$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer File: d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer (raw, json) Hash identifier: te6H7YDdjB2DN75c/11UCsWuAAQodfkKIGT2DpemUZM= Subject key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority key identifier: F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 Certificate issuer: /CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Certificate serial: 010D0C9F4328584B7124D1B49A58525D502D1C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml Certificate not before: Tue 07 Oct 2025 11:08:14 +0000 Certificate not after: Mon 10 Jan 2028 12:08:14 +0000 Subordinate resources: AS: 399991 IP: 23.249.208.0/20 IP: 23.251.224.0/19 IP: 24.110.64.0/18 IP: 69.169.224.0/20 IP: 76.223.176.0/20 IP: 98.77.0.0/16 IP: 199.127.232.0/22 IP: 199.255.192.0/22 IP: 206.55.128.0/19 IP: 216.221.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:24:d1:b4:9a:58:52:5d:50:2d:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Validity Not Before: Oct 7 11:08:14 2025 GMT Not After : Jan 10 12:08:14 2028 GMT Subject: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:7f:b8:6e:73:17:0d:ff:52:e2:28:dd:8f: 1b:7f:ae:38:1a:36:00:6e:df:b8:a5:7d:26:d6:a9: 17:39:7f:ee:df:3b:b4:b6:95:9d:66:fd:2a:c2:18: d2:fd:79:7a:47:b1:51:03:26:99:83:bd:c7:7f:6e: e0:da:5f:ca:50:05:14:c6:98:db:6f:42:47:6b:9f: a9:f0:f9:0e:80:6e:b2:a5:31:0f:9b:99:31:30:bb: e1:8f:2d:3f:1d:1d:44:09:84:38:f4:c6:2a:ca:93: 37:40:7c:dd:f0:c6:78:4c:34:6b:31:e3:c9:c2:a6: 1b:16:52:79:ab:84:95:82:4b:52:3b:2e:1d:cb:40: b8:c6:bf:a8:6f:aa:33:3b:b5:b3:6e:fb:66:0d:5a: e2:5d:a6:e3:6c:ab:58:33:bf:14:30:3c:2c:c5:5e: 97:81:d5:90:37:05:84:e2:9a:7e:f3:36:89:64:c3: fa:15:f8:6f:60:e8:5d:10:0c:f6:d7:3d:19:c6:93: 5c:bc:a4:2a:de:73:3d:5e:e8:84:1b:16:00:f7:62: 1c:bc:3e:94:47:87:42:b8:a2:79:6d:b8:3f:23:6b: 00:dc:f2:25:50:10:76:d8:f9:9a:22:c1:46:7a:91: 78:ab:4d:21:f8:a1:4f:b7:bd:a3:23:d2:25:7e:92: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl X509v3 Authority Key Identifier: keyid:F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 23.251.224.0/19 24.110.64.0/18 69.169.224.0/20 76.223.176.0/20 98.77.0.0/16 199.127.232.0/22 199.255.192.0/22 206.55.128.0/19 216.221.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:28:f9:ce:22:8f:f8:fa:de:8c:f5:01:0d:bd:a8:a6:46:55: cd:02:0c:2c:0c:2a:ff:f2:b6:9a:32:13:a5:5d:3c:14:58:cf: c5:19:ad:e8:af:82:f1:47:3f:87:d3:2e:a6:8c:c6:d8:40:c3: ed:b1:a1:18:e2:73:69:26:9c:0e:20:4b:52:dd:04:69:82:29: c2:e2:88:6f:5c:85:ac:96:8f:f7:97:e4:e5:4a:25:1b:5a:83: 4b:a0:90:d6:06:38:93:2e:ba:ee:bb:2d:53:e2:4a:c0:28:64: 1a:4a:d5:89:c9:86:dd:ea:0c:63:f3:8c:62:75:fa:f3:18:f8: 92:57:dd:cb:75:2d:6d:f7:4c:92:13:fc:da:0b:07:11:85:26: c0:a4:ea:95:a0:b6:16:dd:bd:8a:3b:a4:84:4d:09:d2:16:0d: d8:67:10:73:bb:5d:4d:60:2d:3f:dc:ba:de:f7:4f:db:34:ff: d4:81:e1:e5:f7:d5:24:67:a6:c0:e3:50:b9:95:13:ea:0c:f2: f3:47:e4:c7:e1:0a:90:e7:c4:94:34:f1:f8:30:5d:70:be:3a: 67:45:cb:75:b7:16:eb:07:44:2f:49:60:77:25:54:8d:37:a2: 49:fe:94:2c:da:5c:2b:e7:6d:59:d6:f5:c7:c5:0b:60:2b:89: 02:c6:e2:13 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEtxJNG0mlhSXVAtHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA1OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhi OTI5MB4XDTI1MTAwNzExMDgxNFoXDTI4MDExMDEyMDgxNFowPTE7MDkGA1UEAxMy ZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJh ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXI3+4bnMXDf9S4ijd jxt/rjgaNgBu37ilfSbWqRc5f+7fO7S2lZ1m/SrCGNL9eXpHsVEDJpmDvcd/buDa X8pQBRTGmNtvQkdrn6nw+Q6AbrKlMQ+bmTEwu+GPLT8dHUQJhDj0xirKkzdAfN3w xnhMNGsx48nCphsWUnmrhJWCS1I7Lh3LQLjGv6hvqjM7tbNu+2YNWuJdpuNsq1gz vxQwPCzFXpeB1ZA3BYTimn7zNolkw/oV+G9g6F0QDPbXPRnGk1y8pCrecz1e6IQb FgD3Yhy8PpRHh0K4onltuD8jawDc8iVQEHbY+ZoiwUZ6kXirTSH4oU+3vaMj0iV+ knA/AgMBAAGjggRBMIIEPTAdBgNVHQ4EFgQUvJOucQ+vFCI2CC+O2WtWy6nVAo0w ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMz MTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFk ZDI1LWMzMTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5 MGRNSjM3MmRLdlUubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2I4YTFkZDI1LWMzMTMtNGYyNS1h YzIxLWJmNTU1MTRkOWM3ZC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyLzEwNTliNTJkLTg0NmEtNGNiZS1hN2RiLTc5NmYxZGQ4YjkyOS8xMDU5YjUy ZC04NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkuY3JsMB8GA1UdIwQYMBaAFPAt /iFyCbdEMk/n/0SJS55qD494MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTA1 OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhiOTI5LmNlcjBUBggrBgEFBQcB BwEB/wRFMEMwQQQCAAEwOwMEBBf50AMEBRf74AMEBhhuQAMEBEWp4AMEBEzfsAMD AGJNAwQCx3/oAwQCx//AAwQFzjeAAwQF2N2gMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwYadzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQB2KPnOIo/4+t6M9QENvaimRlXNAgwsDCr/8raaMhOl XTwUWM/FGa3or4LxRz+H0y6mjMbYQMPtsaEY4nNpJpwOIEtS3QRpginC4ohvXIWs lo/3l+TlSiUbWoNLoJDWBjiTLrruuy1T4krAKGQaStWJyYbd6gxj84xidfrzGPiS V93LdS1t90ySE/zaCwcRhSbApOqVoLYW3b2KO6SETQnSFg3YZxBzu11NYC0/3Lre 90/bNP/UgeHl99UkZ6bA41C5lRPqDPLzR+TH4QqQ58SUNPH4MF1wvjpnRct1txbr B0QvSWB3JVSNN6JJ/pQs2lwr521Z1vXHxQtgK4kCxuIT -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:51 2025 by rpki-client