$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer File: 2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer (raw, json) Hash identifier: caKoMTLog7yvheDdFOxmuGWfUyO9MPXqYVajMz7jMXA= Subject key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25 Authority key identifier: 00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57 Certificate issuer: /CN=04b24da1-11ab-48ad-a03f-6b7832a569c8 Certificate serial: 010D0C9F4328584B75FBDFDFC3EC4CFD972E2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer Manifest: rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft caRepository: rsync://repo.rpki.space/repo/Netiface/1/ Notify URL: https://repo.rpki.space/rrdp/notification.xml Certificate not before: Thu 09 Oct 2025 04:44:46 +0000 Certificate not after: Wed 12 Jan 2028 05:44:46 +0000 Subordinate resources: AS: 33042 AS: 36680 IP: 23.176.184.0/24 IP: 130.12.180.0/22 IP: 2602:f915::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:fb:df:df:c3:ec:4c:fd:97:2e:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b24da1-11ab-48ad-a03f-6b7832a569c8 Validity Not Before: Oct 9 04:44:46 2025 GMT Not After : Jan 12 05:44:46 2028 GMT Subject: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:73:17:b0:a9:60:00:cb:b0:42:e3:eb:30: 0d:e2:e8:33:1d:e3:02:4e:2a:5d:3f:5e:9a:e5:75: ba:55:e1:44:b4:d7:17:6f:6a:46:01:93:c1:fa:2d: 74:b2:70:3f:2f:d0:3a:81:f7:9a:36:1f:c2:bd:43: 7a:a4:9f:88:65:66:39:2e:3c:1c:84:17:68:b9:b5: 50:bf:dd:05:d9:13:12:cf:87:93:f0:07:6e:7c:49: ca:11:fc:5b:d0:79:08:33:a2:00:75:28:91:54:af: ce:e4:b6:44:ae:fe:ef:a4:83:1f:69:20:f1:7f:02: 8c:e9:0e:f0:d7:fd:54:4c:a5:ab:57:bb:a1:eb:3c: 30:8f:cf:94:1f:90:9f:94:72:9f:bb:6c:81:b3:34: 23:89:d6:77:16:3d:b0:20:33:a8:ba:62:e9:7c:7a: 83:89:17:6c:4f:02:9e:cb:1e:9e:78:f7:8a:a4:39: 29:e2:3e:21:a1:18:9d:85:7f:df:49:d0:91:fa:75: 79:d7:9f:45:87:95:73:db:64:96:8a:d3:ab:15:d0: 24:b9:02:e5:a8:6f:d6:da:69:bc:c9:2c:83:61:b9: 72:3c:8d:4d:bd:41:19:5b:13:93:53:5c:7a:fe:b5: 69:7c:13:e0:dd:29:0d:3d:71:0e:4e:02:92:50:a3: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25 Subject Information Access: CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/1/ RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl X509v3 Authority Key Identifier: keyid:00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer sbgp-ipAddrBlock: critical IPv4: 23.176.184.0/24 130.12.180.0/22 IPv6: 2602:f915::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33042 36680 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:07:8f:77:77:8f:1d:9e:a1:38:70:4f:5b:e1:c1:7a:00:e5: 8e:aa:8a:7e:bf:c9:1b:1d:4c:6e:7d:b3:4d:95:0d:c1:aa:10: c1:c1:ce:43:6e:21:34:a5:46:94:be:9e:da:51:51:ca:18:cf: 6e:84:92:17:99:fc:48:40:95:be:9e:76:16:bb:b6:0a:ed:7b: 54:31:f6:0a:01:e2:81:6a:12:b9:e7:38:44:6e:b9:f0:ac:f5: 7b:cb:47:fa:be:fb:95:1a:ba:fb:32:06:a2:d0:c9:38:98:76: 