$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7.cer File: a515cdae-d0e0-4b7f-80ab-8e73645644c7.cer (raw, json) Hash identifier: f7MwUXUcPgrUk1Rm+LZaL1tuig5exySDxcpxpKLZdBo= Subject key identifier: A6:F4:7A:96:A3:B8:AC:A8:A2:84:24:D6:F1:0F:8F:2E:FC:5F:A9:86 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849112BA8B6A45AB6FAF32B3480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/a515cdae-d0e0-4b7f-80ab-8e73645644c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 16:30:32 +0000 Certificate not after: Thu 15 Apr 2027 21:31:49 +0000 Subordinate resources: AS: 44570 IP: 23.135.148.0/24 IP: 2602:f73b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:2b:a8:b6:a4:5a:b6:fa:f3:2b:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 16:30:32 2025 GMT Not After : Apr 15 21:31:49 2027 GMT Subject: CN=a515cdae-d0e0-4b7f-80ab-8e73645644c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:a2:96:bc:8b:57:8c:33:4d:9c:2c:2a:f1: 85:82:e3:bd:e5:4b:95:37:c7:28:75:01:15:ba:db: 4e:c8:53:89:bf:c0:86:9f:32:53:40:5f:1b:db:9e: e9:93:51:89:53:77:64:68:46:00:0c:fa:9c:15:9d: 0f:42:af:7e:d3:05:06:3f:33:36:a8:a8:ec:19:2d: 0d:ec:24:3f:91:b9:96:55:6e:2b:a3:04:dd:7c:10: 9c:c5:05:0e:5d:4e:ce:5b:a2:c0:0d:c7:6b:f9:da: 9f:42:76:c4:3c:cd:cd:90:7b:42:3e:5e:51:77:28: ff:37:01:b5:37:19:ed:e4:47:9b:44:c5:59:d6:33: e6:1f:05:3e:11:1c:92:c8:bf:b5:09:6a:13:f6:03: 2b:be:ee:01:e8:23:ca:0a:51:95:58:e1:c3:a6:60: 29:86:04:4c:8d:08:cb:8d:17:73:28:56:fe:91:67: 77:2b:d6:e5:ff:2e:94:70:32:ee:fb:d0:fe:67:18: b0:27:eb:46:18:49:27:54:f2:67:00:b7:2a:38:d2: 54:46:c7:3f:3a:f3:63:89:c8:84:84:50:37:a5:8c: 95:3d:1c:81:fa:c3:b7:f0:f7:8f:98:c3:49:25:b7: 54:63:e0:a9:6c:12:84:03:42:fa:28:ca:fe:78:67: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F4:7A:96:A3:B8:AC:A8:A2:84:24:D6:F1:0F:8F:2E:FC:5F:A9:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/a515cdae-d0e0-4b7f-80ab-8e73645644c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.148.0/24 IPv6: 2602:f73b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44570 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c3:49:33:78:a6:55:9c:8a:a7:24:9c:00:c7:60:ea:8f:ca: 13:62:e9:6a:60:cd:ab:d0:8f:e8:46:9b:df:0d:34:7e:7e:40: ad:d6:04:16:24:9c:df:94:e9:83:8c:62:d2:4c:4b:b6:85:28: 99:29:c7:02:42:be:cc:42:5e:66:16:c6:92:f3:31:d7:aa:32: d7:9f:2a:da:7b:5c:a7:2b:20:b3:d3:37:ef:73:d5:15:9e:af: eb:9a:6e:6a:e9:e0:60:d2:b2:6f:63:8c:f2:88:54:04:74:ae: a3:ed:c8:6e:0c:29:15:0a:cd:87:a4:09:85:2d:b9:99:e4:0e: 95:6e:c3:5f:31:5d:da:c2:d4:0e:3e:9f:41:55:71:cf:d1:df: 13:4e:e2:d3:a4:e6:1e:6b:b5:93:c4:ec:e4:2f:f6:ec:22:69: 9d:59:4b:b6:70:84:71:00:21:3b:0c:93:2e:21:b4:8a:aa:8e: 58:d4:02:e0:b2:28:4f:a0:ce:54:72:f9:c1:77:83:20:6b:98: 04:71:21:80:6f:6f:d7:5b:9b:b2:77:e7:14:8d:fa:26:53:cf: 55:74:c8:ae:6e:0f:81:cd:95:5f:01:29:b2:74:b6:52:93:91: 9b:ea:76:b1:ac:03:fd:84:0b:66:fa:77:b0:7b:6d:05:73:f2: 03:64:cf:22 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkRK6i2pFq2+vMrNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwMzE2MzAzMloXDTI3MDQxNTIxMzE0OVowLzEtMCsGA1UEAxMk YTUxNWNkYWUtZDBlMC00YjdmLTgwYWItOGU3MzY0NTY0NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKailryLV4wzTZwsKvGFguO95UuVN8codQEV uttOyFOJv8CGnzJTQF8b257pk1GJU3dkaEYADPqcFZ0PQq9+0wUGPzM2qKjsGS0N 7CQ/kbmWVW4rowTdfBCcxQUOXU7OW6LADcdr+dqfQnbEPM3NkHtCPl5Rdyj/NwG1 Nxnt5EebRMVZ1jPmHwU+ERySyL+1CWoT9gMrvu4B6CPKClGVWOHDpmAphgRMjQjL jRdzKFb+kWd3K9bl/y6UcDLu+9D+ZxiwJ+tGGEknVPJnALcqONJURsc/OvNjiciE hFA3pYyVPRyB+sO38PePmMNJJbdUY+CpbBKEA0L6KMr+eGfvjQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKb0epajuKyoooQk1vEPjy78X6mGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h NTE1Y2RhZS1kMGUwLTRiN2YtODBhYi04ZTczNjQ1NjQ0YzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E1MTVjZGFlLWQwZTAtNGI3Zi04 MGFiLThlNzM2NDU2NDRjNy9hNTE1Y2RhZS1kMGUwLTRiN2YtODBhYi04ZTczNjQ1 NjQ0YzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh5QwDgQCAAIwCAMGBCYC9zsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCuGjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUw0kzeKZVnIqnJJwAx2Dqj8oT YulqYM2r0I/oRpvfDTR+fkCt1gQWJJzflOmDjGLSTEu2hSiZKccCQr7MQl5mFsaS 8zHXqjLXnyrae1ynKyCz0zfvc9UVnq/rmm5q6eBg0rJvY4zyiFQEdK6j7chuDCkV Cs2HpAmFLbmZ5A6VbsNfMV3awtQOPp9BVXHP0d8TTuLTpOYea7WTxOzkL/bsImmd WUu2cIRxACE7DJMuIbSKqo5Y1ALgsihPoM5UcvnBd4Mga5gEcSGAb2/XW5uyd+cU jfomU89VdMiubg+BzZVfASmydLZSk5Gb6naxrAP9hAtm+newe20Fc/IDZM8i -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:15 2025 by rpki-client