$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer File: 0a080168-c146-41c6-9367-391cd429b856.cer (raw, json) Hash identifier: OVmXnXzonhp3eOkD5SLDN/BMylEmfL/xW/KTCbD3B7c= Subject key identifier: BC:13:03:11:05:E8:9A:AE:C7:8F:16:55:AE:52:34:73:64:71:50:A1 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A8D1F24846CD2960CA41080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 20:00:40 +0000 Certificate not after: Sun 04 Apr 2027 13:07:26 +0000 Subordinate resources: AS: 401551 IP: 23.131.172.0/24 IP: 142.248.90.0/23 IP: 2602:f752::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:8d:1f:24:84:6c:d2:96:0c:a4:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 20:00:40 2025 GMT Not After : Apr 4 13:07:26 2027 GMT Subject: CN=0a080168-c146-41c6-9367-391cd429b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:40:bc:65:84:b3:b1:85:fd:d9:a6:ad:0d: 79:31:c8:c7:24:d3:03:14:2c:0d:e2:37:95:16:c5: 4d:8f:83:47:b0:ad:a3:ee:45:d0:61:f0:ef:8d:c3: 0b:8b:42:4b:33:88:df:37:30:77:55:12:1f:3e:8e: 49:aa:a0:93:29:e5:6b:02:05:0c:6b:91:8a:6f:d1: a3:b9:ab:e3:6e:1a:4d:eb:e7:8e:f1:74:82:d6:dc: e1:c0:98:26:b5:40:e8:07:c0:77:2e:d2:9a:05:1b: f5:df:8e:f3:a3:9b:95:3c:9d:82:30:f4:71:0e:86: a1:14:40:31:ce:02:20:db:3f:0b:1f:92:e9:1a:69: b1:54:a6:4f:b2:f9:94:4a:ec:4b:19:15:70:86:71: 19:2a:d6:bb:82:dc:4c:6f:aa:db:19:09:e6:63:4c: 46:44:87:6c:30:7e:20:bf:13:89:d9:82:e4:c9:d2: 8b:e8:2f:51:61:6a:30:a3:d5:28:a8:b8:fe:6e:72: 76:8c:7c:3c:e3:c9:05:f7:ac:81:85:0b:ff:77:39: dd:ac:ed:4d:ed:2c:d0:1f:55:0c:92:88:db:f3:60: 3a:05:1b:90:a2:ab:f2:91:ce:35:5e:2d:79:fc:9e: b6:d6:27:fe:4c:54:29:f4:02:52:69:56:58:d3:3f: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:13:03:11:05:E8:9A:AE:C7:8F:16:55:AE:52:34:73:64:71:50:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.172.0/24 142.248.90.0/23 IPv6: 2602:f752::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7a:be:49:b9:3d:75:99:bf:4b:9b:e1:f1:5f:5c:da:7d:43: bf:b2:ae:39:ab:53:9b:81:1c:7c:39:9e:6a:98:4b:58:12:24: 1a:9b:aa:fb:13:89:de:b7:5b:d3:4b:13:d8:8b:e4:0b:61:f4: c4:96:bd:c3:f9:8a:92:1e:6b:97:62:86:fc:43:d3:52:3d:f1: fb:db:86:b6:fb:23:81:99:c1:21:c2:55:2a:6a:9d:c9:28:eb: 70:02:58:46:db:07:0e:22:88:91:12:3c:76:a6:b3:ac:a9:1a: 43:69:72:35:72:33:8b:d0:eb:58:e0:cf:6f:71:73:c7:2f:52: 2f:b4:2f:85:d2:9f:f2:42:cc:09:3f:1e:d5:84:b7:54:94:fc: 35:7a:bf:96:da:12:ff:f1:ed:ab:d6:98:f7:84:9e:cb:e1:40: 42:16:54:70:06:eb:fe:e5:1f:d4:32:90:97:8f:43:7d:f0:d0: a4:62:dd:fe:98:59:b2:c3:29:06:cd:d5:03:c7:78:cf:6d:17: bf:11:d5:14:71:5f:bc:2c:1c:ca:45:2b:f1:8f:ca:8f:9f:7a: 19:2b:5d:d1:67:50:59:e4:23:f8:d4:97:16:d3:7f:9f:6b:00: e5:df:d7:02:de:f8:c6:75:ed:f4:39:5b:d6:97:ec:05:b6:a1: 9c:e6:97:8d -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt6jR8khGzSlgykEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDIwMDA0MFoXDTI3MDQwNDEzMDcyNlowLzEtMCsGA1UEAxMk MGEwODAxNjgtYzE0Ni00MWM2LTkzNjctMzkxY2Q0MjliODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno5AvGWEs7GF/dmmrQ15McjHJNMDFCwN4jeV FsVNj4NHsK2j7kXQYfDvjcMLi0JLM4jfNzB3VRIfPo5JqqCTKeVrAgUMa5GKb9Gj uavjbhpN6+eO8XSC1tzhwJgmtUDoB8B3LtKaBRv1347zo5uVPJ2CMPRxDoahFEAx zgIg2z8LH5LpGmmxVKZPsvmUSuxLGRVwhnEZKta7gtxMb6rbGQnmY0xGRIdsMH4g vxOJ2YLkydKL6C9RYWowo9UoqLj+bnJ2jHw848kF96yBhQv/dzndrO1N7SzQH1UM kojb82A6BRuQoqvykc41Xi15/J621if+TFQp9AJSaVZY0z9psQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLwTAxEF6Jqux48WVa5SNHNkcVChMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w YTA4MDE2OC1jMTQ2LTQxYzYtOTM2Ny0zOTFjZDQyOWI4NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzBhMDgwMTY4LWMxNDYtNDFjNi05 MzY3LTM5MWNkNDI5Yjg1Ni8wYTA4MDE2OC1jMTQ2LTQxYzYtOTM2Ny0zOTFjZDQy OWI4NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXg6wDBAGO+FowDgQCAAIwCAMGBCYC91IAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYgjzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAner5JuT11mb9Lm+Hx X1zafUO/sq45q1ObgRx8OZ5qmEtYEiQam6r7E4net1vTSxPYi+QLYfTElr3D+YqS HmuXYob8Q9NSPfH724a2+yOBmcEhwlUqap3JKOtwAlhG2wcOIoiREjx2prOsqRpD aXI1cjOL0OtY4M9vcXPHL1IvtC+F0p/yQswJPx7VhLdUlPw1er+W2hL/8e2r1pj3 hJ7L4UBCFlRwBuv+5R/UMpCXj0N98NCkYt3+mFmywykGzdUDx3jPbRe/EdUUcV+8 LBzKRSvxj8qPn3oZK13RZ1BZ5CP41JcW03+fawDl39cC3vjGde30OVvWl+wFtqGc 5peN -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:18 2025 by rpki-client