$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer File: e95630a3-5da1-408c-891c-268d2b4791c7.cer (raw, json) Hash identifier: +2FPf0mZEV598jEvc/qROf+TVmY+Uyke3D9vmkOr7RY= Subject key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C8C968E1B352DD07BDF42640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 11:01:19 +0000 Certificate not after: Wed 11 Aug 2027 11:01:19 +0000 Subordinate resources: AS: 401380 IP: 23.191.232.0/24 IP: 2602:f7e2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:c9:68:e1:b3:52:dd:07:bd:f4:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 11:01:19 2025 GMT Not After : Aug 11 11:01:19 2027 GMT Subject: CN=e95630a3-5da1-408c-891c-268d2b4791c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:fa:44:7d:9a:e9:32:22:9a:69:98:22:57: d4:70:de:73:a1:9e:f8:d9:61:86:01:66:25:cf:5f: 27:20:f0:fb:21:24:55:6e:e6:24:d2:be:3c:8c:a6: a8:85:cc:86:74:50:aa:88:10:ad:75:30:20:97:f6: 3b:38:12:f2:9b:6a:a2:d7:da:77:c3:c0:f1:e3:39: 35:a2:31:a6:6b:89:ce:92:30:98:de:d1:3f:ee:8d: 7e:e6:6c:da:7e:84:5d:68:25:01:48:67:e2:dd:98: 3a:87:3b:7c:28:30:93:47:5e:50:8f:e1:af:5d:27: c5:06:dd:75:ba:66:6b:8f:63:94:cd:bf:3a:fd:11: 17:94:8b:b2:2f:b7:d1:ad:9a:87:89:4a:84:68:66: c1:27:9b:08:f9:a8:f1:b1:60:2b:f2:df:dc:5c:ef: a1:cd:64:9f:39:f7:ea:fa:1f:b3:0b:88:8b:13:4a: b8:d1:83:79:6d:05:e1:cc:3a:0e:34:46:d1:9f:6e: 23:9e:12:23:f2:de:0d:66:c2:bc:f4:a1:ae:3f:2c: d2:59:14:58:68:1f:c0:9a:29:d7:60:6f:79:f0:b7: 47:c2:98:f6:b9:ef:85:8e:13:68:d2:9b:34:ae:25: b6:cf:2a:79:ae:31:74:f1:16:a9:48:7e:bc:9d:60: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.191.232.0/24 IPv6: 2602:f7e2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401380 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2b:a1:ab:ae:d8:82:2c:5a:e3:32:cc:f5:9c:a2:fc:a0:d0: f7:f9:0c:65:de:b1:1f:f9:7b:80:bc:d3:c4:bb:62:48:a7:93: 36:83:35:fe:7b:d1:66:0f:cc:7a:d7:c7:65:d2:2f:33:3b:98: 52:87:08:53:55:0c:7e:77:0c:06:87:4c:0d:c1:8d:fe:12:62: 23:1e:f6:25:f0:6a:2d:0b:93:af:14:0e:be:17:ba:22:98:b2: 90:b5:7e:c5:21:9e:ed:e9:52:87:ff:0d:ca:ad:7e:08:36:44: b8:83:9a:fb:4b:38:23:21:91:df:32:28:8a:ad:6e:9f:17:1e: 13:93:8b:41:e7:44:fd:2c:d2:82:f0:36:eb:72:56:2c:72:bb: 85:6b:fa:48:10:32:f1:77:5c:e5:b1:97:38:65:3d:ba:7e:3c: a0:2a:c5:e3:ed:d8:93:9b:31:0b:ed:34:8d:aa:ab:5f:19:84: a6:4f:7f:bb:f7:0f:15:0a:d8:d4:74:4b:5e:23:1b:83:47:97: 15:2a:1f:18:0c:74:ca:52:88:5d:84:ed:b7:83:f9:ad:61:b4: 9e:a5:33:27:a3:42:77:3d:39:18:2e:ff:04:7d:2e:30:84:5e: 28:2c:45:f3:20:06:bf:f5:0c:a9:5d:30:a6:8b:68:2d:33:83: 16:2a:cf:f2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnIyWjhs1LdB730JkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwODExMDExOVoXDTI3MDgxMTExMDExOVowLzEtMCsGA1UEAxMk ZTk1NjMwYTMtNWRhMS00MDhjLTg5MWMtMjY4ZDJiNDc5MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd36RH2a6TIimmmYIlfUcN5zoZ742WGGAWYl z18nIPD7ISRVbuYk0r48jKaohcyGdFCqiBCtdTAgl/Y7OBLym2qi19p3w8Dx4zk1 ojGma4nOkjCY3tE/7o1+5mzafoRdaCUBSGfi3Zg6hzt8KDCTR15Qj+GvXSfFBt11 umZrj2OUzb86/REXlIuyL7fRrZqHiUqEaGbBJ5sI+ajxsWAr8t/cXO+hzWSfOffq +h+zC4iLE0q40YN5bQXhzDoONEbRn24jnhIj8t4NZsK89KGuPyzSWRRYaB/AminX YG958LdHwpj2ue+FjhNo0ps0riW2zyp5rjF08RapSH68nWBw9wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBbP2seiczO4zSHdYx2VXSJ0SXN6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l OTU2MzBhMy01ZGExLTQwOGMtODkxYy0yNjhkMmI0NzkxYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U5NTYzMGEzLTVkYTEtNDA4Yy04 OTFjLTI2OGQyYjQ3OTFjNy9lOTU2MzBhMy01ZGExLTQwOGMtODkxYy0yNjhkMmI0 NzkxYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXv+gwDgQCAAIwCAMGACYC9+IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf5DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQK6GrrtiCLFrjMsz1nKL8oND3 +Qxl3rEf+XuAvNPEu2JIp5M2gzX+e9FmD8x618dl0i8zO5hShwhTVQx+dwwGh0wN wY3+EmIjHvYl8GotC5OvFA6+F7oimLKQtX7FIZ7t6VKH/w3KrX4INkS4g5r7Szgj IZHfMiiKrW6fFx4Tk4tB50T9LNKC8DbrclYscruFa/pIEDLxd1zlsZc4ZT26fjyg KsXj7diTmzEL7TSNqqtfGYSmT3+79w8VCtjUdEteIxuDR5cVKh8YDHTKUohdhO23 g/mtYbSepTMno0J3PTkYLv8EfS4whF4oLEXzIAa/9QypXTCmi2gtM4MWKs/y -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:23 2025 by rpki-client