$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer File: 94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer (raw, json) Hash identifier: yQTdG89Ti5GPCsnaz1BAzIxEY1VNzkqz++axKGYz26o= Subject key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A30A491CA78958F01DA4380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 16:54:20 +0000 Certificate not after: Tue 09 Mar 2027 07:31:03 +0000 Subordinate resources: AS: 13696 IP: 23.130.140.0/24 IP: 142.248.136.0/22 IP: 2602:f77c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:30:a4:91:ca:78:95:8f:01:da:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 16:54:20 2025 GMT Not After : Mar 9 07:31:03 2027 GMT Subject: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:90:dc:35:6c:c6:1c:45:61:8d:28:cf:03: 12:65:1f:37:8c:43:43:9d:80:34:19:31:69:ba:b5: 5d:53:0b:be:e4:f4:13:78:5e:78:5a:42:a9:1b:c8: d0:7d:3e:dd:85:7f:3b:39:1c:9a:e0:05:c0:3a:f3: 58:6a:9f:a7:05:e5:4c:5f:4b:70:f7:3b:a6:2d:10: c5:52:6f:03:58:d6:45:c4:2a:0e:f3:2e:98:3d:15: aa:7f:53:94:fe:80:c4:65:9e:3b:82:06:a2:6a:87: f0:6a:21:9d:61:18:ed:47:aa:be:da:20:a1:a3:d4: f0:88:71:4c:e4:41:6d:8e:8a:df:39:40:75:17:0a: 98:64:8d:fe:e4:48:34:10:ea:db:a8:15:44:51:d1: e9:6d:00:c7:e4:54:03:5d:45:20:40:fc:d1:1b:f5: 0f:47:e5:71:d5:f1:da:78:b9:49:8d:09:c9:a8:61: e8:61:33:19:15:6e:52:e9:c0:07:ec:42:d7:ac:d1: 1a:81:af:79:23:cf:41:47:48:fe:c6:a9:bf:b6:b3: 2f:e3:38:9a:e1:53:95:53:c6:ac:ec:ef:e4:34:56: 35:d7:51:71:d2:00:b3:96:b2:d4:c6:3b:91:58:13: d5:6e:3b:56:7a:f0:2b:76:7c:a5:7a:99:ba:2c:f7: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.140.0/24 142.248.136.0/22 IPv6: 2602:f77c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13696 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e1:ae:0e:fe:9f:e8:bf:a7:c0:47:4d:8b:01:bf:1e:36:4f: 79:21:e5:dd:74:c0:bd:c1:68:4b:c4:45:0c:5a:47:ed:e8:10: 06:c3:ff:bd:8a:a5:42:9c:9d:89:f1:90:bb:c6:1c:b0:a6:62: af:42:93:b7:9d:d6:f3:b8:d8:59:a7:65:42:56:65:f0:6f:ae: 01:dd:4d:02:0b:4e:a9:47:75:ec:24:ca:14:de:3c:fb:2a:77: 39:95:d2:42:05:49:d9:1d:53:fe:60:90:54:bc:fd:5b:fb:2f: ba:e8:1b:b6:3e:60:2b:38:e0:e0:32:2a:20:83:b5:f0:67:7a: ec:02:b2:9c:22:5c:86:92:6b:db:62:3b:2a:5b:4e:59:fb:4d: 72:56:56:f0:38:08:4c:a4:8b:dc:f6:23:a2:bb:e9:5e:23:d2: 8c:ed:64:b8:00:ed:2d:05:9b:17:cf:10:9e:fe:bf:d7:e1:c5: 60:10:f6:64:58:e4:03:22:b3:08:03:f0:05:29:75:f9:1b:87: 33:97:54:dd:d3:14:29:5d:7d:75:a4:45:af:48:ff:c8:25:c2: b0:17:34:fa:b4:4a:36:43:5f:9b:56:33:b9:5c:36:49:52:67: 8e:0b:55:ed:d1:bf:a8:e8:48:d3:de:47:8a:8b:39:cf:99:65: 9c:f4:0e:33 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt6MKSRyniVjwHaQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDE2NTQyMFoXDTI3MDMwOTA3MzEwM1owLzEtMCsGA1UEAxMk OTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qQ3DVsxhxFYY0ozwMSZR83jENDnYA0GTFp urVdUwu+5PQTeF54WkKpG8jQfT7dhX87ORya4AXAOvNYap+nBeVMX0tw9zumLRDF Um8DWNZFxCoO8y6YPRWqf1OU/oDEZZ47ggaiaofwaiGdYRjtR6q+2iCho9TwiHFM 5EFtjorfOUB1FwqYZI3+5Eg0EOrbqBVEUdHpbQDH5FQDXUUgQPzRG/UPR+Vx1fHa eLlJjQnJqGHoYTMZFW5S6cAH7ELXrNEaga95I89BR0j+xqm/trMv4zia4VOVU8as 7O/kNFY111Fx0gCzlrLUxjuRWBPVbjtWevArdnylepm6LPffewIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJHF2x7cpWErhAugrqSNZMUFyBBIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk0ZjYyM2U3LWM2YmUtNGMzYi1i NTU0LTZhZDZhY2IwODUwYi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNi MDg1MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgowDBAKO+IgwDgQCAAIwCAMGBCYC93wAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEXhrg7+n+i/p8BHTYsB vx42T3kh5d10wL3BaEvERQxaR+3oEAbD/72KpUKcnYnxkLvGHLCmYq9Ck7ed1vO4 2FmnZUJWZfBvrgHdTQILTqlHdewkyhTePPsqdzmV0kIFSdkdU/5gkFS8/Vv7L7ro G7Y+YCs44OAyKiCDtfBneuwCspwiXIaSa9tiOypbTln7TXJWVvA4CEyki9z2I6K7 6V4j0oztZLgA7S0FmxfPEJ7+v9fhxWAQ9mRY5AMiswgD8AUpdfkbhzOXVN3TFCld fXWkRa9I/8glwrAXNPq0SjZDX5tWM7lcNklSZ44LVe3Rv6joSNPeR4qLOc+ZZZz0 DjM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:33 2025 by rpki-client