$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer File: 13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer (raw, json) Hash identifier: kzYv/axAvyFPoy/VORPxPHMfdvmVuD78izWNqPcmgpU= Subject key identifier: FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A605158B48814F0618B4A90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 18:30:23 +0000 Certificate not after: Tue 16 Mar 2027 18:33:53 +0000 Subordinate resources: AS: 18783 IP: 23.130.172.0/24 IP: 142.248.124.0/23 IP: 2602:fd79::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:60:51:58:b4:88:14:f0:61:8b:4a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 18:30:23 2025 GMT Not After : Mar 16 18:33:53 2027 GMT Subject: CN=13880c00-8cd5-4204-95fb-7c54c6eab2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:63:fb:d0:e6:4f:6a:69:3f:cf:eb:17:74:ef: 7f:2c:27:a6:80:87:18:a2:da:82:10:50:7d:d7:23: 37:9f:6b:66:c3:45:27:55:81:45:2f:57:f7:84:66: 0e:d0:c5:a3:bd:71:8e:90:93:a4:b3:70:ab:e1:f7: 7f:85:24:9a:01:f3:51:aa:eb:02:b6:d1:2c:b5:b9: 67:38:69:21:f9:d8:9a:7f:6d:23:1a:7d:7a:3f:95: 6c:d4:3e:a5:18:f8:af:32:fe:9e:64:75:35:55:d9: 85:b9:5d:1f:08:96:fd:31:e5:2b:1d:8f:a3:d2:5c: 98:62:d2:0b:b8:7a:0f:24:57:1e:11:32:ed:0e:3d: 3a:2d:53:1e:d2:ee:15:3e:2d:27:94:4b:00:4b:c5: ed:51:36:f9:cd:f4:fe:a8:5b:cb:a2:5a:f8:d5:f9: e0:46:6a:59:59:20:d9:90:70:f5:35:8e:d6:a9:60: fe:fd:39:d1:1e:7e:0b:1d:3c:81:d8:4f:0a:19:01: 7f:bc:75:8a:76:03:a0:04:b5:6e:e7:69:30:c9:2a: 15:30:12:0a:06:37:76:5d:0f:33:c9:2c:32:34:22: 85:20:57:31:65:20:b1:bd:cb:34:31:2a:ca:77:f1: a3:ea:24:d1:96:d3:ed:10:b6:5e:a6:a7:e7:12:f0: e7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.172.0/24 142.248.124.0/23 IPv6: 2602:fd79::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18783 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:72:82:d2:de:a0:9f:9e:db:96:36:7f:c3:52:a1:84:d9:24: 6f:48:86:dc:34:57:e6:7a:a2:2d:05:6f:e9:a6:3a:55:b7:6f: 19:62:e7:49:e5:cc:44:43:4b:fa:60:90:e9:c5:ee:40:58:e2: 8e:fd:36:94:91:0a:db:0f:c5:ce:c3:d0:36:1d:6d:38:df:4f: f7:32:37:f8:24:2a:c7:35:84:a3:3e:7f:1b:8a:78:20:47:d4: f5:ab:e3:c0:d3:b7:94:e5:21:77:2d:94:b4:f9:4e:f7:5a:9d: 53:30:99:e3:a7:9b:6c:d5:8c:30:c3:81:11:0b:87:02:d6:ae: 95:d0:7c:84:e3:3e:72:0f:3b:05:43:fb:79:ff:3e:83:f9:ff: f3:74:5f:6d:69:62:38:79:5a:08:b3:1f:00:c9:d0:7d:01:4d: 85:af:5a:30:1b:fd:39:18:c1:e5:fd:a9:87:d9:2e:37:72:50: 44:da:c8:fe:88:76:05:b8:26:5a:14:b6:91:9d:f3:95:0f:a3: 3f:98:ac:58:32:2e:d4:5b:e0:9a:ad:bd:f9:08:49:66:11:81: db:8f:c6:94:34:b8:92:8b:0d:51:17:ae:14:27:fe:d1:07:79: eb:ec:83:c3:e5:4e:71:76:45:67:1f:77:b4:27:43:9c:01:46: 04:cb:39:cd -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt6YFFYtIgU8GGLSpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDE4MzAyM1oXDTI3MDMxNjE4MzM1M1owLzEtMCsGA1UEAxMk MTM4ODBjMDAtOGNkNS00MjA0LTk1ZmItN2M1NGM2ZWFiMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGP70OZPamk/z+sXdO9/LCemgIcYotqCEFB9 1yM3n2tmw0UnVYFFL1f3hGYO0MWjvXGOkJOks3Cr4fd/hSSaAfNRqusCttEstbln OGkh+diaf20jGn16P5Vs1D6lGPivMv6eZHU1VdmFuV0fCJb9MeUrHY+j0lyYYtIL uHoPJFceETLtDj06LVMe0u4VPi0nlEsAS8XtUTb5zfT+qFvLolr41fngRmpZWSDZ kHD1NY7WqWD+/TnRHn4LHTyB2E8KGQF/vHWKdgOgBLVu52kwySoVMBIKBjd2XQ8z ySwyNCKFIFcxZSCxvcs0MSrKd/Gj6iTRltPtELZepqfnEvDnfQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFP2BdUjGYMfuxXEd0uBSTxPwylD1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x Mzg4MGMwMC04Y2Q1LTQyMDQtOTVmYi03YzU0YzZlYWIyZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzODgwYzAwLThjZDUtNDIwNC05 NWZiLTdjNTRjNmVhYjJkOS8xMzg4MGMwMC04Y2Q1LTQyMDQtOTVmYi03YzU0YzZl YWIyZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgqwDBAGO+HwwDgQCAAIwCAMGBCYC/XkAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAklfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABxygtLeoJ+e25Y2f8NS oYTZJG9Ihtw0V+Z6oi0Fb+mmOlW3bxli50nlzERDS/pgkOnF7kBY4o79NpSRCtsP xc7D0DYdbTjfT/cyN/gkKsc1hKM+fxuKeCBH1PWr48DTt5TlIXctlLT5TvdanVMw meOnm2zVjDDDgRELhwLWrpXQfITjPnIPOwVD+3n/PoP5//N0X21pYjh5WgizHwDJ 0H0BTYWvWjAb/TkYweX9qYfZLjdyUETayP6IdgW4JloUtpGd85UPoz+YrFgyLtRb 4JqtvfkISWYRgduPxpQ0uJKLDVEXrhQn/tEHeevsg8PlTnF2RWcfd7QnQ5wBRgTL Oc0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:50 2025 by rpki-client