$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer File: 956c8740-f351-4625-a3ff-54fb1e6a5b97.cer (raw, json) Hash identifier: mawOjVf7bvxLFYX3i3XtAM5+BJ4rpsUxI7IEp6D6qQA= Subject key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A3971796DD460EC408F453E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 19:30:29 +0000 Certificate not after: Wed 23 Jun 2027 18:31:09 +0000 Subordinate resources: AS: 11715 AS: 25957 IP: 23.136.92.0/24 IP: 2602:f6ae::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:71:79:6d:d4:60:ec:40:8f:45:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 17 19:30:29 2025 GMT Not After : Jun 23 18:31:09 2027 GMT Subject: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:00:ca:bc:2e:62:a9:40:61:34:f2:a2:ee: 65:ee:00:b7:3e:36:8f:d1:33:8a:f9:df:a1:83:75: 33:16:e5:74:fb:bf:66:47:8b:e1:e7:37:b7:31:da: 91:b7:92:73:6c:f6:c9:67:3c:a5:85:ae:ee:ea:61: d6:dc:a6:ed:7a:9d:78:ed:4a:08:c4:1d:03:8a:14: b8:f2:66:4d:72:eb:06:d2:32:ca:a3:2c:bd:06:df: 03:a3:a3:2b:df:64:58:bb:65:92:9c:df:22:39:5c: f6:be:ff:cd:2e:e3:5e:35:f4:fe:c7:80:7b:83:99: b0:5f:63:81:c9:3e:91:18:f2:cf:7c:53:ba:40:74: 2c:8f:ab:01:d3:64:09:dc:6c:59:9d:de:8d:c1:1d: 77:0b:bd:98:6c:21:af:ba:f3:e0:6d:d3:68:4b:ae: 99:05:d9:ec:ad:ab:b3:07:3e:b6:fa:04:98:1d:07: 1f:ff:b0:fe:2e:64:cb:a8:48:4a:80:b2:ab:25:5d: 4b:39:b5:a8:b6:21:65:d9:28:36:4f:f0:0e:31:26: ee:ee:a8:f6:ba:5f:8b:23:42:34:cd:42:b7:dd:1d: 20:e5:fd:a3:a2:15:a2:68:0a:e6:c6:cc:9d:d5:cf: 10:a4:8f:cf:a8:77:b4:44:1d:e6:18:9f:09:7b:cc: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.136.92.0/24 IPv6: 2602:f6ae::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11715 25957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ff:26:b2:7d:7d:02:52:99:23:ea:8e:63:e5:d2:dd:d2:29: 7f:7e:d0:22:8a:b0:c4:4c:2e:82:6d:de:23:0c:4f:da:77:ea: 14:6b:4a:b0:dc:ca:bf:13:09:fa:71:9a:6e:ce:9c:e0:df:d0: 9d:ea:13:36:61:03:e5:12:f8:e0:7e:10:e1:06:6e:43:17:14: 6c:a3:e1:0c:85:04:ec:7e:82:a4:66:a9:dd:6d:7d:d2:75:18: b4:46:52:b8:3f:52:4a:83:e5:07:87:f7:50:a9:6e:0e:77:0d: 3f:e3:d3:14:2e:f8:13:c0:b8:18:78:d2:b8:ba:b1:36:22:fb: 46:98:1e:98:95:fe:01:b9:99:5d:bf:a2:c1:db:3d:e9:cc:ed: 81:6a:4a:f3:80:30:c8:3c:05:da:5d:0f:1c:58:5d:45:d5:37: aa:9f:93:5a:71:4d:f4:e5:3b:24:1c:c4:db:98:5c:6c:26:41: 61:1f:fa:c5:ae:3a:14:26:77:ce:34:87:9a:9e:90:52:94:59: 23:16:19:ae:02:8e:2a:83:82:79:c7:69:c6:87:8a:32:b8:09: 02:e6:71:19:81:69:28:4b:18:d9:ec:07:1e:75:38:d0:1e:0e: 66:ec:30:48:a7:d4:8a:58:cc:24:4c:62:25:90:cb:28:1e:04: 89:4c:67:9c -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEo5cXlt1GDsQI9FPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDYxNzE5MzAyOVoXDTI3MDYyMzE4MzEwOVowLzEtMCsGA1UEAxMk OTU2Yzg3NDAtZjM1MS00NjI1LWEzZmYtNTRmYjFlNmE1Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq8AyrwuYqlAYTTyou5l7gC3PjaP0TOK+d+h g3UzFuV0+79mR4vh5ze3MdqRt5JzbPbJZzylha7u6mHW3Kbtep147UoIxB0DihS4 8mZNcusG0jLKoyy9Bt8Do6Mr32RYu2WSnN8iOVz2vv/NLuNeNfT+x4B7g5mwX2OB yT6RGPLPfFO6QHQsj6sB02QJ3GxZnd6NwR13C72YbCGvuvPgbdNoS66ZBdnsrauz Bz62+gSYHQcf/7D+LmTLqEhKgLKrJV1LObWotiFl2Sg2T/AOMSbu7qj2ul+LI0I0 zUK33R0g5f2johWiaArmxsyd1c8QpI/PqHe0RB3mGJ8Je8yZiwIDAQABo4IELjCC BCowHQYDVR0OBBYEFLvSe2Vtzd8Vsa2rKPD1yPejGyVMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NTZjODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZiMWU2YTViOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk1NmM4NzQwLWYzNTEtNDYyNS1h M2ZmLTU0ZmIxZTZhNWI5Ny85NTZjODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZiMWU2 YTViOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiFwwDgQCAAIwCAMGBCYC9q4AMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAi3DAgJlZTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+/yayfX0CUpkj6o5j5dLd 0il/ftAiirDETC6Cbd4jDE/ad+oUa0qw3Mq/Ewn6cZpuzpzg39Cd6hM2YQPlEvjg fhDhBm5DFxRso+EMhQTsfoKkZqndbX3SdRi0RlK4P1JKg+UHh/dQqW4Odw0/49MU LvgTwLgYeNK4urE2IvtGmB6Ylf4BuZldv6LB2z3pzO2BakrzgDDIPAXaXQ8cWF1F 1Teqn5NacU305TskHMTbmFxsJkFhH/rFrjoUJnfONIeanpBSlFkjFhmuAo4qg4J5 x2nGh4oyuAkC5nEZgWkoSxjZ7AcedTjQHg5m7DBIp9SKWMwkTGIlkMsoHgSJTGec -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:52 2025 by rpki-client