$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299.cer File: 3901fcdf-1cb4-4386-9219-5c784ac6c299.cer (raw, json) Hash identifier: EbOGWvhDb7ONy0otrHviRgaT/aBUhIM+Ovqb2FNnOVU= Subject key identifier: E4:27:69:72:1D:E1:2B:19:FE:F8:9F:51:F7:8A:09:08:65:CC:B3:79 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B84DFD39D49393D67C4971300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/3901fcdf-1cb4-4386-9219-5c784ac6c299.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 12:45:23 +0000 Certificate not after: Mon 17 Jan 2028 13:45:23 +0000 Subordinate resources: AS: 393435 IP: 23.184.120.0/24 IP: 130.12.204.0/23 IP: 2602:f87a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:df:d3:9d:49:39:3d:67:c4:97:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 14 12:45:23 2025 GMT Not After : Jan 17 13:45:23 2028 GMT Subject: CN=3901fcdf-1cb4-4386-9219-5c784ac6c299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:07:54:db:8e:22:24:e9:df:c8:69:cd:b4: e6:54:01:b3:cc:55:e0:ab:d9:92:ff:44:9a:39:4c: bf:8e:39:99:27:2d:84:1a:5f:30:a8:20:fb:2f:d8: d9:dc:d6:16:8d:fe:3a:85:ff:a2:e2:f9:ed:1c:10: c5:f8:1d:c6:36:16:b9:42:e9:0c:11:6e:9a:4c:54: a2:84:21:a5:2a:e1:31:24:13:22:c6:a8:d1:b2:75: 89:56:96:7d:7d:51:38:41:a1:b4:5c:3a:57:1d:37: b8:c2:f7:ba:ef:cc:c4:c0:79:51:43:25:d2:34:a4: 41:89:12:26:e3:6c:ce:58:e0:52:b6:4e:de:76:5e: fc:b4:3d:a9:1a:be:dc:d8:14:ff:ae:0b:aa:ce:9a: 45:1c:d3:48:fc:1b:c8:f5:f9:0c:78:a3:35:c1:0d: 28:d1:21:0c:a0:4b:ce:90:15:f0:6e:1c:16:42:74: 98:0a:33:ba:25:ad:9e:63:a7:44:fe:66:50:4d:e3: e4:17:0d:c6:f5:4e:90:e7:8b:da:40:20:15:ae:9a: 90:e9:2c:16:5c:6f:b2:79:a9:cd:51:99:48:42:e1: 7d:c3:d2:26:c0:cf:f0:f5:83:10:09:7c:d2:d3:ec: 34:6d:2c:3c:92:15:42:1a:c1:8d:9f:4b:b4:d1:b0: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:27:69:72:1D:E1:2B:19:FE:F8:9F:51:F7:8A:09:08:65:CC:B3:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/3901fcdf-1cb4-4386-9219-5c784ac6c299.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.184.120.0/24 130.12.204.0/23 IPv6: 2602:f87a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393435 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:44:fb:d5:ae:39:fb:ea:32:bf:b1:bc:34:d7:98:9b:41:d5: a6:64:be:ff:bd:1e:84:a8:32:c3:5f:a4:3a:3b:ed:0d:c0:07: b1:08:eb:7c:af:f9:57:2a:3d:d3:1f:0a:ae:8c:75:9e:72:07: c9:49:8c:e1:61:ec:38:a9:ec:5f:20:3f:a6:b0:96:f1:0e:e7: 04:72:bc:89:4a:c2:c4:7d:74:55:0a:64:7b:5f:b7:4d:ab:87: 50:68:22:6b:1f:a5:a1:e9:44:ce:34:80:b8:fa:6b:7d:b3:a9: 30:20:24:c8:7a:53:63:23:70:9f:fc:57:08:fe:b5:90:0f:22: 10:3f:7c:70:6d:be:7c:1f:52:08:63:1a:4a:fe:b7:99:0a:be: 95:2e:49:f7:cd:22:68:9d:9e:25:76:20:aa:f4:85:0d:82:ab: bf:6d:9a:4a:40:47:d5:37:0b:06:11:d4:a6:42:e6:0f:7a:f8: 3e:36:70:23:30:97:b0:3e:9d:ea:18:2f:df:c0:97:9c:04:bf: 60:63:01:80:ea:a3:c4:d7:ce:6a:c7:6b:af:62:d5:27:a4:77: f7:45:a8:09:4a:7f:7c:a2:f9:28:38:79:d6:b7:6f:89:72:c0: b4:6f:fe:86:19:1a:fa:8c:8e:b0:03:32:f6:ba:32:06:3e:aa: fb:49:54:28 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEuE39OdSTk9Z8SXEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNDEyNDUyM1oXDTI4MDExNzEzNDUyM1owLzEtMCsGA1UEAxMk MzkwMWZjZGYtMWNiNC00Mzg2LTkyMTktNWM3ODRhYzZjMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6kHVNuOIiTp38hpzbTmVAGzzFXgq9mS/0Sa OUy/jjmZJy2EGl8wqCD7L9jZ3NYWjf46hf+i4vntHBDF+B3GNha5QukMEW6aTFSi hCGlKuExJBMixqjRsnWJVpZ9fVE4QaG0XDpXHTe4wve678zEwHlRQyXSNKRBiRIm 42zOWOBStk7edl78tD2pGr7c2BT/rguqzppFHNNI/BvI9fkMeKM1wQ0o0SEMoEvO kBXwbhwWQnSYCjO6Ja2eY6dE/mZQTePkFw3G9U6Q54vaQCAVrpqQ6SwWXG+yeanN UZlIQuF9w9ImwM/w9YMQCXzS0+w0bSw8khVCGsGNn0u00bCFmwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOQnaXId4SsZ/vifUfeKCQhlzLN5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z OTAxZmNkZi0xY2I0LTQzODYtOTIxOS01Yzc4NGFjNmMyOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzM5MDFmY2RmLTFjYjQtNDM4Ni05 MjE5LTVjNzg0YWM2YzI5OS8zOTAxZmNkZi0xY2I0LTQzODYtOTIxOS01Yzc4NGFj NmMyOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXuHgDBAGCDMwwDgQCAAIwCAMGBCYC+HoAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYA2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmRPvVrjn76jK/sbw0 15ibQdWmZL7/vR6EqDLDX6Q6O+0NwAexCOt8r/lXKj3THwqujHWecgfJSYzhYew4 qexfID+msJbxDucEcryJSsLEfXRVCmR7X7dNq4dQaCJrH6Wh6UTONIC4+mt9s6kw ICTIelNjI3Cf/FcI/rWQDyIQP3xwbb58H1IIYxpK/reZCr6VLkn3zSJonZ4ldiCq 9IUNgqu/bZpKQEfVNwsGEdSmQuYPevg+NnAjMJewPp3qGC/fwJecBL9gYwGA6qPE 185qx2uvYtUnpHf3RagJSn98ovkoOHnWt2+JcsC0b/6GGRr6jI6wAzL2ujIGPqr7 SVQo -----END CERTIFICATE-----Generated at Sun Oct 19 20:26:28 2025 by rpki-client