a:e6:86:1d:ed:c1:8e:36:de:90: 84:80:a4:f2:7e:d8:de:ac:99:77:db:67:d5:bf:cb:3c:f4:b6: 93:13:8b:63:11:fe:b5:5d:1e:4d:eb:fa:31:30:32:38:44:8f: ef:23:46:fa:50:fe:b6:63:e5:79:2b:71:7f:d7:50:20:a9:49: 96:87:30:d2:b7:19:19:58:5a:c3:60:fb:c3:60:83:74:af:17: a8:75:03:0e:d6:14:55:66:e8:1a:1c:e9:f6:80:ae:de:7f:33: 74:19:ce:fc:9f:32:e5:6e:95:52:ec:9d:98:f9:79:4c:4a:31: ce:05:e4:ea:22:61:bb:5f:13:83:89:79:10:7f:55:55:e3:d6: 6e:f0:76:01:fb:73:f9:7b:85:c7:ed:95:b7:f4:22:08:5f:39: 48:cb:51:cb:0e:35:90:4c:02:a2:45:81:1d:ee:b5:1b:6b:a0: 91:77:d6:50:5e:b0:fe:51:43:a8:75:a6:d6:e4:a1:8e:25:1a: 2e:f0:47:9e:ac:3c:c1:bc:c7:f1:4a:fc:a1:95:4f:76:9b:04: 2c:2b:45:87:7d:76:71:f1:75:53:9d:d7:a8:8d:1a:28:e5:9f: 7e:f9:08:b7:0b:92:49:89:be:79:fb:87:a3:59:a3:11:65:3a: d5:b2:e3:84 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmRqXkmevRjVB/0ZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODE3MDczMFoXDTI3MDcyMjE3MDczMFowLzEtMCsGA1UEAxMk YjllZmM5MDYtYjk1YS00ZGMzLWJkYjktNzllMGIxZjg0ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8M1n4hSVF2oMvrOw0ElkVDcgDYnW+XA082P eJ+gncChDUEOnWLMuqM9yHSSScueQsVEilSQA3b8aGILgnTeY6oBlAHtSATN/MUY TUsjyWkWCoyXxrO4pwIrwNHoFa61nfLVEw2MRYz13GCudj0/npOF1HCbSTLvejQD SEW4kajG+lwSyemnHJ/eIXD4UrmPxrEF1bs6ZzfRxpMCRDWYJKNMy/85qTMH8sdt ShWWMhen8wNlgX7m094HQPcAEvGkpxp3WHxBREZmSB9tG3FMGoSF6dKb6kuXNaS1 fuUBnn8tnJ0mBqEziGWiIc/mUoCypjoYCV6rPu10Rm/pNr5z9wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBRtPhTMdfSiWnAi15cKkqwSfmE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i OWVmYzkwNi1iOTVhLTRkYzMtYmRiOS03OWUwYjFmODRmMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2I5ZWZjOTA2LWI5NWEtNGRjMy1i ZGI5LTc5ZTBiMWY4NGYyMy9iOWVmYzkwNi1iOTVhLTRkYzMtYmRiOS03OWUwYjFm ODRmMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABLf3UwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANOHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC9LJDtjDVxUauaGHe3BjjbekISApPJ+2N6smXfbZ9W/yzz0 tpMTi2MR/rVdHk3r+jEwMjhEj+8jRvpQ/rZj5XkrcX/XUCCpSZaHMNK3GRlYWsNg +8Ngg3SvF6h1Aw7WFFVm6Boc6faArt5/M3QZzvyfMuVulVLsnZj5eUxKMc4F5Ooi YbtfE4OJeRB/VVXj1m7wdgH7c/l7hcftlbf0IghfOUjLUcsONZBMAqJFgR3utRtr oJF31lBesP5RQ6h1ptbkoY4lGi7wR56sPMG8x/FK/KGVT3abBCwrRYd9dnHxdVOd 16iNGijln375CLcLkkmJvnn7h6NZoxFlOtWy44Q= -----END CERTIFICATE-----Generated at Wed Nov 5 09:40:35 2025 by rpki-client