$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer File: 036d6da4-f590-4da8-a22f-55511da98ee5.cer (raw, json) Hash identifier: yDnc+3ZEK3d2F+gVcB58gbW6A71bBQDP2j7mCXETUNI= Subject key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B00445B122480F801A99A3080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 00:45:25 +0000 Certificate not after: Wed 01 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 395042 IP: 52.128.40.0/21 IP: 192.92.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:44:5b:12:24:80:f8:01:a9:9a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 28 00:45:25 2025 GMT Not After : Dec 1 01:45:25 2027 GMT Subject: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:36:be:5d:90:6d:25:76:73:12:73:cc:b7: 08:52:83:b4:eb:47:e1:9e:03:b6:61:fb:cb:14:72: 1e:5a:07:e3:ce:9f:e8:91:94:3c:97:49:03:31:06: 32:3f:61:8b:8b:18:e0:e4:3e:75:5a:1a:7b:c1:b0: fd:b4:d7:af:e3:47:6a:b0:be:9e:a8:30:d7:a6:bc: 1d:71:b2:64:39:3d:04:77:2a:53:a9:48:4a:1f:c4: a7:18:f4:cb:70:b9:7f:22:bd:c3:5c:45:4a:ed:d3: a1:65:d1:c1:9b:68:30:44:f2:ba:16:f7:df:3e:b6: 3e:2a:b9:a2:a3:1a:5b:e1:f9:ad:a0:62:42:67:3f: 07:63:83:83:01:75:9d:b1:71:c4:91:f4:a4:79:63: cc:25:d1:f2:9c:02:8a:86:35:6c:06:9d:c8:8b:48: ca:a8:cd:ec:49:29:d0:9a:97:7c:e0:b7:56:e4:0d: 7c:8d:69:54:1f:7b:98:1e:70:c7:bb:c9:7c:77:77: 93:89:b6:9e:7e:e8:b1:b1:25:c7:b0:3d:68:83:86: 09:47:ec:fa:3e:65:27:f5:0d:bb:8f:37:b6:60:03: 40:f6:10:cb:7b:47:8b:ed:4e:3f:95:c7:4f:e1:8c: 6b:ad:d8:46:72:a3:94:27:2f:62:6e:29:e3:03:cc: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/21 192.92.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a5:8b:4c:0e:3b:b1:70:18:02:0d:f3:f1:80:38:b8:f5:72: f8:8f:f7:de:d2:b6:25:1b:cb:c2:0f:2e:1d:1c:bf:55:74:7f: a1:95:a0:fd:0f:39:84:21:80:2f:3e:de:8d:5b:70:ea:24:63: c3:4d:45:d9:9f:07:96:ba:61:97:0c:95:78:a0:e7:f3:0f:c6: 80:3e:14:1d:0f:c9:4d:0a:25:c5:a9:e7:f0:e5:93:06:5f:fa: cb:ba:a4:5a:29:cc:cc:f0:06:f0:07:d4:ba:25:15:63:a8:91: fb:46:8d:d4:3b:bc:77:cf:4c:82:4b:3d:79:c2:1d:ac:21:85: 92:9e:5f:6c:9e:a7:3c:8f:b0:8d:3b:de:57:58:c8:74:7d:21: ac:7d:66:19:ff:39:97:91:08:67:3b:23:13:6f:0a:43:c7:25: 24:b1:bc:70:fe:81:1c:22:6a:c1:80:14:c0:c5:dc:66:3f:51: 82:fd:56:29:06:b7:25:26:19:55:82:36:4f:e0:f0:4c:8b:4f: 7f:b1:a7:c0:72:bd:ff:08:7a:76:3c:22:1b:4b:05:23:a1:c6: 41:6e:ac:f7:b1:f0:8c:01:9c:11:1c:48:d1:a3:df:c6:eb:f4: b8:64:2f:0b:61:3d:76:b7:16:e8:57:3c:23:9c:1b:b1:63:ef: 22:cd:58:2c -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEsARFsSJID4AamaMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgyODAwNDUyNVoXDTI3MTIwMTAxNDUyNVowLzEtMCsGA1UEAxMk MDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN02vl2QbSV2cxJzzLcIUoO060fhngO2YfvL FHIeWgfjzp/okZQ8l0kDMQYyP2GLixjg5D51Whp7wbD9tNev40dqsL6eqDDXprwd cbJkOT0EdypTqUhKH8SnGPTLcLl/Ir3DXEVK7dOhZdHBm2gwRPK6FvffPrY+Krmi oxpb4fmtoGJCZz8HY4ODAXWdsXHEkfSkeWPMJdHynAKKhjVsBp3Ii0jKqM3sSSnQ mpd84LdW5A18jWlUH3uYHnDHu8l8d3eTibaefuixsSXHsD1og4YJR+z6PmUn9Q27 jze2YANA9hDLe0eL7U4/lcdP4YxrrdhGcqOUJy9ibinjA8yNZwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGnBn2A9s18VLsGCWtKjF7cSJDtrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAzNmQ2ZGE0LWY1OTAtNGRhOC1h MjJmLTU1NTExZGE5OGVlNS8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRh OThlZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAM0gCgDBADAXGEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgciMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGKli0wOO7FwGAIN8/GAOLj1cviP997StiUby8IP Lh0cv1V0f6GVoP0POYQhgC8+3o1bcOokY8NNRdmfB5a6YZcMlXig5/MPxoA+FB0P yU0KJcWp5/DlkwZf+su6pFopzMzwBvAH1LolFWOokftGjdQ7vHfPTIJLPXnCHawh hZKeX2yepzyPsI073ldYyHR9Iax9Zhn/OZeRCGc7IxNvCkPHJSSxvHD+gRwiasGA FMDF3GY/UYL9VikGtyUmGVWCNk/g8EyLT3+xp8Byvf8IenY8IhtLBSOhxkFurPex 8IwBnBEcSNGj38br9LhkLwthPXa3FuhXPCOcG7Fj7yLNWCw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:38 2025 by rpki-client