$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer File: 5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer (raw, json) Hash identifier: aF6MYsmO4j4humgJ10GJjoeclVHpWj9MiC+3CAEzzGM= Subject key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BB0256F7F50BA328845EDF880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 00:45:24 +0000 Certificate not after: Wed 02 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 54911 IP: 104.171.32.0/20 IP: 2607:10c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:25:6f:7f:50:ba:32:88:45:ed:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 30 00:45:24 2025 GMT Not After : Feb 2 01:45:24 2028 GMT Subject: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:b4:a0:71:e7:30:e2:68:e7:54:f3:2e:39: b7:25:db:f0:64:bc:ec:52:b9:e0:53:bf:2a:5c:6b: 3f:67:fe:bc:90:d0:66:6f:de:33:d8:98:e7:07:6a: ab:19:37:c2:b2:cb:17:e1:04:fa:fd:fc:76:1c:fb: 24:cd:35:e1:67:dc:bc:d6:2f:fc:8a:db:94:fb:ab: 76:11:27:cb:96:c2:cb:8b:d5:82:16:29:8a:b0:aa: 7a:2e:7f:21:8f:70:74:5e:50:65:21:74:a4:49:7b: 35:55:03:4b:62:e3:d8:c2:9f:f7:fb:c6:eb:54:f1: 07:5c:ab:59:4c:29:f2:c1:cf:b4:f5:b1:ce:cc:b5: 51:a7:ca:1d:eb:a4:07:12:6c:20:c4:71:84:f5:42: 62:0a:9f:6c:c1:94:fe:3a:58:04:ec:c2:30:bc:18: a2:b5:7e:87:7b:ea:17:b1:4d:e5:e3:c3:de:03:c6: 42:2b:67:1e:21:3e:58:41:d1:b7:9f:fa:9a:8e:5d: a5:3e:6a:c7:b2:08:6e:0a:3d:f0:51:2a:aa:aa:64: 9e:fc:f5:82:47:62:6a:0e:36:a9:a1:7a:05:e0:be: f9:89:53:a5:6d:ae:9a:d8:cc:38:93:ee:dd:8f:01: 48:f6:c4:db:a5:e1:b5:b1:80:e2:7e:21:73:3a:1b: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.171.32.0/20 IPv6: 2607:10c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54911 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:41:79:52:0f:c3:45:c3:e0:0d:4c:d8:b5:a5:1d:da:27:4a: 8b:2d:10:18:45:47:17:fd:fc:ba:ee:90:47:19:ef:4d:8e:0e: 26:7a:e3:28:26:fb:d4:9e:e9:b8:6a:99:6a:3f:12:fc:b6:ca: 6c:c6:e6:ab:03:51:96:bb:d0:06:37:7d:6c:75:5e:7f:55:c7: 85:3e:dd:9f:89:1d:32:b3:f5:ad:94:c7:21:0c:b0:18:26:a1: 6c:45:61:3a:f9:84:4e:fd:da:bf:91:b4:49:99:d2:30:20:e7: f8:3e:7f:1c:79:ed:28:a3:eb:52:26:d3:de:67:de:ee:39:aa: 1c:c0:bf:7a:5c:1a:91:f8:21:8f:01:2b:2e:f2:0a:fd:fb:d8: 60:66:b2:af:8b:14:6a:df:3a:df:53:6d:4b:e6:68:62:6e:79: 2f:34:67:f6:07:fb:68:87:dc:ca:a0:bc:05:f9:ea:24:bb:74: bf:43:d2:48:94:cc:d5:71:ff:19:30:ac:35:a2:7a:54:68:ea: aa:68:fd:f8:b7:88:6a:df:29:4b:48:ed:df:17:72:b4:a7:fa: 52:29:b9:cc:59:40:12:0c:5f:d4:ea:c8:1c:0f:b7:48:bc:d2: e5:10:36:c5:f7:cc:a6:79:c9:6c:1d:29:29:44:63:3a:64:48: e5:a2:d5:e7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuwJW9/ULoyiEXt+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAzMDAwNDUyNFoXDTI4MDIwMjAxNDUyNFowLzEtMCsGA1UEAxMk NWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEzNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQS0oHHnMOJo51TzLjm3JdvwZLzsUrngU78q XGs/Z/68kNBmb94z2JjnB2qrGTfCsssX4QT6/fx2HPskzTXhZ9y81i/8ituU+6t2 ESfLlsLLi9WCFimKsKp6Ln8hj3B0XlBlIXSkSXs1VQNLYuPYwp/3+8brVPEHXKtZ TCnywc+09bHOzLVRp8od66QHEmwgxHGE9UJiCp9swZT+OlgE7MIwvBiitX6He+oX sU3l48PeA8ZCK2ceIT5YQdG3n/qajl2lPmrHsghuCj3wUSqqqmSe/PWCR2JqDjap oXoF4L75iVOlba6a2Mw4k+7djwFI9sTbpeG1sYDifiFzOhttTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFM46ah17zQR0u7PWQ3LPriIj1Kh0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzViYjg5ZjkxLWE5YTEtNGQ4OC1i OWQwLWY3ODgyZWExMzRhOS81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVh MTM0YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARoqyAwDQQCAAIwBwMFACYHEMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANZ/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADVBeVIPw0XD4A1M2LWlHdonSost EBhFRxf9/LrukEcZ702ODiZ64ygm+9Se6bhqmWo/Evy2ymzG5qsDUZa70AY3fWx1 Xn9Vx4U+3Z+JHTKz9a2UxyEMsBgmoWxFYTr5hE792r+RtEmZ0jAg5/g+fxx57Sij 61Im095n3u45qhzAv3pcGpH4IY8BKy7yCv372GBmsq+LFGrfOt9TbUvmaGJueS80 Z/YH+2iH3MqgvAX56iS7dL9D0kiUzNVx/xkwrDWielRo6qpo/fi3iGrfKUtI7d8X crSn+lIpucxZQBIMX9TqyBwPt0i80uUQNsX3zKZ5yWwdKSlEYzpkSOWi1ec= -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:48 2025 by rpki-client