$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer File: ab1a140b-878b-41cc-864f-08e0177f7325.cer (raw, json) Hash identifier: KhK4OpRlJQKYrheQhCogwE6E0IdQsV6LtGmyxnOsphA= Subject key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B97054697198E2266A5BC0140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 00:45:23 +0000 Certificate not after: Mon 24 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 46793 IP: 23.150.240.0/24 IP: 204.238.70.0/24 IP: 2602:fd75::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:05:46:97:19:8e:22:66:a5:bc:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 21 00:45:23 2025 GMT Not After : Jan 24 01:45:23 2028 GMT Subject: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:50:89:3a:44:e5:df:ca:2c:05:37:e1:47: 95:35:50:46:d4:33:91:21:af:b6:c1:5f:1d:51:4d: 4a:70:0e:71:6d:fe:e2:15:db:2d:c5:79:a8:c4:19: f1:49:6a:dc:c0:c8:aa:6b:c8:cd:20:10:8e:05:30: cd:9d:2d:d3:68:a1:d5:4f:5a:29:a3:06:92:22:fa: 66:62:e3:c5:1c:af:f0:3b:c2:79:81:f8:15:86:86: dc:a0:e5:04:c9:d2:e0:5a:59:49:98:b3:30:52:e9: fd:3a:eb:bc:07:c0:41:d8:aa:86:35:d9:72:1e:44: ce:b1:59:c1:07:31:9f:72:1b:4c:41:a3:3a:1c:97: 0c:d1:4f:13:02:74:17:08:31:89:98:9e:0f:0b:95: aa:76:69:a0:22:78:83:01:7c:57:6c:a6:dd:82:2d: 43:52:c2:91:86:31:0e:65:37:b5:58:94:0a:d9:53: 07:ba:7c:1a:6d:0b:47:7b:f3:c3:d2:5c:b1:a9:0c: e6:63:cb:08:3b:31:cd:ad:2f:fb:63:07:82:d8:5f: f4:c7:5c:fd:61:39:12:e7:3e:d6:ca:da:9e:d9:1b: 56:8d:41:53:4c:e4:e1:69:ba:89:cd:2d:bd:9a:ea: 35:0d:bf:22:ce:a0:d1:50:09:67:46:ff:e2:b5:2f: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 IPv6: 2602:fd75::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46793 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:13:52:b5:c9:aa:a8:36:7a:81:10:e4:28:a5:bc:06:e1:9f: ad:e4:39:a6:42:f0:18:53:63:65:49:4e:e4:dc:97:c3:fd:a7: ee:69:02:cc:27:02:0d:d5:9d:bd:bf:ab:08:46:e6:31:bb:71: b2:d5:c0:8e:e5:fb:5c:84:b9:fa:e7:45:7c:36:d0:d2:08:02: 49:1c:e3:23:c0:e0:8a:a2:7c:1f:f9:f7:88:d0:e0:0a:e2:96: 51:74:e3:53:d9:12:ef:4c:75:84:22:e3:02:f9:31:08:07:1b: f1:06:1a:07:88:bb:3a:5a:49:c7:5d:8b:ce:f1:c8:09:a0:d2: 80:3f:ba:c4:9f:26:50:df:3a:bf:95:42:9d:86:20:a0:dd:83: 4a:b4:87:41:a9:a6:bc:4f:9e:9b:53:d7:22:f9:a9:f3:8b:65: ba:e1:93:13:86:48:e1:c3:3c:61:55:f7:ce:c9:80:0f:32:a4: b2:b5:e3:62:a0:22:f7:bc:d4:37:39:a1:ff:d8:c2:c9:20:a5: 8d:a9:65:3b:81:66:ae:28:5f:ca:3e:03:b1:9d:5b:d7:c1:ec: 5f:31:c8:3b:53:d8:ed:c7:80:f7:7c:be:08:65:00:cc:1a:15: 72:f7:19:8a:ce:2e:77:49:7a:cd:cd:7d:ea:7c:56:38:bf:36: 5b:bd:8c:3a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEuXBUaXGY4iZqW8AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAyMTAwNDUyM1oXDTI4MDEyNDAxNDUyM1owLzEtMCsGA1UEAxMk YWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC5QiTpE5d/KLAU34UeVNVBG1DORIa+2wV8d UU1KcA5xbf7iFdstxXmoxBnxSWrcwMiqa8jNIBCOBTDNnS3TaKHVT1opowaSIvpm YuPFHK/wO8J5gfgVhobcoOUEydLgWllJmLMwUun9Ouu8B8BB2KqGNdlyHkTOsVnB BzGfchtMQaM6HJcM0U8TAnQXCDGJmJ4PC5WqdmmgIniDAXxXbKbdgi1DUsKRhjEO ZTe1WJQK2VMHunwabQtHe/PD0lyxqQzmY8sIOzHNrS/7YweC2F/0x1z9YTkS5z7W ytqe2RtWjUFTTOThabqJzS29muo1Db8izqDRUAlnRv/itS8+tQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHEtexXXR99s25ix3MvtGi0olFd9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FiMWExNDBiLTg3OGItNDFjYy04 NjRmLTA4ZTAxNzdmNzMyNS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3 ZjczMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlvADBADM7kYwDgQCAAIwCAMGBCYC/XUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC2yTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyE1K1yaqoNnqBEOQo pbwG4Z+t5DmmQvAYU2NlSU7k3JfD/afuaQLMJwIN1Z29v6sIRuYxu3Gy1cCO5ftc hLn650V8NtDSCAJJHOMjwOCKonwf+feI0OAK4pZRdONT2RLvTHWEIuMC+TEIBxvx BhoHiLs6WknHXYvO8cgJoNKAP7rEnyZQ3zq/lUKdhiCg3YNKtIdBqaa8T56bU9ci +anzi2W64ZMThkjhwzxhVffOyYAPMqSyteNioCL3vNQ3OaH/2MLJIKWNqWU7gWau KF/KPgOxnVvXwexfMcg7U9jtx4D3fL4IZQDMGhVy9xmKzi53SXrNzX3qfFY4vzZb vYw6 -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:26 2025 by rpki-client