$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer File: 1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer (raw, json) Hash identifier: HuN0I/YyB/LzyEBttR+t+BF4TNffwC8nUoNE0TJtAvI= Subject key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A916C395AD9787CF3D03400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 20:09:20 +0000 Certificate not after: Wed 07 Apr 2027 21:24:56 +0000 Subordinate resources: AS: 401557 IP: 23.132.76.0/24 IP: 142.248.62.0/24 IP: 2620:d2:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:91:6c:39:5a:d9:78:7c:f3:d0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 20:09:20 2025 GMT Not After : Apr 7 21:24:56 2027 GMT Subject: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:39:c7:2b:8e:fd:71:fb:b8:07:2c:c9:95: 82:63:85:e6:a2:24:78:7f:7a:3e:97:14:1d:62:f6: fa:e1:86:1e:e0:17:fc:48:50:8d:50:f2:8f:e8:f6: d7:a2:69:3b:bd:d7:68:ab:07:8a:5c:37:64:28:b9: 9a:d1:c2:b6:36:6e:fd:a3:2f:9a:01:d6:9a:d4:07: 63:40:dc:10:08:14:7c:d9:10:01:61:d1:9f:66:50: df:cc:d0:d3:53:2a:62:10:4d:6a:e8:44:ae:67:ff: 75:1b:2c:3a:43:3f:bb:1f:d3:52:74:f5:18:6f:44: d6:8d:a5:61:32:f5:1a:fb:31:7e:72:8d:5c:06:02: 6f:aa:1d:99:a8:6c:4c:77:66:82:1a:0b:85:76:c5: e6:52:6f:4e:ce:23:38:2e:68:9b:dc:70:32:84:0f: b1:6b:4b:58:2a:5e:19:c6:ba:43:f9:8f:77:2e:f2: 72:13:66:8c:03:71:13:66:5d:b4:ad:42:80:68:80: e5:30:78:e8:78:0c:75:f9:6c:dc:06:b6:8c:24:0b: 8a:68:fe:59:b7:d2:6d:00:49:7c:8e:55:9c:22:8b: b2:6a:b9:03:e9:21:22:cb:04:82:e5:73:10:70:a8: 37:66:d6:93:ce:0e:dc:f7:33:6b:60:5a:c7:09:16: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.76.0/24 142.248.62.0/24 IPv6: 2620:d2:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6e:17:1d:3f:92:a9:97:71:4d:c2:db:fb:55:b6:39:bd:6a: 7e:9d:70:42:58:21:77:be:e3:21:69:92:9d:81:20:e9:ea:56: 8c:63:e1:85:01:b9:59:ac:78:00:e9:72:6f:78:5d:39:6b:7a: 3c:56:98:53:d6:80:e6:13:28:cd:1c:4f:5a:f0:e4:f3:41:cd: dd:91:c7:43:4d:0f:21:5e:3f:7a:31:f2:6b:e7:74:38:50:56: c2:83:a3:03:28:9b:a7:72:18:f2:71:09:84:89:5d:b3:47:8d: 39:24:71:68:6a:4f:7b:59:ab:34:4c:f2:fd:f2:7a:94:e8:e4: cf:9d:0c:0b:bc:86:12:f6:92:ac:d6:b7:03:c7:67:8d:c3:8f: c5:b7:78:42:ef:0c:8b:c8:4e:6e:68:20:57:ca:58:9e:e3:62: 14:ea:2e:1e:9d:73:b2:e6:1c:bb:95:33:89:83:28:c5:3d:81: 03:bd:48:c3:40:63:61:1c:8b:de:99:88:ab:9f:ad:b1:1c:bb: 9c:d8:73:d5:b4:58:d7:45:5c:ff:f9:2b:9b:bd:9a:ba:a2:62: 13:3c:90:e0:6e:38:75:30:33:db:d4:52:79:2e:d8:41:f7:87: a9:c5:1a:bf:bf:7c:5c:bf:67:f2:24:76:32:cd:a0:1c:51:87: 62:e8:32:8b -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEt6kWw5Wtl4fPPQNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDIwMDkyMFoXDTI3MDQwNzIxMjQ1NlowLzEtMCsGA1UEAxMk MWRlOWQ4ZjAtOGIxZC00ODBkLWJjOWUtNzcwY2VjZDRjOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Q5xyuO/XH7uAcsyZWCY4XmoiR4f3o+lxQd Yvb64YYe4Bf8SFCNUPKP6PbXomk7vddoqweKXDdkKLma0cK2Nm79oy+aAdaa1Adj QNwQCBR82RABYdGfZlDfzNDTUypiEE1q6ESuZ/91Gyw6Qz+7H9NSdPUYb0TWjaVh MvUa+zF+co1cBgJvqh2ZqGxMd2aCGguFdsXmUm9OziM4Lmib3HAyhA+xa0tYKl4Z xrpD+Y93LvJyE2aMA3ETZl20rUKAaIDlMHjoeAx1+WzcBraMJAuKaP5Zt9JtAEl8 jlWcIouyarkD6SEiywSC5XMQcKg3ZtaTzg7c9zNrYFrHCRZShQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFISzrw9X3lesOm5UBW8dJoi7hymfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNkNGM4ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFkZTlkOGYwLThiMWQtNDgwZC1i YzllLTc3MGNlY2Q0YzhmMi8xZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNk NGM4ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXhEwDBACO+D4wDwQCAAIwCQMHBCYgANIgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGIJUwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb24XHT+SqZdxTcLb +1W2Ob1qfp1wQlghd77jIWmSnYEg6epWjGPhhQG5Wax4AOlyb3hdOWt6PFaYU9aA 5hMozRxPWvDk80HN3ZHHQ00PIV4/ejHya+d0OFBWwoOjAyibp3IY8nEJhIlds0eN OSRxaGpPe1mrNEzy/fJ6lOjkz50MC7yGEvaSrNa3A8dnjcOPxbd4Qu8Mi8hObmgg V8pYnuNiFOouHp1zsuYcu5UziYMoxT2BA71Iw0BjYRyL3pmIq5+tsRy7nNhz1bRY 10Vc//krm72auqJiEzyQ4G44dTAz29RSeS7YQfeHqcUav798XL9n8iR2Ms2gHFGH Yugyiw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:32 2025 by rpki-client