$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer File: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer (raw, json) Hash identifier: aeaiNO9Hy4Pm5mOu96NS6khE35AHLKGLeUz0bnpuaCI= Subject key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7C7FC3C0D44D376E8812AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 12:45:22 +0000 Certificate not after: Fri 14 Jan 2028 13:45:22 +0000 Subordinate resources: AS: 3900 AS: 22194 AS: 23005 AS: 30063 IP: 64.9.128.0/18 IP: 64.79.128.0/19 IP: 66.116.96.0/19 IP: 66.209.64.0/19 IP: 69.194.128.0/20 IP: 74.120.240.0/21 IP: 74.122.224.0/21 IP: 136.179.0.0/16 IP: 155.130.0.0/16 IP: 199.59.108.0/22 IP: 199.180.196.0/22 IP: 199.193.120.0/22 IP: 206.127.0.0/19 IP: 206.222.160.0/19 IP: 207.207.0.0/18 IP: 209.99.0.0/17 IP: 216.115.64.0/19 IP: 216.166.0.0/17 IP: 216.196.96.0/19 IP: 2606:a600::/32 IP: 2607:ff60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:7f:c3:c0:d4:4d:37:6e:88:12:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 11 12:45:22 2025 GMT Not After : Jan 14 13:45:22 2028 GMT Subject: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:45:54:8c:3c:35:03:87:e7:df:2f:d5:a6: 81:43:89:6b:f1:5d:cf:d5:f1:5c:94:d9:73:41:f4: ce:4a:85:c7:b7:bc:73:f2:04:b9:1a:e8:df:ed:8f: 10:03:26:53:51:41:f9:05:c9:49:7c:c8:ad:50:fa: 01:83:e5:28:94:27:63:92:4e:1b:84:18:e9:55:83: 41:c0:50:df:56:73:1d:d0:15:e1:86:8b:67:eb:b3: 5a:e1:b2:04:b0:2b:6f:a6:8f:7d:fe:de:b1:1b:a8: 52:9b:13:ea:85:32:6f:86:13:da:bb:22:ee:bd:69: b5:20:bd:f8:a9:d2:dc:79:17:ff:b0:06:f1:1f:4f: de:ff:e6:27:05:0a:f7:97:39:b2:6c:00:de:ae:ea: 1a:06:62:26:bb:03:7d:a9:7d:33:25:53:b0:0a:75: 2c:9b:f4:32:df:5c:4d:d8:15:ef:bd:90:64:f4:c3: d1:97:a9:93:f3:64:1e:e2:60:89:0e:18:cf:6e:38: be:fb:6d:19:aa:8a:60:75:d0:b9:24:bc:2c:55:9b: 64:21:18:64:d7:00:1e:6c:5a:4f:b1:cc:6c:2d:54: bf:01:08:19:3d:28:c1:5b:9d:c5:86:0b:0b:e9:e2: 9d:c8:93:e0:33:a0:e3:f3:07:75:4b:c2:bb:fc:a1: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.9.128.0/18 64.79.128.0/19 66.116.96.0/19 66.209.64.0/19 69.194.128.0/20 74.120.240.0/21 74.122.224.0/21 136.179.0.0/16 155.130.0.0/16 199.59.108.0/22 199.180.196.0/22 199.193.120.0/22 206.127.0.0/19 206.222.160.0/19 207.207.0.0/18 209.99.0.0/17 216.115.64.0/19 216.166.0.0/17 216.196.96.0/19 IPv6: 2606:a600::/32 2607:ff60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3900 22194 23005 30063 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ec:54:8f:d1:be:ae:1d:7a:c2:f7:45:37:e5:5e:3c:5e:f1: 