$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer File: a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer (raw, json) Hash identifier: 9n7OVukBDqT8UQpFcJjPXna6ahKd/gqYvDj3E6PeyFA= Subject key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B19648284CF539E09E313FAE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Sep 2025 00:45:25 +0000 Certificate not after: Fri 10 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 54009 IP: 198.147.247.0/24 IP: 2602:812:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:64:82:84:cf:53:9e:09:e3:13:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 6 00:45:25 2025 GMT Not After : Dec 10 01:45:25 2027 GMT Subject: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:6b:03:12:72:23:f5:f1:8b:89:60:73:f1: 74:47:a8:d6:3b:19:a5:e0:2a:39:d3:ac:15:c0:f9: 01:e8:93:16:6b:a6:93:fe:b8:56:22:9b:93:3e:9d: 02:bd:06:96:c9:14:6f:be:45:c8:ea:e3:41:05:66: 3e:a3:75:70:14:36:54:d8:65:02:5d:74:de:fa:4a: ff:aa:2a:fe:dc:1b:f8:d4:e7:1d:c1:1a:56:1e:68: e2:13:e9:9d:42:5b:6e:0c:82:60:db:8f:f9:e4:73: 58:e7:2a:8f:90:30:8c:ab:8d:f9:24:c6:5b:33:29: 3b:13:fa:78:ff:fd:30:55:c4:6e:b5:69:9d:30:d5: 09:71:96:a4:f5:9b:fc:a5:1e:7f:94:cc:97:02:bd: 15:d0:25:d0:3d:0a:f6:64:74:7e:f9:b0:4d:4b:83: 63:d2:9c:7d:14:49:f6:c2:ab:03:07:2e:99:f9:b0: ae:8c:cb:38:5a:b2:af:a1:f1:11:26:fe:0f:9f:fc: 63:9c:f7:03:34:a7:b8:f5:09:1f:4a:08:08:42:e9: ff:dc:a3:c0:06:b6:2e:ff:6c:f8:bc:b7:10:7f:e7: 9c:3d:be:63:0e:46:0a:03:a6:23:96:db:29:4e:96: e1:12:d1:00:b9:96:e2:85:fd:fd:ad:7d:c5:9f:ee: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.147.247.0/24 IPv6: 2602:812:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54009 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:12:c3:aa:38:08:11:00:46:67:4f:20:9b:c2:3e:67:b5:6a: 9b:50:d7:a6:09:8a:3f:9b:2c:29:50:52:89:c8:1d:c2:6c:50: 99:6a:5f:bb:9a:cb:ac:e4:cf:89:ec:3e:b2:8d:05:1a:0b:18: cf:b8:95:11:56:0a:cd:02:c2:94:7c:b7:9b:2e:bc:da:23:84: 10:31:6d:e1:e1:e8:62:a5:b9:2b:16:02:8c:e9:ad:55:4f:93: 75:a9:82:d0:f4:09:05:79:7a:c4:1a:82:8a:cb:af:96:32:5b: 31:9c:bd:ea:66:48:be:0b:8e:49:5a:62:3a:8d:b3:95:08:8a: b3:46:1c:ee:b4:8a:26:01:ff:f3:6f:55:32:d5:b3:ca:92:e4: 57:6f:55:fb:6c:d8:12:ae:50:ae:d5:2f:d2:74:56:c0:9e:7e: 57:78:db:cd:16:0b:19:68:49:e7:57:01:e2:71:b1:0e:b9:19: 94:b0:69:89:16:e6:65:15:97:bf:ad:ea:07:f0:1f:d7:15:c7: 8f:fd:ab:e1:f1:22:62:03:b5:7b:22:c9:d6:4b:30:39:16:51: 9c:5e:3c:19:47:65:fa:b2:da:f8:a0:18:45:dd:a5:a8:17:f4: e8:b0:b8:f5:70:a5:9f:16:f8:8e:21:72:87:01:a2:f8:2c:6a: 10:ff:91:08 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsZZIKEz1OeCeMT+uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkwNjAwNDUyNVoXDTI3MTIxMDAxNDUyNVowLzEtMCsGA1UEAxMk YTljNTA1MTQtZWViYS00YWIyLWI4ZTAtMmE2NDI3NGViMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU1rAxJyI/Xxi4lgc/F0R6jWOxml4Co506wV wPkB6JMWa6aT/rhWIpuTPp0CvQaWyRRvvkXI6uNBBWY+o3VwFDZU2GUCXXTe+kr/ qir+3Bv41OcdwRpWHmjiE+mdQltuDIJg24/55HNY5yqPkDCMq435JMZbMyk7E/p4 //0wVcRutWmdMNUJcZak9Zv8pR5/lMyXAr0V0CXQPQr2ZHR++bBNS4Nj0px9FEn2 wqsDBy6Z+bCujMs4WrKvofERJv4Pn/xjnPcDNKe49QkfSggIQun/3KPABrYu/2z4 vLcQf+ecPb5jDkYKA6YjltspTpbhEtEAuZbihf39rX3Fn+4TtwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN2WKY4daMOhojnItdWSw5jGwT1VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h OWM1MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0Mjc0ZWIyNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E5YzUwNTE0LWVlYmEtNGFiMi1i OGUwLTJhNjQyNzRlYjI0NS9hOWM1MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0Mjc0 ZWIyNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGk/cwDgQCAAIwCAMGACYCCBLQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDS+TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/EsOqOAgRAEZnTyCbwj5ntWqb UNemCYo/mywpUFKJyB3CbFCZal+7msus5M+J7D6yjQUaCxjPuJURVgrNAsKUfLeb LrzaI4QQMW3h4ehipbkrFgKM6a1VT5N1qYLQ9AkFeXrEGoKKy6+WMlsxnL3qZki+ C45JWmI6jbOVCIqzRhzutIomAf/zb1Uy1bPKkuRXb1X7bNgSrlCu1S/SdFbAnn5X eNvNFgsZaEnnVwHicbEOuRmUsGmJFuZlFZe/reoH8B/XFceP/avh8SJiA7V7IsnW SzA5FlGcXjwZR2X6str4oBhF3aWoF/TosLj1cKWfFviOIXKHAaL4LGoQ/5EI -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:39 2025 by rpki-client