$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.cer File: 74c673d2-2e7f-4d34-a0a2-b0c74151cf59.cer (raw, json) Hash identifier: uqDPba7uY+rFwBeBR1yMh2Na+VMmjiIH9zh82ytV06Q= Subject key identifier: F0:34:1D:5B:B9:80:BB:E4:A7:84:89:79:64:DB:F8:35:41:85:07:23 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A8288384836FDD7DE195304 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 19:39:19 +0000 Certificate not after: Thu 13 May 2027 13:35:53 +0000 Subordinate resources: AS: 401477 IP: 142.248.94.0/24 IP: 2602:f6c8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:82:88:38:48:36:fd:d7:de:19:53:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 19:39:19 2025 GMT Not After : May 13 13:35:53 2027 GMT Subject: CN=74c673d2-2e7f-4d34-a0a2-b0c74151cf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:70:98:4e:29:a8:69:74:b1:44:d4:a7:1c: 23:89:83:ad:16:cc:9b:7c:1c:3e:d5:d7:ed:fa:00: 16:93:60:5d:0b:a4:1e:96:2e:69:6a:3b:fe:de:96: 65:22:b6:30:9d:9f:ff:d7:74:bf:79:d2:e6:d7:c9: db:18:b8:dc:c1:fe:0b:88:fd:74:e3:f1:c4:b4:28: 86:28:04:0c:dd:be:7b:9c:c3:08:25:44:b7:c8:d4: 49:9a:88:b9:b2:5b:cc:99:92:23:bd:7e:31:0a:c4: 12:a8:6b:4a:23:8b:c9:ea:fb:7b:7f:bc:7b:5a:61: e9:46:28:7e:10:d3:07:70:4f:24:da:1c:b4:30:d2: 87:8a:66:01:ad:29:eb:1a:c9:72:2f:bf:53:3c:fc: e4:07:1b:0b:17:c5:74:fa:a0:08:c0:ad:62:6e:66: 6c:90:f2:69:5f:ad:70:8f:ea:aa:66:a1:fd:c9:c4: 22:37:8a:c0:b5:7d:ce:34:44:15:14:1b:59:02:b6: d0:94:04:90:73:49:d3:ff:02:ce:ae:64:87:30:44: 6f:d0:1e:a1:3f:9d:5e:ba:0c:c1:92:b6:c6:72:f9: f3:68:0f:1d:36:fe:a3:f3:c7:c7:32:4b:69:45:31: 3b:ec:fe:26:8f:ee:67:dc:00:40:d3:7b:5a:5b:23: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:1D:5B:B9:80:BB:E4:A7:84:89:79:64:DB:F8:35:41:85:07:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.94.0/24 IPv6: 2602:f6c8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401477 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a3:0f:7f:f7:0a:66:d7:d4:4b:91:a3:42:ea:af:b4:88:a0: b3:f1:55:79:d8:84:47:a3:1a:cc:4c:57:fc:16:cc:a8:41:b2: 9d:e2:91:30:3a:16:61:46:cc:56:d7:7f:ee:b0:ec:ec:34:08: e7:61:6d:85:82:5d:d2:65:26:80:14:e6:d6:6b:b1:d6:1d:4e: fc:22:2b:b0:6b:11:21:fc:6e:ab:cc:41:fa:1b:cb:78:6d:e2: 6f:e0:91:00:dd:6f:55:a2:6b:ef:79:7b:8c:cb:e4:1b:21:7e: bc:e2:d9:28:bf:8f:d2:bc:b9:8e:e9:dd:aa:36:48:07:ff:8d: 0b:62:36:38:3f:5a:b6:63:c9:57:e6:ab:54:c6:14:f1:9c:2f: d5:cd:e9:b2:a0:8c:50:d4:6f:e8:28:52:22:9f:41:5a:eb:1a: a1:56:0d:5f:3e:bd:b7:95:27:1e:7c:4f:4a:be:a5:0b:fe:0c: 26:be:e4:24:5e:69:61:5c:0e:b9:9a:e1:e1:5b:88:6f:21:ce: 75:a0:a6:11:b8:59:ca:dd:12:3c:f7:c5:ce:48:10:da:7c:c4: 93:64:68:aa:af:8a:cd:ee:1a:75:42:0a:01:50:f6:f9:7d:3d: 82:4f:6d:90:e4:af:b5:1c:09:79:69:f9:71:bf:d3:56:0c:c7: 7a:35:3c:bd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt6gog4SDb9194ZUwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDE5MzkxOVoXDTI3MDUxMzEzMzU1M1owLzEtMCsGA1UEAxMk NzRjNjczZDItMmU3Zi00ZDM0LWEwYTItYjBjNzQxNTFjZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZwmE4pqGl0sUTUpxwjiYOtFsybfBw+1dft +gAWk2BdC6Qeli5pajv+3pZlIrYwnZ//13S/edLm18nbGLjcwf4LiP104/HEtCiG KAQM3b57nMMIJUS3yNRJmoi5slvMmZIjvX4xCsQSqGtKI4vJ6vt7f7x7WmHpRih+ ENMHcE8k2hy0MNKHimYBrSnrGslyL79TPPzkBxsLF8V0+qAIwK1ibmZskPJpX61w j+qqZqH9ycQiN4rAtX3ONEQVFBtZArbQlASQc0nT/wLOrmSHMERv0B6hP51eugzB krbGcvnzaA8dNv6j88fHMktpRTE77P4mj+5n3ABA03taWyOanQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPA0HVu5gLvkp4SJeWTb+DVBhQcjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NGM2NzNkMi0yZTdmLTRkMzQtYTBhMi1iMGM3NDE1MWNmNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc0YzY3M2QyLTJlN2YtNGQzNC1h MGEyLWIwYzc0MTUxY2Y1OS83NGM2NzNkMi0yZTdmLTRkMzQtYTBhMi1iMGM3NDE1 MWNmNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+F4wDgQCAAIwCAMGACYC9sgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgRTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnow9/9wpm19RLkaNC6q+0iKCz 8VV52IRHoxrMTFf8FsyoQbKd4pEwOhZhRsxW13/usOzsNAjnYW2Fgl3SZSaAFObW a7HWHU78IiuwaxEh/G6rzEH6G8t4beJv4JEA3W9VomvveXuMy+QbIX684tkov4/S vLmO6d2qNkgH/40LYjY4P1q2Y8lX5qtUxhTxnC/VzemyoIxQ1G/oKFIin0Fa6xqh Vg1fPr23lScefE9KvqUL/gwmvuQkXmlhXA65muHhW4hvIc51oKYRuFnK3RI898XO SBDafMSTZGiqr4rN7hp1QgoBUPb5fT2CT22Q5K+1HAl5aflxv9NWDMd6NTy9 -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:03 2025 by rpki-client