$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer File: 1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer (raw, json) Hash identifier: 8Efkv0k6kCvr8SxyWXrYbOKjiHFW5aq//mjuik9e5Qs= Subject key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B7462BEA74F6D9092B97F0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 15:00:26 +0000 Certificate not after: Tue 16 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 63066 IP: 23.159.232.0/23 IP: 130.12.228.0/22 IP: 2602:fa4c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:62:be:a7:4f:6d:90:92:b9:7f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 8 15:00:26 2025 GMT Not After : Feb 16 01:45:33 2027 GMT Subject: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:0c:34:7f:7e:56:0d:53:3f:be:95:8c:93: 97:6d:e3:08:da:13:b5:4a:c2:1c:d3:ac:2c:ab:40: d1:f3:52:7b:14:0d:0d:6e:a7:f2:d4:db:9c:68:3b: 83:e7:99:95:b7:db:7b:a9:2e:23:ef:d8:4f:72:c2: 38:d5:19:7f:62:3b:80:9c:7a:2c:d8:16:22:bc:63: b2:f8:55:39:ab:45:97:11:6b:94:18:b5:7a:9f:16: 79:56:94:8b:7e:00:f0:36:7e:79:c1:9c:26:2e:bf: b1:50:2b:a0:06:a2:5f:e9:09:bd:b7:14:21:cf:c7: 7f:8a:fd:76:7f:35:ad:c1:88:06:a7:6b:26:25:17: ed:2a:a4:3b:9a:36:4c:82:bd:43:70:d4:e1:06:cc: 6b:15:64:38:f5:ac:5a:42:ec:83:7f:62:48:6d:60: 3a:b1:ac:d8:7b:10:84:5b:13:dd:75:8f:bd:2e:ae: 20:be:8b:5a:3e:3d:a1:c7:40:79:21:a5:25:03:2a: 56:bd:c0:32:2c:fa:7a:d9:bf:e1:77:84:3a:4f:f4: 1b:56:0c:e6:c4:d3:99:4b:47:c0:8f:35:40:34:fc: 4f:31:01:06:c1:31:b2:7c:6a:d1:f9:9c:73:a7:05: 05:e8:d2:b7:7c:a0:4a:69:33:98:27:c5:c4:e6:a6: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.159.232.0/23 130.12.228.0/22 IPv6: 2602:fa4c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63066 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:21:da:6d:3a:73:9c:05:50:5e:53:05:a5:b1:bd:c5:7e:fa: d0:28:fa:69:27:df:8b:9f:94:73:87:66:76:25:a6:56:18:77: ed:15:a0:40:3f:be:8a:89:d9:f6:92:25:ef:2a:a0:e0:f4:60: 28:82:07:0a:91:7e:29:a4:b5:23:5f:31:14:fb:04:a1:c3:14: 9e:f0:80:d8:45:3f:84:31:4b:d5:34:96:8f:99:49:cb:d8:43: d8:f7:e3:b0:a7:24:72:70:f8:7e:9f:88:d8:3b:6c:12:b3:79: 01:c1:13:6c:ba:d7:2b:54:37:be:78:b4:9d:c6:ce:f1:86:6f: fa:cd:35:78:9c:c9:16:41:23:a4:df:36:13:bb:2d:5d:90:32: 40:8e:6b:9e:e8:a1:46:e2:53:44:33:ea:f6:d1:46:2a:d7:8e: c7:ad:aa:d9:eb:3f:92:e8:1c:6c:86:cb:79:19:23:63:b7:8e: 98:a3:68:7b:00:d5:77:3e:44:5c:8f:f2:6f:07:5b:14:b7:d3: 28:9f:71:4a:50:59:56:3f:3b:93:e0:95:21:b7:25:c9:f3:97: 34:f5:a3:4e:6c:cb:bc:aa:c3:e3:6e:33:e0:91:fe:c9:5e:d1: b7:b0:e9:26:fa:03:89:45:35:0a:d6:93:94:c1:2f:99:2a:97: c2:30:a5:92 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt0Yr6nT22Qkrl/DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAwODE1MDAyNloXDTI3MDIxNjAxNDUzM1owLzEtMCsGA1UEAxMk MWY5ZmFkNWMtZWUxZi00NGJjLWEzYjItZmRhNmY2YzBiNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BYMNH9+Vg1TP76VjJOXbeMI2hO1SsIc06ws q0DR81J7FA0Nbqfy1NucaDuD55mVt9t7qS4j79hPcsI41Rl/YjuAnHos2BYivGOy +FU5q0WXEWuUGLV6nxZ5VpSLfgDwNn55wZwmLr+xUCugBqJf6Qm9txQhz8d/iv12 fzWtwYgGp2smJRftKqQ7mjZMgr1DcNThBsxrFWQ49axaQuyDf2JIbWA6sazYexCE WxPddY+9Lq4gvotaPj2hx0B5IaUlAypWvcAyLPp62b/hd4Q6T/QbVgzmxNOZS0fA jzVANPxPMQEGwTGyfGrR+ZxzpwUF6NK3fKBKaTOYJ8XE5qZivwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGctLCQi27C9JkGSTWOltsK07w3rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZjlmYWQ1Yy1lZTFmLTQ0YmMtYTNiMi1mZGE2ZjZjMGI3NDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmOWZhZDVjLWVlMWYtNDRiYy1h M2IyLWZkYTZmNmMwYjc0NC8xZjlmYWQ1Yy1lZTFmLTQ0YmMtYTNiMi1mZGE2ZjZj MGI3NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXn+gDBAKCDOQwDgQCAAIwCAMGBCYC+kwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD2WjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiIdptOnOcBVBeUwWl sb3FfvrQKPppJ9+Ln5Rzh2Z2JaZWGHftFaBAP76Kidn2kiXvKqDg9GAoggcKkX4p pLUjXzEU+wShwxSe8IDYRT+EMUvVNJaPmUnL2EPY9+OwpyRycPh+n4jYO2wSs3kB wRNsutcrVDe+eLSdxs7xhm/6zTV4nMkWQSOk3zYTuy1dkDJAjmue6KFG4lNEM+r2 0UYq147HrarZ6z+S6Bxshst5GSNjt46Yo2h7ANV3PkRcj/JvB1sUt9Mon3FKUFlW PzuT4JUhtyXJ85c09aNObMu8qsPjbjPgkf7JXtG3sOkm+gOJRTUK1pOUwS+ZKpfC MKWS -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:22 2025 by rpki-client