$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer File: 914db202-4885-454b-97f8-223de4bf2ca8.cer (raw, json) Hash identifier: 6ktbiexJcxLCwSMbaWITMwrT5WnMhUBV7g+Eet52h1o= Subject key identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B771D0193361D0CB998586900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 14:27:20 +0000 Certificate not after: Thu 15 Jul 2027 14:59:49 +0000 Subordinate resources: AS: 401655 IP: 23.137.116.0/24 IP: 142.249.204.0/22 IP: 2602:f688::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:1d:01:93:36:1d:0c:b9:98:58:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 9 14:27:20 2025 GMT Not After : Jul 15 14:59:49 2027 GMT Subject: CN=914db202-4885-454b-97f8-223de4bf2ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:9f:06:d5:11:fc:eb:00:65:a0:cd:41:a5: 21:90:74:fa:31:c9:b3:48:5c:f1:00:af:ac:36:b0: 6f:2f:74:67:12:50:42:72:9e:30:a8:21:48:37:1f: ae:6c:4a:22:c7:66:bf:b6:db:31:18:3e:b7:b2:5f: 5d:8b:30:c8:69:2f:05:9c:46:d7:de:4e:31:2a:38: e1:ed:cc:a6:b4:d4:d6:a5:56:89:94:c1:6e:a7:0f: e6:be:e7:3c:04:aa:2b:b4:ea:22:d2:00:50:b9:78: 90:d6:74:d0:7e:af:b7:d4:85:0a:85:8c:36:d3:95: ab:12:f4:72:40:fe:04:82:b5:be:ce:22:44:05:b0: 84:74:eb:01:23:54:1d:92:d9:e8:c9:54:5e:a2:aa: b1:76:16:6e:04:23:99:ea:c0:50:ed:44:55:30:11: 06:1e:6f:01:81:f7:af:0f:89:63:86:4f:f5:81:e9: ae:36:08:7e:49:7e:6c:87:c0:25:f4:93:68:5f:66: a4:85:50:de:92:0d:04:fa:85:a9:fe:9a:06:8e:ea: d2:b5:cf:01:0f:55:7c:32:18:a7:03:04:08:17:f0: 0b:fd:60:d7:0d:ab:a2:88:0f:38:2d:5e:41:bb:b0: 79:65:c5:4e:7e:78:65:d7:f3:2c:ad:1a:45:f1:9f: c3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.116.0/24 142.249.204.0/22 IPv6: 2602:f688::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401655 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:34:fa:e8:b9:b0:00:6d:6b:c8:b8:a1:75:c6:08:c3:52:7a: 79:92:4c:03:3f:9f:53:54:54:be:e2:0f:08:2e:ee:76:00:9e: b4:b6:28:ab:39:6d:e3:0a:83:d8:b5:f9:3c:09:fc:2c:02:73: ef:1f:e8:23:8c:41:71:86:cf:16:1d:26:76:12:bd:3d:48:8a: cb:4e:76:f0:75:af:a3:cb:12:a2:a2:af:2e:5b:48:ee:41:97: 22:6f:02:07:ab:90:60:73:cb:0d:9a:78:d9:43:c2:fd:1c:51: 61:1b:93:3d:81:65:f7:7c:51:36:50:64:d9:2c:ca:d2:ed:15: 18:ad:89:ad:f4:52:bf:19:52:e8:88:bc:15:6e:ae:e2:ac:b0: 3a:c2:44:cc:61:0a:1c:79:ef:d4:4b:46:a4:6b:0f:8b:0b:36: 2e:07:0e:09:a3:04:88:18:80:32:76:b0:f8:1b:ff:29:27:4a: 06:4c:00:5c:73:2d:0b:a8:e1:6e:57:b7:71:ac:26:8a:c0:92: 56:fa:d2:0f:a8:be:76:72:9a:d9:7b:b3:6f:b3:91:3a:d1:8e: 0e:28:1f:43:17:b9:10:27:96:d1:37:12:33:6d:05:25:f2:b4: 62:61:75:9c:30:e6:64:ff:f1:25:2d:3f:fd:13:d5:cf:9e:6d: 6e:5a:e0:93 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt3HQGTNh0MuZhYaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTAwOTE0MjcyMFoXDTI3MDcxNTE0NTk0OVowLzEtMCsGA1UEAxMk OTE0ZGIyMDItNDg4NS00NTRiLTk3ZjgtMjIzZGU0YmYyY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv46fBtUR/OsAZaDNQaUhkHT6McmzSFzxAK+s NrBvL3RnElBCcp4wqCFINx+ubEoix2a/ttsxGD63sl9dizDIaS8FnEbX3k4xKjjh 7cymtNTWpVaJlMFupw/mvuc8BKortOoi0gBQuXiQ1nTQfq+31IUKhYw205WrEvRy QP4EgrW+ziJEBbCEdOsBI1QdktnoyVReoqqxdhZuBCOZ6sBQ7URVMBEGHm8Bgfev D4ljhk/1gemuNgh+SX5sh8Al9JNoX2akhVDekg0E+oWp/poGjurStc8BD1V8Mhin AwQIF/AL/WDXDauiiA84LV5Bu7B5ZcVOfnhl1/MsrRpF8Z/DbQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMgDBpLlqGQqutKbfA3I7gb9penZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MTRkYjIwMi00ODg1LTQ1NGItOTdmOC0yMjNkZTRiZjJjYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkxNGRiMjAyLTQ4ODUtNDU0Yi05 N2Y4LTIyM2RlNGJmMmNhOC85MTRkYjIwMi00ODg1LTQ1NGItOTdmOC0yMjNkZTRi ZjJjYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXiXQDBAKO+cwwDgQCAAIwCAMGACYC9ogAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYg9zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgNProubAAbWvIuKF1 xgjDUnp5kkwDP59TVFS+4g8ILu52AJ60tiirOW3jCoPYtfk8CfwsAnPvH+gjjEFx hs8WHSZ2Er09SIrLTnbwda+jyxKioq8uW0juQZcibwIHq5Bgc8sNmnjZQ8L9HFFh G5M9gWX3fFE2UGTZLMrS7RUYrYmt9FK/GVLoiLwVbq7irLA6wkTMYQocee/US0ak aw+LCzYuBw4JowSIGIAydrD4G/8pJ0oGTABccy0LqOFuV7dxrCaKwJJW+tIPqL52 cprZe7Nvs5E60Y4OKB9DF7kQJ5bRNxIzbQUl8rRiYXWcMOZk//ElLT/9E9XPnm1u WuCT -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:33 2025 by rpki-client