$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af.cer File: 40057576-f6e8-41e7-ac15-9662c9d4a3af.cer (raw, json) Hash identifier: jWBiSMMhTlpixflwkzsVgiQyZaHFIqX0N4FenCnD9ys= Subject key identifier: 04:03:D6:5C:0C:25:50:14:05:85:05:38:59:A2:48:95:FB:51:8F:62 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B9C9AA5AF77DBCAFC42B79500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/40057576-f6e8-41e7-ac15-9662c9d4a3af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 00:45:24 +0000 Certificate not after: Wed 26 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 36063 IP: 66.203.128.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:9a:a5:af:77:db:ca:fc:42:b7:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 23 00:45:24 2025 GMT Not After : Jan 26 01:45:24 2028 GMT Subject: CN=40057576-f6e8-41e7-ac15-9662c9d4a3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:86:1a:d6:79:6e:55:08:92:0d:56:ef:51: f4:e5:12:49:58:52:5e:70:8c:40:48:9c:34:93:a4: 13:5a:6e:5c:e2:0f:a0:b0:dd:1f:09:e2:66:75:47: 15:1d:cf:de:c9:16:3a:2d:39:32:ba:d7:f7:a0:ed: 18:7c:9f:03:10:c0:c5:44:02:ac:d2:54:d0:b6:6d: 67:f8:ae:9a:13:57:c9:f8:67:57:8b:29:c6:26:46: 3e:eb:8f:97:78:49:9c:7d:67:4f:b1:8a:1c:ee:a5: e0:8e:d8:93:41:95:32:f5:b6:ca:1f:60:65:3b:eb: ca:26:79:df:87:e3:f5:d7:fd:09:6d:af:8c:c5:e1: 90:5e:42:4b:8b:ee:af:64:ff:61:db:b2:06:d1:b6: 85:f5:f7:11:4e:3e:4e:4d:5f:a9:63:9f:38:06:bc: 59:d9:65:9e:fd:1b:cd:19:70:f9:92:0e:e0:32:52: 65:1d:70:06:33:41:5f:3d:a5:47:df:aa:54:77:e0: db:3e:d2:a0:62:6a:74:21:28:d3:04:24:89:be:22: 75:50:d2:af:6c:2c:f2:08:3b:39:c7:ff:c9:da:a7: 2c:5c:3f:a7:50:18:29:c9:d2:1e:81:5b:b6:81:1e: 5c:2f:c0:3d:5d:3b:b6:38:d5:ab:5d:b2:ea:b3:be: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:D6:5C:0C:25:50:14:05:85:05:38:59:A2:48:95:FB:51:8F:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/40057576-f6e8-41e7-ac15-9662c9d4a3af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.203.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36063 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c0:5d:e6:c6:ce:2f:22:20:96:8e:ab:fd:77:5d:9a:a9:05: c4:7c:47:8b:de:31:f5:b1:ab:a7:1e:67:ee:76:81:0a:26:fe: d2:1e:f5:eb:1e:cb:21:cd:bb:96:cd:89:23:9b:b5:cd:5a:4b: 3c:26:da:08:7f:80:5b:bf:62:6b:a2:5b:48:a9:a3:46:36:b2: e2:25:4c:e4:5c:78:35:e8:2d:95:42:8f:98:b4:54:88:3d:47: 79:50:fe:5e:60:48:b9:4a:f2:a0:5c:1a:ce:35:69:af:ad:55: cd:4d:88:ec:34:95:b4:3d:d2:d7:07:70:4b:5e:16:fb:98:9b: 1c:9b:81:e9:1c:26:71:49:ca:ce:11:d5:fe:25:b3:95:e9:02: ad:dc:1e:3d:d4:1f:13:ea:01:33:8e:b2:8e:97:9e:09:4b:7b: 9e:22:52:1d:5b:05:9e:2e:8b:18:3a:06:c0:a1:b8:69:8f:26: cc:2b:36:51:c7:35:59:30:8f:6d:ef:58:1d:c2:64:67:74:2a: 05:8a:01:90:40:a0:33:b9:d8:c8:b7:64:ba:f5:38:a1:51:30: 33:ab:ae:e1:92:34:73:ac:ce:e8:13:a7:8f:63:e9:f5:49:e5: fc:ef:7e:f1:2e:8f:c1:b7:7c:19:c3:55:a1:79:bc:df:ee:ab: e4:c2:eb:6e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEucmqWvd9vK/EK3lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyMzAwNDUyNFoXDTI4MDEyNjAxNDUyNFowLzEtMCsGA1UEAxMk NDAwNTc1NzYtZjZlOC00MWU3LWFjMTUtOTY2MmM5ZDRhM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biGGtZ5blUIkg1W71H05RJJWFJecIxASJw0 k6QTWm5c4g+gsN0fCeJmdUcVHc/eyRY6LTkyutf3oO0YfJ8DEMDFRAKs0lTQtm1n +K6aE1fJ+GdXiynGJkY+64+XeEmcfWdPsYoc7qXgjtiTQZUy9bbKH2BlO+vKJnnf h+P11/0Jba+MxeGQXkJLi+6vZP9h27IG0baF9fcRTj5OTV+pY584BrxZ2WWe/RvN GXD5kg7gMlJlHXAGM0FfPaVH36pUd+DbPtKgYmp0ISjTBCSJviJ1UNKvbCzyCDs5 x//J2qcsXD+nUBgpydIegVu2gR5cL8A9XTu2ONWrXbLqs7655wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAQD1lwMJVAUBYUFOFmiSJX7UY9iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MDA1NzU3Ni1mNmU4LTQxZTctYWMxNS05NjYyYzlkNGEzYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQwMDU3NTc2LWY2ZTgtNDFlNy1h YzE1LTk2NjJjOWQ0YTNhZi80MDA1NzU3Ni1mNmU4LTQxZTctYWMxNS05NjYyYzlk NGEzYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARCy4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIzfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABjAXebGzi8iIJaOq/13XZqpBcR8R4veMfWxq6ceZ+52gQom /tIe9eseyyHNu5bNiSObtc1aSzwm2gh/gFu/YmuiW0ipo0Y2suIlTORceDXoLZVC j5i0VIg9R3lQ/l5gSLlK8qBcGs41aa+tVc1NiOw0lbQ90tcHcEteFvuYmxybgekc JnFJys4R1f4ls5XpAq3cHj3UHxPqATOOso6XnglLe54iUh1bBZ4uixg6BsChuGmP JswrNlHHNVkwj23vWB3CZGd0KgWKAZBAoDO52Mi3ZLr1OKFRMDOrruGSNHOszugT p49j6fVJ5fzvfvEuj8G3fBnDVaF5vN/uq+TC624= -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:07 2025 by rpki-client