$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer File: c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer (raw, json) Hash identifier: rBG2CBmUFcf/gg9PwCFxXIGAXSfxRv9RNMQSx5dE28A= Subject key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B716E4FD6928E8CFD4D3F9340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 13:36:18 +0000 Certificate not after: Sun 18 Apr 2027 12:45:34 +0000 Subordinate resources: AS: 11925 AS: 401057 IP: 23.163.200.0/24 IP: 131.143.176.0/22 IP: 2607:7140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:6e:4f:d6:92:8e:8c:fd:4d:3f:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 7 13:36:18 2025 GMT Not After : Apr 18 12:45:34 2027 GMT Subject: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:6f:0d:2a:5e:6c:8f:8a:52:7b:b6:ad:5a: 6b:42:25:ee:0c:b6:8d:bf:9b:83:12:51:a1:be:e4: 6a:8c:2a:0d:44:75:05:ec:a3:65:6e:fb:c7:79:75: a3:f9:c4:c5:78:69:7c:80:2a:c2:47:6b:e4:17:a2: 30:0f:62:07:df:42:d0:b5:a0:72:2c:7a:b2:85:43: 61:0a:ef:10:96:50:1b:b3:19:be:98:a1:79:50:36: 21:90:fd:ed:39:f2:b3:59:b8:57:df:c1:73:c7:42: 4e:1c:96:7e:90:2d:bd:20:50:b9:c8:d7:55:de:0a: 55:ee:38:e9:71:b1:32:1a:97:50:ce:dd:49:31:de: d7:d1:03:b2:53:e8:d3:62:dc:05:d1:ba:64:96:b5: 5e:08:1a:65:92:95:63:56:a3:33:35:99:8d:2f:6e: 30:0f:d5:05:10:04:8f:fd:59:d7:1b:a8:30:15:5a: 03:ef:b6:28:0b:78:fd:df:e3:e0:c5:05:4a:6e:a2: 41:cb:87:b7:5f:0b:a4:45:09:76:34:60:72:22:d9: 23:28:f2:91:a6:42:d0:98:05:93:46:09:4f:e0:98: 4d:86:6f:05:38:2d:ab:78:e4:8e:f1:e9:c7:b0:a4: 8c:e1:3b:45:e8:1d:b3:89:f8:3e:3b:f2:0d:9d:86: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.163.200.0/24 131.143.176.0/22 IPv6: 2607:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11925 401057 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f1:a1:57:15:1b:69:13:96:dc:dc:c2:dc:94:40:34:d4:c4: 71:65:5b:2e:7e:2b:02:40:4e:ab:d9:54:b6:55:cd:31:76:17: 9e:81:8a:41:0d:73:c0:56:65:db:6b:a4:ff:01:5a:e3:d4:62: 20:e5:75:2a:b1:35:51:6d:04:e0:4b:e9:4f:35:b6:fa:ea:37: c0:00:0f:f8:d1:ff:67:21:2b:9a:e9:91:23:c0:ab:02:99:73: 15:67:fd:e1:9d:c6:85:2c:7a:33:ae:d6:fd:72:9d:14:0d:d8: 5d:08:e3:be:b7:07:16:27:31:1f:46:98:b1:f9:b8:a4:60:37: 70:7c:e4:b8:80:9c:ad:e0:9a:0a:94:24:ae:0e:b3:7b:9d:78: 2a:8d:58:7d:04:6f:68:c3:0f:5b:3c:9e:a9:1b:69:0d:c7:b0: 11:88:f6:dc:4f:ef:19:4a:68:8f:ff:01:3a:c6:88:60:39:01: 20:8d:12:5e:78:11:8d:c2:d7:59:37:ca:47:2c:00:95:7d:d3: 5d:f8:c5:2d:3d:8b:52:72:df:47:04:87:98:f1:52:23:16:dd: 97:f0:77:2f:33:fe:ab:f5:b4:fa:7d:31:62:91:7d:74:6c:67: df:60:0f:bd:86:ed:8f:08:df:c7:7e:27:90:31:59:9f:1d:9d: 02:6e:a3:ed -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEtxbk/Wko6M/U0/k0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAwNzEzMzYxOFoXDTI3MDQxODEyNDUzNFowLzEtMCsGA1UEAxMk YzlmMjVjZTMtMDFmNC00ZGZmLWJmMzgtMDU5YWY1YjY0ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79vDSpebI+KUnu2rVprQiXuDLaNv5uDElGh vuRqjCoNRHUF7KNlbvvHeXWj+cTFeGl8gCrCR2vkF6IwD2IH30LQtaByLHqyhUNh Cu8QllAbsxm+mKF5UDYhkP3tOfKzWbhX38Fzx0JOHJZ+kC29IFC5yNdV3gpV7jjp cbEyGpdQzt1JMd7X0QOyU+jTYtwF0bpklrVeCBplkpVjVqMzNZmNL24wD9UFEASP /VnXG6gwFVoD77YoC3j93+PgxQVKbqJBy4e3XwukRQl2NGByItkjKPKRpkLQmAWT RglP4JhNhm8FOC2reOSO8enHsKSM4TtF6B2zifg+O/INnYa3twIDAQABo4IENDCC BDAwHQYDVR0OBBYEFCJazC1Xlv86zrxyayQP2dsjmtIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjViNjRkM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5ZjI1Y2UzLTAxZjQtNGRmZi1i ZjM4LTA1OWFmNWI2NGQzYi9jOWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjVi NjRkM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXo8gDBAKDj7AwDQQCAAIwBwMFACYHcUAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICLpUCAwYeoTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU8aFXFRtpE5bc 3MLclEA01MRxZVsufisCQE6r2VS2Vc0xdheegYpBDXPAVmXba6T/AVrj1GIg5XUq sTVRbQTgS+lPNbb66jfAAA/40f9nISua6ZEjwKsCmXMVZ/3hncaFLHozrtb9cp0U DdhdCOO+twcWJzEfRpix+bikYDdwfOS4gJyt4JoKlCSuDrN7nXgqjVh9BG9oww9b PJ6pG2kNx7ARiPbcT+8ZSmiP/wE6xohgOQEgjRJeeBGNwtdZN8pHLACVfdNd+MUt PYtSct9HBIeY8VIjFt2X8HcvM/6r9bT6fTFikX10bGffYA+9hu2PCN/HfieQMVmf HZ0CbqPt -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:24 2025 by rpki-client