$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer File: 28635d6a-8623-4918-823a-dc1ad56ec1bd.cer (raw, json) Hash identifier: CQmJSCzqZHB1pQCBceuXCSx1dBOQ8wYlqErVtQn5jdQ= Subject key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B1C2F30A3E27F7DBAB6566800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Sep 2025 00:45:25 +0000 Certificate not after: Sat 11 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 53429 IP: 74.123.80.0/22 IP: 199.68.168.0/21 IP: 199.180.208.0/22 IP: 2606:2900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:2f:30:a3:e2:7f:7d:ba:b6:56:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 7 00:45:25 2025 GMT Not After : Dec 11 01:45:25 2027 GMT Subject: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:2e:51:56:d2:e6:8e:dc:3f:f5:f8:05:f4: e9:ba:a2:e5:bf:b9:f7:ea:61:2d:18:5f:dd:90:de: 0d:41:34:03:6f:36:48:72:53:fb:e0:d8:9d:75:35: 90:f0:06:9c:aa:91:06:89:65:f1:51:3c:10:7a:1a: 07:7f:d1:6e:0c:82:68:9d:65:8b:86:a3:3f:58:c5: b5:58:4d:e3:c4:38:7a:d7:f1:d1:a0:0c:0f:12:c2: 20:5a:b6:b7:fe:7e:81:31:31:dc:13:17:12:54:04: a7:d0:a0:5e:73:fa:c0:fb:d7:f9:f9:07:9f:8c:e1: 15:1a:4d:e0:4f:52:55:3b:dd:73:30:91:90:44:13: cb:f9:45:4f:2e:32:8c:87:d2:db:ae:d1:e2:f1:da: 19:bb:ed:c6:e8:ce:87:43:82:a2:9f:cd:33:1b:b3: e5:bd:0d:80:e8:65:e5:7f:f4:5a:bb:ad:e3:0e:fb: 04:cc:d8:eb:88:c9:de:80:a8:87:0d:6a:7c:28:31: e3:9b:e2:b1:03:0e:73:fb:f6:ea:c4:bf:3b:ed:fb: 11:92:2a:1a:9b:0c:d4:c8:82:65:ed:76:7d:55:98: b8:8f:ef:39:50:bd:9d:ed:5c:93:ea:b9:d5:c3:5d: e7:e8:17:fe:5b:21:f8:24:7b:55:d2:d3:26:fe:d7: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.123.80.0/22 199.68.168.0/21 199.180.208.0/22 IPv6: 2606:2900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53429 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4f:cc:0f:3f:31:ca:ea:9e:04:d0:07:44:2d:69:18:b6:e4: 89:cf:6b:c2:4e:97:54:ed:88:a6:02:3f:83:c0:be:d2:50:97: b2:be:a4:ce:15:5a:d6:de:b5:11:16:1a:7d:60:84:00:b0:00: 9c:5a:14:8b:02:5f:41:b2:1e:d7:1a:83:8e:e9:0a:cd:2f:2c: 04:73:d4:72:a2:43:8a:6c:f8:22:47:3b:f8:1b:db:2e:6d:8a: 9f:ca:9f:6e:be:e7:6e:f6:b2:3d:2e:98:34:25:b9:43:08:ea: 91:95:01:e2:a4:e5:70:65:0a:79:68:db:60:f7:a2:23:98:32: 5e:13:21:73:97:c7:94:4c:71:82:a5:13:15:f0:a4:93:6c:30: b7:a8:a8:3a:08:cc:16:e5:1e:48:79:43:ec:c5:c8:43:91:93: 86:78:73:3a:18:1e:c9:7c:9b:5c:89:11:71:8d:ff:2c:db:ee: da:6d:e6:3a:fa:6d:8c:fc:24:ff:d9:08:c9:a5:01:b8:9c:a5: b3:30:31:b6:dc:cc:7f:d4:40:ed:ff:7f:69:ec:22:f5:0c:44: 7f:1a:ff:f3:4c:48:b0:00:44:4c:cf:81:b6:4f:dc:d4:7e:97: 53:f5:cc:56:c1:d0:0b:9d:92:4f:f5:4c:c6:0c:57:69:fa:1b: 64:ba:b4:03 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEscLzCj4n99urZWaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkwNzAwNDUyNVoXDTI3MTIxMTAxNDUyNVowLzEtMCsGA1UEAxMk Mjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVjMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHcuUVbS5o7cP/X4BfTpuqLlv7n36mEtGF/d kN4NQTQDbzZIclP74NiddTWQ8AacqpEGiWXxUTwQehoHf9FuDIJonWWLhqM/WMW1 WE3jxDh61/HRoAwPEsIgWra3/n6BMTHcExcSVASn0KBec/rA+9f5+QefjOEVGk3g T1JVO91zMJGQRBPL+UVPLjKMh9LbrtHi8doZu+3G6M6HQ4Kin80zG7PlvQ2A6GXl f/Rau63jDvsEzNjriMnegKiHDWp8KDHjm+KxAw5z+/bqxL877fsRkioamwzUyIJl 7XZ9VZi4j+85UL2d7VyT6rnVw13n6Bf+WyH4JHtV0tMm/tfJ6QIDAQABo4IENjCC BDIwHQYDVR0OBBYEFO2PxkYj7vqV6jwsKS0MwtBtHmbSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y ODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI4NjM1ZDZhLTg2MjMtNDkxOC04 MjNhLWRjMWFkNTZlYzFiZC8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2 ZWMxYmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJKe1ADBAPHRKgDBALHtNAwDQQCAAIwBwMFACYG KQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANC1MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGlPzA8/Mcrq ngTQB0QtaRi25InPa8JOl1TtiKYCP4PAvtJQl7K+pM4VWtbetREWGn1ghACwAJxa FIsCX0GyHtcag47pCs0vLARz1HKiQ4ps+CJHO/gb2y5tip/Kn26+5272sj0umDQl uUMI6pGVAeKk5XBlCnlo22D3oiOYMl4TIXOXx5RMcYKlExXwpJNsMLeoqDoIzBbl Hkh5Q+zFyEORk4Z4czoYHsl8m1yJEXGN/yzb7tpt5jr6bYz8JP/ZCMmlAbicpbMw MbbczH/UQO3/f2nsIvUMRH8a//NMSLAAREzPgbZP3NR+l1P1zFbB0Audkk/1TMYM V2n6G2S6tAM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:02 2025 by rpki-client