$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer File: a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json) Hash identifier: uNfTbSPd6TbLO30pYPEOLOmmubTFpxVLp9//VrXj48A= Subject key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B8277643148506157D2B84D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 16:03:21 +0000 Certificate not after: Mon 10 May 2027 12:45:33 +0000 Subordinate resources: AS: 27010 IP: 23.165.184.0/24 IP: 208.68.180.0/22 IP: 2602:f9f6::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:77:64:31:48:50:61:57:d2:b8:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 13 16:03:21 2025 GMT Not After : May 10 12:45:33 2027 GMT Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce: e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b: c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82: 28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1: 3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81: 48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a: eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59: c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef: 34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03: c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19: de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0: 72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2: 32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1: 19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13: 9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14: a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32: da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.184.0/24 208.68.180.0/22 IPv6: 2602:f9f6::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d2:55:18:7e:6a:e4:29:ff:61:0c:21:cd:ee:4c:73:81:cc: 16:c0:6c:83:b2:5e:7d:e2:6f:c9:a5:42:3a:ee:32:0b:a4:1d: 82:c5:c1:c6:3d:7a:bd:d7:ad:59:eb:07:0d:d7:c4:6a:d2:be: 89:73:1a:6e:3e:8a:6c:4c:24:f0:b7:01:5d:bf:f4:30:2b:42: 69:74:5b:40:ff:e7:04:94:1f:a7:8f:a0:93:5e:66:e5:08:cb: 86:dd:04:d3:c0:c3:70:22:2c:5a:fc:f7:fe:9b:06:d9:60:f8: 10:82:28:e5:e4:26:0a:47:12:1e:29:75:fa:d3:64:9f:89:53: 9b:cd:e2:96:85:05:d0:f9:5c:95:c5:07:c9:b8:75:c2:d6:5f: d4:54:c7:e3:c6:42:9e:8a:98:70:f2:5c:d9:7d:18:1c:26:3d: 3d:43:c8:96:8c:dd:12:b5:3d:f7:3f:22:ae:1e:15:a5:f3:f3: e6:1a:ee:ef:c2:1a:d5:d3:70:53:c6:f3:4b:61:af:a3:45:f3: 7e:db:ee:cb:8d:40:6f:60:8c:19:23:77:2c:60:f6:79:d0:41: 69:a2:c5:f3:ac:52:7c:b1:e9:61:47:1f:7a:32:8f:a1:b6:de: 62:40:81:8e:16:84:e5:d7:7c:c6:d2:44:e4:49:48:b0:a2:29: a3:13:12:2c -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEuCd2QxSFBhV9K4TUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAxMzE2MDMyMVoXDTI3MDUxMDEyNDUzM1owLzEtMCsGA1UEAxMk YTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2EwNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdn+kfiGatu7QaCEM87jDB433BDRbHV0J+Eq BivEIx1kJsGTAxy/zGODg4Io9XhPl6MB+BdxG67SCcE+B/mMozKuq9alDZBbroFI tDdRlcPBLtJO3DEhPHrrU0UaixK5ElEX43N5kVnD0wcJp0TEpJDDtYpbgO809sjy EwpXS4Mgjouk+QPJvYCrrohVl+o09okVHhneGv0TQA/v29gJ9RmzsvByK/ArG7WJ vuAONlGL8aIysTSDEUsyE5LVJmrgHrEZvSbAvHjKetY/HZHLKhOaAbK/HRDeUxWU i3K3shSls6O+o2Jx+XbiDnHg5zLar9ReFPXzXfMbLr/McNhBlQIDAQABo4IELzCC BCswHQYDVR0OBBYEFJ8D5xpfQoLJ3uwLoR+QSPRXfaGZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EyMzQ2NDlkLWFiNDktNDU4Yi1h NWUzLTc3NjVmZTdhMDY2Yy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3 YTA2NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpbgDBALQRLQwDQQCAAIwBwMFACYC+fYwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICaYIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ9JVGH5q5Cn/YQwhze5M c4HMFsBsg7JefeJvyaVCOu4yC6QdgsXBxj16vdetWesHDdfEatK+iXMabj6KbEwk 8LcBXb/0MCtCaXRbQP/nBJQfp4+gk15m5QjLht0E08DDcCIsWvz3/psG2WD4EIIo 5eQmCkcSHil1+tNkn4lTm83iloUF0PlclcUHybh1wtZf1FTH48ZCnoqYcPJc2X0Y HCY9PUPIlozdErU99z8irh4VpfPz5hru78Ia1dNwU8bzS2Gvo0Xzftvuy41Ab2CM GSN3LGD2edBBaaLF86xSfLHpYUcfejKPobbeYkCBjhaE5dd8xtJE5ElIsKIpoxMS LA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:22 2025 by rpki-client