$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer File: bcb3b598-8d83-4864-818b-f5833b7583e7.cer (raw, json) Hash identifier: iAXv61c9hV/2mQ3GYLNDO0ESwUnUkuMcxtgEsse/r08= Subject key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584AF16523A4EC364D67C1D0BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 16:54:21 +0000 Certificate not after: Thu 27 May 2027 19:50:34 +0000 Subordinate resources: AS: 17176 IP: 23.134.180.0/24 IP: 2602:f6e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:65:23:a4:ec:36:4d:67:c1:d0:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Aug 22 16:54:21 2025 GMT Not After : May 27 19:50:34 2027 GMT Subject: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:b9:73:02:a5:a3:94:f0:e1:df:ea:f0:73: 84:69:57:75:8d:ce:df:38:47:5d:d1:f5:e3:cc:0a: d2:69:f8:15:a0:30:7e:7d:a0:43:76:39:9c:6c:ff: 00:84:2e:68:3a:30:d4:0a:60:72:a1:7a:68:40:42: 9c:9a:30:e8:5c:25:58:54:14:5e:dd:39:04:68:cf: 68:20:ac:6e:7a:0a:d3:0f:97:1e:b3:03:fb:66:2d: 3b:96:31:f4:37:57:2d:2a:e4:18:9a:66:2b:24:ef: 69:8d:41:0a:e9:31:6d:55:81:e4:38:db:99:23:c3: 15:b5:2d:f2:d2:d8:4a:7d:d7:69:9b:88:7e:31:aa: d9:bc:5a:97:59:40:21:df:c5:1d:db:46:2f:91:6d: d2:28:73:ba:fb:83:f5:64:85:4d:41:13:cc:b5:eb: 51:ca:72:56:4d:b2:6f:d7:cd:58:02:ca:fe:63:57: ae:f8:cb:cb:25:b6:8f:af:a9:d7:d9:11:be:a7:62: 51:27:65:20:1c:ab:63:2b:9b:64:46:fa:e8:58:f0: 3b:2a:73:9f:46:c3:b3:b9:f0:6e:35:e5:9e:c2:2f: 58:00:bd:d7:70:6a:1a:a0:22:aa:da:6d:e0:a0:93: d9:02:f0:1e:63:fe:47:0a:c7:39:a8:10:11:cb:94: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 IPv6: 2602:f6e4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:15:f3:ef:38:47:02:b3:d1:90:99:49:98:de:61:27:38:84: 69:a7:fb:c7:16:ab:1a:f9:58:9f:84:18:8c:e6:df:8d:1c:45: 19:4c:e9:54:cb:d7:9b:85:76:96:f3:ac:eb:51:30:da:21:2c: a3:6c:0f:7a:e3:1c:fc:9a:46:01:41:ca:8a:b0:ec:68:84:4a: 78:66:5d:65:cf:ac:31:3a:b9:f9:4f:68:9e:d6:f9:9a:bb:6e: a1:04:e7:83:25:1e:ae:b3:27:89:02:46:e1:59:62:75:35:1e: 88:68:f9:32:f0:fe:2a:f1:b9:7f:67:66:7c:d1:05:19:4a:25: 93:d0:37:e2:c9:09:cd:15:94:4a:d3:56:07:bb:3e:8b:bc:12: 45:ee:b2:6a:8b:a1:42:a0:39:18:f1:11:dd:40:7b:bd:9e:59: 9a:47:65:53:16:e6:9f:79:36:ee:5a:29:6b:ba:13:49:0c:c3: b8:c4:19:2d:c8:7c:ae:1d:28:53:8a:c0:0a:8b:67:d9:bb:50: 0a:e2:dc:d9:12:6f:2f:15:49:36:97:4c:fe:30:cd:28:eb:69: 2d:1d:df:72:e4:1c:50:7b:97:f4:53:43:6c:c8:67:1a:b4:f3: 33:6a:e8:cc:cc:f7:e1:54:45:43:6e:df:30:4f:3f:c8:95:c5: 72:94:f9:c2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWErxZSOk7DZNZ8HQv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDgyMjE2NTQyMVoXDTI3MDUyNzE5NTAzNFowLzEtMCsGA1UEAxMk YmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibW5cwKlo5Tw4d/q8HOEaVd1jc7fOEdd0fXj zArSafgVoDB+faBDdjmcbP8AhC5oOjDUCmByoXpoQEKcmjDoXCVYVBRe3TkEaM9o IKxuegrTD5ceswP7Zi07ljH0N1ctKuQYmmYrJO9pjUEK6TFtVYHkONuZI8MVtS3y 0thKfddpm4h+MarZvFqXWUAh38Ud20YvkW3SKHO6+4P1ZIVNQRPMtetRynJWTbJv 181YAsr+Y1eu+MvLJbaPr6nX2RG+p2JRJ2UgHKtjK5tkRvroWPA7KnOfRsOzufBu NeWewi9YAL3XcGoaoCKq2m3goJPZAvAeY/5HCsc5qBARy5TQwwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFE8B9XomnI6RqfQoC1PXKjxJeEOmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjNiNTk4LThkODMtNDg2NC04 MThiLWY1ODMzYjc1ODNlNy9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3 NTgzZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhrQwDgQCAAIwCAMGACYC9uQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkMYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA0V8+84RwKz0ZCZSZjeYSc4hGmn +8cWqxr5WJ+EGIzm340cRRlM6VTL15uFdpbzrOtRMNohLKNsD3rjHPyaRgFByoqw 7GiESnhmXWXPrDE6uflPaJ7W+Zq7bqEE54MlHq6zJ4kCRuFZYnU1Hoho+TLw/irx uX9nZnzRBRlKJZPQN+LJCc0VlErTVge7Pou8EkXusmqLoUKgORjxEd1Ae72eWZpH ZVMW5p95Nu5aKWu6E0kMw7jEGS3IfK4dKFOKwAqLZ9m7UAri3NkSby8VSTaXTP4w zSjraS0d33LkHFB7l/RTQ2zIZxq08zNq6MzM9+FURUNu3zBPP8iVxXKU+cI= -----END CERTIFICATE-----Generated at Sat Aug 23 09:43:01 2025 by rpki-client