$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer File: cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer (raw, json) Hash identifier: ctc0v9n736ZhkgLZj+bWWLH8PDcodzs6LwfjDhyVaJ8= Subject key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7A0E63F0C7186C942E642180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 15:45:19 +0000 Certificate not after: Thu 22 Oct 2026 23:40:26 +0000 Subordinate resources: AS: 401010 IP: 23.148.136.0/24 IP: 130.51.77.0/24 IP: 142.248.204.0/23 IP: 2602:face::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0e:63:f0:c7:18:6c:94:2e:64:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 10 15:45:19 2025 GMT Not After : Oct 22 23:40:26 2026 GMT Subject: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:c8:9a:d5:8f:a3:b3:1b:f7:0c:da:89:7c: 29:3d:d8:87:55:92:53:64:e8:42:bd:1b:4e:6a:c0: c2:1e:33:4f:2c:a1:63:01:94:66:bb:86:c0:f4:85: a7:ec:84:49:dc:85:63:b1:95:04:aa:28:e1:a3:26: bf:d9:00:97:86:4f:20:15:44:e0:89:08:1c:0d:f3: 08:09:ec:08:5a:81:2b:9e:1f:1d:19:44:5b:06:fd: bf:32:08:00:ed:a6:23:34:c2:1f:1d:3a:3e:93:af: 63:a5:53:2a:03:1d:fb:00:49:d3:b8:df:cd:84:bf: 64:23:a2:84:ab:9f:e5:d3:ac:5c:d5:11:f8:89:20: ee:98:d4:2a:05:77:36:e5:27:31:cf:b0:dd:95:35: 16:42:07:c8:0d:15:8e:9f:19:10:20:3d:6e:e2:58: 25:03:c5:28:7b:ac:20:81:2f:4f:4f:7a:92:e6:4d: 1d:36:6e:41:db:d1:eb:95:2f:37:63:84:3b:b7:cc: 38:72:ee:af:19:b4:65:98:79:d4:4b:56:3d:fd:03: db:00:a7:46:d7:37:5c:de:dd:37:2b:7e:67:73:4e: e7:91:cf:39:65:4e:35:2c:7d:ca:a6:3d:41:5c:a2: 17:79:8f:78:7a:fd:ed:4e:9a:54:b0:7e:06:de:e8: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 142.248.204.0/23 IPv6: 2602:face::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f3:cd:91:d9:a1:bc:8e:19:61:19:ef:03:6a:4d:43:ca:20: 2d:82:42:ed:49:29:29:7b:52:2e:c4:77:53:35:cd:fc:b0:b4: fc:41:31:ec:e3:da:2f:65:00:1a:ab:5c:e8:cc:dd:7e:53:be: ea:a8:fb:71:cc:7e:51:bc:0b:98:65:ef:4a:80:99:26:ab:03: 57:d2:27:cf:bb:f1:28:77:d3:db:e2:fe:65:a0:f9:cf:36:19: 59:ab:0e:01:73:c8:17:49:b2:ec:46:7a:a7:a0:ce:ca:b0:80: 47:02:bf:e1:9b:37:53:e4:f2:7d:da:8b:dd:2c:fe:53:5f:da: 32:55:92:32:be:d5:05:ac:18:1a:26:d3:1b:b8:83:b9:f5:55: f8:af:9c:26:8d:75:cc:39:02:ef:0d:a5:e1:51:10:05:9e:76: f9:5c:7e:05:34:63:d1:2f:ad:05:88:ea:d2:30:b6:cb:0e:c6: d9:b2:dc:75:a8:1e:13:3b:f2:f0:c3:9b:a2:06:9b:5e:fa:48: 04:a7:68:c2:59:d9:b2:c8:f9:b3:e5:f8:dc:09:cc:f0:8c:b4: 50:be:ca:1b:ab:e8:32:19:8c:d5:2c:10:f6:cc:81:ff:57:2f: d1:16:56:7f:b0:e5:1e:bc:5f:62:0c:1e:14:4f:29:6e:78:9e: b5:3c:02:fc -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEt6DmPwxxhslC5kIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMDE1NDUxOVoXDTI2MTAyMjIzNDAyNlowLzEtMCsGA1UEAxMk Y2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEzMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjImtWPo7Mb9wzaiXwpPdiHVZJTZOhCvRtO asDCHjNPLKFjAZRmu4bA9IWn7IRJ3IVjsZUEqijhoya/2QCXhk8gFUTgiQgcDfMI CewIWoErnh8dGURbBv2/MggA7aYjNMIfHTo+k69jpVMqAx37AEnTuN/NhL9kI6KE q5/l06xc1RH4iSDumNQqBXc25Scxz7DdlTUWQgfIDRWOnxkQID1u4lglA8Uoe6wg gS9PT3qS5k0dNm5B29HrlS83Y4Q7t8w4cu6vGbRlmHnUS1Y9/QPbAKdG1zdc3t03 K35nc07nkc85ZU41LH3Kpj1BXKIXeY94ev3tTppUsH4G3uiEHQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKGady/9cOgHZOLjHKRBJLZCUQXRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j YjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NiNWIxNGRjLTY5ZWUtNGI1OC1i MjdkLTc4ZmU1MWIxMzM1Zi9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFi MTMzNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXlIgDBACCM00DBAGO+MwwDgQCAAIwCAMGBCYC +s4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYecjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZ882R2aG8 jhlhGe8Dak1DyiAtgkLtSSkpe1IuxHdTNc38sLT8QTHs49ovZQAaq1zozN1+U77q qPtxzH5RvAuYZe9KgJkmqwNX0ifPu/Eod9Pb4v5loPnPNhlZqw4Bc8gXSbLsRnqn oM7KsIBHAr/hmzdT5PJ92ovdLP5TX9oyVZIyvtUFrBgaJtMbuIO59VX4r5wmjXXM OQLvDaXhURAFnnb5XH4FNGPRL60FiOrSMLbLDsbZstx1qB4TO/Lww5uiBpte+kgE p2jCWdmyyPmz5fjcCczwjLRQvsobq+gyGYzVLBD2zIH/Vy/RFlZ/sOUevF9iDB4U TylueJ61PAL8 -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:38 2025 by rpki-client