$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0d09238a-af0f-4c0b-b825-fe33df09d692.cer File: 0d09238a-af0f-4c0b-b825-fe33df09d692.cer (raw, json) Hash identifier: 8SlxpMdisQvaeRcpSJCrCg+4cMLnCXjvzq2h4EwK7Ds= Subject key identifier: 94:8D:5B:7F:6D:07:C3:99:8E:10:89:56:D1:F7:E5:BA:D8:25:3B:49 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABEA943DF6F441C0ABD212880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0d09238a-af0f-4c0b-b825-fe33df09d692/0d09238a-af0f-4c0b-b825-fe33df09d692.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0d09238a-af0f-4c0b-b825-fe33df09d692/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 12:45:24 +0000 Certificate not after: Sun 07 Nov 2027 13:45:24 +0000 Subordinate resources: AS: 396295 IP: 23.169.152.0/24 IP: 2607:70c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:a9:43:df:6f:44:1c:0a:bd:21:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 4 12:45:24 2025 GMT Not After : Nov 7 13:45:24 2027 GMT Subject: CN=0d09238a-af0f-4c0b-b825-fe33df09d692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:34:16:5f:b2:cc:f2:4e:c3:51:23:a7:aa: 18:4f:9d:2a:8d:09:28:39:db:b7:8e:bb:3c:db:22: 19:37:41:69:a5:c6:29:98:48:ae:09:55:27:cb:86: cb:fa:b9:8c:8b:c3:65:c6:d1:10:70:84:6d:ca:b0: cc:32:56:8b:bb:6b:cb:91:dc:67:64:21:47:43:22: 3b:3e:17:4a:74:15:61:55:0e:8b:c8:40:f3:06:73: c5:d5:3f:49:44:fb:cf:3c:04:d0:67:d4:19:9b:98: ac:8a:cb:97:c7:10:e4:a0:29:64:e3:47:9f:f9:22: 33:13:dc:4b:fc:36:43:d1:23:67:3a:15:4c:cc:b3: d8:4e:d0:f6:7c:bf:c2:9b:bd:f1:56:d8:34:d6:a0: c1:97:2a:2b:00:05:4c:a4:0a:a8:fb:c7:02:83:3d: 25:6c:05:7c:b7:69:de:15:5c:11:11:c0:6d:ed:d2: e5:13:59:d6:b8:7f:62:70:43:d5:e3:c4:1f:51:3f: 35:97:d6:af:ba:f5:ab:09:72:70:26:12:f5:e7:ef: 19:ce:2d:58:68:3a:2a:df:59:f2:fb:07:58:68:77: 9a:bc:b2:a5:2b:ec:5d:4c:ec:ab:1c:b1:a5:b7:e6: dd:6a:7b:3a:9d:06:71:84:98:31:25:d9:c1:f4:72: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8D:5B:7F:6D:07:C3:99:8E:10:89:56:D1:F7:E5:BA:D8:25:3B:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0d09238a-af0f-4c0b-b825-fe33df09d692/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0d09238a-af0f-4c0b-b825-fe33df09d692/0d09238a-af0f-4c0b-b825-fe33df09d692.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.169.152.0/24 IPv6: 2607:70c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396295 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e0:17:ff:35:b8:85:eb:df:1d:cb:b9:92:94:72:77:d8:82: 4c:52:62:2e:7c:5e:dc:b5:97:f4:c2:4f:fe:ab:69:33:47:c6: 9e:c6:46:da:11:37:c0:ee:2b:9f:da:7c:7c:21:ba:ce:f6:a7: 78:76:49:0e:01:a9:a1:86:36:d3:36:25:a0:f9:1b:45:bd:71: 17:95:d4:27:b6:72:d9:0f:23:5a:1c:d0:0b:b3:b8:44:1a:b2: cb:4d:fc:c6:2d:b3:07:c4:b7:a6:56:f4:a3:04:c8:64:15:5f: 3c:15:11:5d:a6:03:5d:e0:77:2a:91:32:1e:ea:b9:cd:25:3c: dd:70:df:72:c5:39:50:c1:bd:a4:ec:f4:1e:90:7c:c1:7b:68: ae:0f:0d:6a:2a:db:69:71:a5:ce:4a:6e:47:0b:6b:80:68:e1: 6e:a1:e4:c6:5f:e7:e3:8b:a4:98:0f:68:c2:90:9e:1a:f2:7a: a7:30:0c:90:3c:48:f7:ee:77:99:7c:67:af:13:5c:9e:71:d1: 24:d5:47:3d:93:0b:d3:28:02:54:5e:c4:67:bd:b7:85:c8:93: d5:c8:d1:0e:13:42:7d:9e:65:1c:72:4c:89:93:e6:0e:52:fa: db:8b:77:12:cc:a1:b4:c3:a8:bb:d8:17:89:e3:e1:49:3c:3f: 55:f1:89:83 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEq+qUPfb0QcCr0hKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNDEyNDUyNFoXDTI3MTEwNzEzNDUyNFowLzEtMCsGA1UEAxMk MGQwOTIzOGEtYWYwZi00YzBiLWI4MjUtZmUzM2RmMDlkNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqw0Fl+yzPJOw1Ejp6oYT50qjQkoOdu3jrs8 2yIZN0FppcYpmEiuCVUny4bL+rmMi8NlxtEQcIRtyrDMMlaLu2vLkdxnZCFHQyI7 PhdKdBVhVQ6LyEDzBnPF1T9JRPvPPATQZ9QZm5isisuXxxDkoClk40ef+SIzE9xL /DZD0SNnOhVMzLPYTtD2fL/Cm73xVtg01qDBlyorAAVMpAqo+8cCgz0lbAV8t2ne FVwREcBt7dLlE1nWuH9icEPV48QfUT81l9avuvWrCXJwJhL15+8Zzi1YaDoq31ny +wdYaHeavLKlK+xdTOyrHLGlt+bdans6nQZxhJgxJdnB9HKYbwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJSNW39tB8OZjhCJVtH35brYJTtJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w ZDA5MjM4YS1hZjBmLTRjMGItYjgyNS1mZTMzZGYwOWQ2OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzBkMDkyMzhhLWFmMGYtNGMwYi1i ODI1LWZlMzNkZjA5ZDY5Mi8wZDA5MjM4YS1hZjBmLTRjMGItYjgyNS1mZTMzZGYw OWQ2OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqZgwDQQCAAIwBwMFACYHcMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgwHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEngF/81uIXr3x3LuZKUcnfYgkxS Yi58Xty1l/TCT/6raTNHxp7GRtoRN8DuK5/afHwhus72p3h2SQ4BqaGGNtM2JaD5 G0W9cReV1Ce2ctkPI1oc0AuzuEQasstN/MYtswfEt6ZW9KMEyGQVXzwVEV2mA13g dyqRMh7quc0lPN1w33LFOVDBvaTs9B6QfMF7aK4PDWoq22lxpc5KbkcLa4Bo4W6h 5MZf5+OLpJgPaMKQnhryeqcwDJA8SPfud5l8Z68TXJ5x0STVRz2TC9MoAlRexGe9 t4XIk9XI0Q4TQn2eZRxyTImT5g5S+tuLdxLMobTDqLvYF4nj4Uk8P1XxiYM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:50 2025 by rpki-client