34:e6:af:da:c7:b7:74:68:e5:1c:17:58:ae:d8:4f:0c:9b:90: fe:86:81:01:6b:e8:e0:79:8a:31:16:63:6b:8b:0d:ad:9c:ee: 45:14:0d:7e:8d:70:d3:e0:fa:0f:38:0a:b2:45:12:f9:b5:ae: 97:0e:ce:ea:6a:11:15:ed:d3:06:b9:0d:2a:d0:8e:bc:13:30: 27:8d:89:83:a2:f4:26:ce:c0:c1:53:73:06:4e:6a:b9:ca:59: 10:fc:27:83:0d:8d:46:f4:70:15:65:db:e5:20:cc:39:ee:fa: 43:27:e3:79:b9:c4:49:11:3a:06:ed:f8:99:1f:c4:5c:b6:82: 84:99:5b:10:ca:e1:40:20:eb:74:47:a5:36:48:63:d4:ba:f6: 3a:fc:01:72:3d:19:1e:0e:ea:5d:cb:d6:f4:90:c9:94:22:cf: 02:ae:de:b5:fe:0e:cc:c1:ee:43:42:73:8f:d4:05:01:f6:04: d8:f3:b5:47:67:70:52:ea:c6:08:43:80:c7:b7:8e:9e:d2:21: 95:01:03:11:b8:4a:47:b9:aa:cb:02:06:2e:b7:fe:56:9f:33: 5c:5b:01:15:65:3f:9a:a4:42:c5:f6:e2:75:6f:96:c6:e8:0b: 40:9e:c1:82 -----BEGIN CERTIFICATE----- MIIHlzCCBn+gAwIBAgIUAQ0Mn0MoWEt8f8PA1E03bogSr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMTEyNDUyMloXDTI4MDExNDEzNDUyMlowLzEtMCsGA1UEAxMk M2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU1FVIw8NQOH598v1aaBQ4lr8V3P1fFclNlz QfTOSoXHt7xz8gS5Gujf7Y8QAyZTUUH5BclJfMitUPoBg+UolCdjkk4bhBjpVYNB wFDfVnMd0BXhhotn67Na4bIEsCtvpo99/t6xG6hSmxPqhTJvhhPauyLuvWm1IL34 qdLceRf/sAbxH0/e/+YnBQr3lzmybADeruoaBmImuwN9qX0zJVOwCnUsm/Qy31xN 2BXvvZBk9MPRl6mT82Qe4mCJDhjPbji++20ZqopgddC5JLwsVZtkIRhk1wAebFpP scxsLVS/AQgZPSjBW53FhgsL6eKdyJPgM6Dj8wd1S8K7/KFc3wIDAQABo4IEqTCC BKUwHQYDVR0OBBYEFD6Yew3OZraGE4oq+yEwgodbdLBJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z YWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNhZTdlY2ZmLWUzYWItNDcyZC1h NGVjLTBmY2QzZmU5NGFhNy8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2Zl OTRhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgaEGCCsGAQUF BwEHAQH/BIGRMIGOMHYEAgABMHADBAZACYADBAVAT4ADBAVCdGADBAVC0UADBARF woADBANKePADBANKeuADAwCIswMDAJuCAwQCxztsAwQCx7TEAwQCx8F4AwQFzn8A AwQFzt6gAwQGz88AAwQH0WMAAwQF2HNAAwQH2KYAAwQF2MRgMBQEAgACMA4DBQAm BqYAAwUAJgf/YDAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIPPAICVrICAlndAgJ1 bzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBB7FSP0b6uHXrC90U35V48XvE05q/ax7d0aOUcF1iu2E8Mm5D+ hoEBa+jgeYoxFmNriw2tnO5FFA1+jXDT4PoPOAqyRRL5ta6XDs7qahEV7dMGuQ0q 0I68EzAnjYmDovQmzsDBU3MGTmq5ylkQ/CeDDY1G9HAVZdvlIMw57vpDJ+N5ucRJ EToG7fiZH8RctoKEmVsQyuFAIOt0R6U2SGPUuvY6/AFyPRkeDupdy9b0kMmUIs8C rt61/g7Mwe5DQnOP1AUB9gTY87VHZ3BS6sYIQ4DHt46e0iGVAQMRuEpHuarLAgYu t/5WnzNcWwEVZT+apELF9uJ1b5bG6AtAnsGC -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:09 2025 by rpki-client