$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer File: a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer (raw, json) Hash identifier: zY/vqBzVCD4+9Q/v8RvQUbpZUM+uxYNDDjVjJaHXMzo= Subject key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7A828726006D070C22817940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 19:39:19 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 23.177.72.0/24 IP: 142.248.68.0/22 IP: 2602:f90c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:82:87:26:00:6d:07:0c:22:81:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 10 19:39:19 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:ca:ae:2e:a2:a3:94:c9:3f:4a:22:3d:9d: c3:b3:f3:e0:8b:3d:b4:b1:60:c9:90:92:44:7f:67: fa:22:7c:fe:12:61:9b:65:ea:f0:7a:bb:f0:ba:38: a4:bc:35:6f:9d:56:0c:cb:ae:11:b4:20:a4:b5:a9: 69:54:ae:4e:1b:02:44:3f:15:4b:51:ff:8b:a8:bf: 0b:33:3a:c4:84:b2:4b:c7:66:92:24:c0:2a:dd:c5: 10:81:7b:f5:80:96:9a:cf:a5:2b:6e:b9:2b:30:78: 7b:f3:26:ae:1f:41:36:80:36:a5:3b:45:8e:f1:5d: cc:ce:cc:d2:47:58:25:ee:bd:6e:43:2e:62:77:54: 81:7d:43:f4:1e:33:a7:73:a6:b7:31:64:6a:0f:13: ce:99:8d:d5:a4:3e:8e:45:71:a9:bc:2d:d2:7d:c2: bb:cb:73:06:20:e6:c3:7e:e6:1b:21:38:30:28:51: 65:b6:86:3e:5d:f5:ab:18:5e:f1:83:cd:80:fa:ee: d6:c6:d6:42:88:dc:49:67:61:46:f6:c2:c6:05:7c: ce:c9:73:51:0c:8a:55:15:70:8a:87:34:c7:f2:5a: 4b:9b:fa:4c:90:80:28:b1:bc:05:2f:08:c3:b7:f1: dd:66:9f:1c:be:61:4d:fd:72:fd:ff:e8:bb:9a:88: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.72.0/24 142.248.68.0/22 IPv6: 2602:f90c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:d1:79:07:3c:bf:db:ed:fb:79:bc:06:8d:16:0c:a5:3f: 3a:d9:12:04:37:c6:1c:b9:7f:7d:40:ea:3e:d4:79:72:c0:bc: 90:7c:63:f9:99:28:f0:4f:e0:3e:7c:a4:0b:c6:e1:54:92:de: ea:ba:44:03:0c:39:14:c7:d9:40:e0:38:fd:30:db:10:b3:93: 9c:7a:60:ca:bf:54:36:41:e0:a2:0b:40:3f:15:f7:b7:ae:da: 1f:c6:bf:33:79:be:23:89:4f:8f:2c:3e:59:04:f7:18:bc:1c: 36:b8:2c:c1:e2:3d:29:99:1b:9f:a1:80:92:80:fb:b6:08:0f: 14:9b:07:77:01:93:60:b5:cd:2d:73:b7:e5:5c:3d:3f:d3:d3: ae:21:69:fe:b9:8b:22:6e:97:bf:d3:39:a9:a5:7c:dc:90:18: 7d:a4:ce:4c:18:a8:9f:c7:a4:9d:61:ad:73:d2:5b:7c:7a:1b: 11:06:ed:50:61:e6:33:29:7d:97:09:ba:bd:56:c9:a8:97:82: 14:41:21:3b:55:40:3a:07:3d:ce:04:72:3a:66:e8:e7:87:fd: 44:5a:cf:bd:12:d3:94:8b:66:c5:03:59:32:1c:ea:f8:40:3f: c9:58:a2:b5:e1:ec:fb:c0:85:f9:b3:89:4c:e9:78:88:17:50: 3e:ce:b2:96 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt6gocmAG0HDCKBeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMDE5MzkxOVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk YTllNWUyZmUtZGIzMy00MDBhLWIxY2EtODA1ZGU1MmVhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiijKri6io5TJP0oiPZ3Ds/Pgiz20sWDJkJJE f2f6Inz+EmGbZerwervwujikvDVvnVYMy64RtCCktalpVK5OGwJEPxVLUf+LqL8L MzrEhLJLx2aSJMAq3cUQgXv1gJaaz6UrbrkrMHh78yauH0E2gDalO0WO8V3MzszS R1gl7r1uQy5id1SBfUP0HjOnc6a3MWRqDxPOmY3VpD6ORXGpvC3SfcK7y3MGIObD fuYbITgwKFFltoY+XfWrGF7xg82A+u7WxtZCiNxJZ2FG9sLGBXzOyXNRDIpVFXCK hzTH8lpLm/pMkIAosbwFLwjDt/HdZp8cvmFN/XL9/+i7moiCrQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFADSiKWRIlBeP/m012VrB26KBsl/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUyZWFiNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZTVlMmZlLWRiMzMtNDAwYS1i MWNhLTgwNWRlNTJlYWI2YS9hOWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUy ZWFiNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsUgDBAKO+EQwDgQCAAIwCAMGACYC+QwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACal0XkHPL/b7ft5vAaNFgylPzrZEgQ3xhy5f31A6j7UeXLAvJB8Y/mZ KPBP4D58pAvG4VSS3uq6RAMMORTH2UDgOP0w2xCzk5x6YMq/VDZB4KILQD8V97eu 2h/GvzN5viOJT48sPlkE9xi8HDa4LMHiPSmZG5+hgJKA+7YIDxSbB3cBk2C1zS1z t+VcPT/T064haf65iyJul7/TOamlfNyQGH2kzkwYqJ/HpJ1hrXPSW3x6GxEG7VBh 5jMpfZcJur1WyaiXghRBITtVQDoHPc4Ecjpm6OeH/URaz70S05SLZsUDWTIc6vhA P8lYorXh7PvAhfmziUzpeIgXUD7OspY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:49 2025 by rpki-client