$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer File: 324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer (raw, json) Hash identifier: sqruxdZwDqEqylDxFOd+ZPdsKD8L+e28ft7vG9to5FE= Subject key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority key identifier: 71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 Certificate issuer: /CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Certificate serial: 010D0C9F4328584B756663266A54AC2FA615E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 08 Oct 2025 23:43:34 +0000 Certificate not after: Wed 12 Jan 2028 00:43:34 +0000 Subordinate resources: AS: 26954 IP: 23.191.40.0/24 IP: 130.12.93.0/24 IP: 2602:f7de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:66:63:26:6a:54:ac:2f:a6:15:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Validity Not Before: Oct 8 23:43:34 2025 GMT Not After : Jan 12 00:43:34 2028 GMT Subject: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:81:a3:a6:8c:fa:e9:75:0b:45:7c:ee:37: 8c:d6:bd:c0:60:0d:45:8d:2a:b0:aa:2c:7a:42:38: a5:38:5c:c9:b2:9c:07:a3:3a:f8:9d:ba:3f:bd:d5: e3:e8:82:f3:c0:d7:27:e8:cb:74:5b:8f:f7:8e:50: 41:c1:3e:72:ce:b3:00:90:c1:fc:d9:a1:c0:07:8b: 0d:5b:9a:81:01:5b:7f:c8:5c:eb:be:af:12:27:bd: cb:83:3c:1b:af:3a:40:ca:f4:66:dd:82:5c:4f:26: c8:16:b4:ed:7d:f4:ae:cc:21:e8:41:69:b5:85:cd: 44:1a:9b:c7:1d:db:3d:4c:f2:8e:f3:70:48:cf:b5: 27:32:59:d6:60:db:0e:d6:b3:6d:a8:71:15:cc:14: 47:43:b7:ce:8e:9d:60:4a:03:40:91:19:31:b6:4c: b6:db:94:88:cf:c8:18:21:5f:e1:91:50:2c:99:2a: 51:98:c7:63:bf:ee:4b:35:a9:00:c2:33:81:a6:08: e3:23:a1:fb:13:b0:10:40:fc:c8:9d:62:99:99:d1: 05:ff:ba:7c:f3:5c:99:d2:9d:51:73:87:5c:e9:4b: 33:05:2f:b4:13:fd:2b:49:d7:5a:80:05:48:1a:e7: bc:99:61:a5:dd:be:94:28:5d:55:cd:17:78:cf:6f: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl X509v3 Authority Key Identifier: keyid:71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer sbgp-ipAddrBlock: critical IPv4: 23.191.40.0/24 130.12.93.0/24 IPv6: 2602:f7de::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26954 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5b:db:6c:d3:f3:7e:25:ed:b4:57:22:26:72:a1:02:d7:24: d4:af:a1:f7:eb:df:41:37:6b:3d:6d:96:ec:12:63:d3:f0:bb: ae:d2:8c:94:62:8a:12:aa:44:e8:36:30:c7:9e:be:0c:93:19: ad:ec:c4:f8:2b:9f:50:99:dc:73:07:99:de:16:73:31:15:0a: cf:43:34:72:c3:74:8e:02:2e:19:c9:0f:83:c7:a4:33:d1:81: 05:21:66:a2:26:3c:17:71:9a:d6:cd:ca:50:ec:b5:b0:72:d5: 3e:5b:df:c5:5a:8a:34:3a:e9:2c:82:f3:c7:6d:c3:3b:df:ba: 34:e2:a7:af:e1:a3:de:ce:b1:32:d0:a9:08:82:45:de:f3:70: de:ab:be:fd:37:e5:56:f2:32:01:c6:a4:d9:f0:28:a3:0e:0e: 5a:a0:f8:95:81:74:10:df:1d:48:41:ae:a9:3b:cf:82:1a:e2: f1:60:8a:20:f4:68:9e:19:5c:0c:c2:ee:19:b6:30:43:cc:1b: 97:29:bc:c8:1b:3f:25:25:9e:51:75:f3:88:a2:ee:50:72:c6: 02:61:4d:17:41:6c:73:be:79:69:b7:b4:d0:8a:bb:d2:dd:ae: a6:52:d7:8e:29:49:8e:d2:9c:c3:fb:13:e7:f7:bd:a5:f4:61: aa:2a:8d:17 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEt1ZmMmalSsL6YV6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFjZDk5ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3 ODBlMB4XDTI1MTAwODIzNDMzNFoXDTI4MDExMjAwNDMzNFowPTE7MDkGA1UEAxMy MzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3NjdjZjNkMGI5ZmRlNjIz MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgoGjpoz66XULRXzu N4zWvcBgDUWNKrCqLHpCOKU4XMmynAejOviduj+91ePogvPA1yfoy3Rbj/eOUEHB PnLOswCQwfzZocAHiw1bmoEBW3/IXOu+rxInvcuDPBuvOkDK9GbdglxPJsgWtO19 9K7MIehBabWFzUQam8cd2z1M8o7zcEjPtScyWdZg2w7Ws22ocRXMFEdDt86OnWBK A0CRGTG2TLbblIjPyBghX+GRUCyZKlGYx2O/7ks1qQDCM4GmCOMjofsTsBBA/Mid YpmZ0QX/unzzXJnSnVFzh1zpSzMFL7QT/StJ11qABUga57yZYaXdvpQoXVXNF3jP b+xdAgMBAAGjggPyMIID7jAdBgNVHQ4EFgQUP806g56hQX/ZiPPd/QRUGX+q9How ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5 Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5RUExNDE3RkQ5ODhGM0RE RkQwNDU0MTk3RkFBRjQ3QS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2 ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0wOWJhZmFhMzc4MGUvNTFjZDk5 ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3ODBlLmNybDAfBgNVHSMEGDAWgBRx xgiK2Vq/eT704sVx68VrKNJ3IjAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUx Y2Q5OWY3LTJmNDItNGRlYy1iMmM2LTA5YmFmYWEzNzgwZS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvygDBACCDF0wDgQCAAIwCAMGACYC994AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmlKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC9b22zT834l7bRXIiZy oQLXJNSvoffr30E3az1tluwSY9Pwu67SjJRiihKqROg2MMeevgyTGa3sxPgrn1CZ 3HMHmd4WczEVCs9DNHLDdI4CLhnJD4PHpDPRgQUhZqImPBdxmtbNylDstbBy1T5b 38VaijQ66SyC88dtwzvfujTip6/ho97OsTLQqQiCRd7zcN6rvv035VbyMgHGpNnw KKMODlqg+JWBdBDfHUhBrqk7z4Ia4vFgiiD0aJ4ZXAzC7hm2MEPMG5cpvMgbPyUl nlF184ii7lByxgJhTRdBbHO+eWm3tNCKu9LdrqZS144pSY7SnMP7E+f3vaX0Yaoq jRc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:03 2025 by rpki-client