23:c9:32:d0:ca:a6:2e:c6:4e:7b:28:de:23:d4:f9:02:54:dc: e4:3f:57:e5:11:e3:4c:b1:1b:7d:c8:36:bd:df:96:27:26:f2: 3e:f6:82:44:e1:9b:dc:21:74:96:5d:aa:5d:4d:89:b7:97:da: 3c:fa:fc:36:be:f1:c1:7e:89:dd:2e:c8:eb:aa:8d:4f:e6:44: 78:09:e1:71:4a:a0:0b:71:47:b0:65:d7:e6:55:e4:fb:13:d6: c0:ad:ec:b2:f0:de:92:5b:a3:a1:9a:b0:3c:c4:fc:b6:cf:0f: bd:be:65:9f:30:0c:aa:9e:a2:20:86:0a:08:6c:7b:2d:ed:49: 66:43:d9:35:b5:a6:88:b4:d3:ef:26:8c:bd:0a:dc:45:94:35: 24:64:99:3a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEt1+9/fw+xM/ZcuLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiMjRkYTEtMTFhYi00OGFkLWEwM2YtNmI3ODMyYTU2 OWM4MB4XDTI1MTAwOTA0NDQ0NloXDTI4MDExMjA1NDQ0NlowPTE7MDkGA1UEAxMy MmI3NWNhMjUwZmM2M2M2YzQ3ZDAzMjYzOGJjZWNjNDlmNGI1ZmI3MTVlYzZkZmU4 YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrXMXsKlgAMuwQuPr MA3i6DMd4wJOKl0/XprldbpV4US01xdvakYBk8H6LXSycD8v0DqB95o2H8K9Q3qk n4hlZjkuPByEF2i5tVC/3QXZExLPh5PwB258ScoR/FvQeQgzogB1KJFUr87ktkSu /u+kgx9pIPF/AozpDvDX/VRMpatXu6HrPDCPz5QfkJ+Ucp+7bIGzNCOJ1ncWPbAg M6i6Yul8eoOJF2xPAp7LHp5494qkOSniPiGhGJ2Ff99J0JH6dXnXn0WHlXPbZJaK 06sV0CS5AuWob9baabzJLINhuXI8jU29QRlbE5NTXHr+tWl8E+DdKQ09cQ5OApJQ o+RhAgMBAAGjggObMIIDlzAdBgNVHQ4EFgQU+/eOXaW11q1OL5MmNCBrEzzL/SUw geMGCCsGAQUFBwELBIHWMIHTMDQGCCsGAQUFBzAFhihyc3luYzovL3JlcG8ucnBr aS5zcGFjZS9yZXBvL05ldGlmYWNlLzEvMGAGCCsGAQUFBzAKhlRyc3luYzovL3Jl cG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzEvRkJGNzhFNURBNUI1RDZBRDRF MkY5MzI2MzQyMDZCMTMzQ0NCRkQyNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8v cmVwby5ycGtpLnNwYWNlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8E BTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJp bi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNl LWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJk MmE4MzM3ZC8wNGIyNGRhMS0xMWFiLTQ4YWQtYTAzZi02Yjc4MzJhNTY5YzgvMDRi MjRkYTEtMTFhYi00OGFkLWEwM2YtNmI3ODMyYTU2OWM4LmNybDAfBgNVHSMEGDAW gBQA1djaXiFc9P9AQrUZtFBcIkvRVzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUF BwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9y ZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0y MTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdk LzA0YjI0ZGExLTExYWItNDhhZC1hMDNmLTZiNzgzMmE1NjljOC5jZXIwNQYIKwYB BQUHAQcBAf8EJjAkMBIEAgABMAwDBAAXsLgDBAKCDLQwDgQCAAIwCAMGACYC+RUA MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCBEgIDAI9IMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF4Hj3d3 jx2eoThwT1vhwXoA5Y6qin6/yRsdTG59s02VDcGqEMHBzkNuITSlRpS+ntpRUcoY z26EkheZ/EhAlb6edha7tgrte1Qx9goB4oFqErnnOERuufCs9XvLR/q++5Uauvsy BqLQyTiYdiPJMtDKpi7GTnso3iPU+QJU3OQ/V+UR40yxG33INr3flicm8j72gkTh m9whdJZdql1NibeX2jz6/Da+8cF+id0uyOuqjU/mRHgJ4XFKoAtxR7Bl1+ZV5PsT 1sCt7LLw3pJbo6GasDzE/LbPD72+ZZ8wDKqeoiCGCghsey3tSWZD2TW1poi00+8m jL0K3EWUNSRkmTo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:49 2025 by rpki-client