$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer File: f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer (raw, json) Hash identifier: YLv38lnMTJQLA0tuzQ260r933EF4K+KBLYdlpiiCA2o= Subject key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BA2300400479167C4C064AF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Oct 2025 00:45:24 +0000 Certificate not after: Fri 28 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 30201 IP: 169.197.184.0/22 IP: 2602:fcb5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:30:04:00:47:91:67:c4:c0:64:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 25 00:45:24 2025 GMT Not After : Jan 28 01:45:24 2028 GMT Subject: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:f9:7b:64:46:8e:58:4b:f6:d2:42:4d:22: 06:b5:a9:82:27:5f:be:63:65:e0:a3:e4:56:45:8d: 77:f3:e1:cf:26:fd:2a:90:3a:46:03:ee:e6:64:29: d6:a4:50:e7:79:d1:91:96:80:d3:c7:0d:b2:b6:a1: 91:9c:a1:2b:e1:59:ce:61:52:1b:fd:69:a6:76:c3: 09:1f:68:dc:b0:5b:c3:96:02:0f:9f:51:36:1e:4d: 89:74:70:39:55:37:d6:e4:89:c9:2c:c0:b1:d0:1d: b9:d9:07:f7:ff:52:7d:b3:e0:62:15:a3:3b:5c:ec: 3e:0f:69:b2:89:e2:0d:40:7f:1a:73:2e:61:d5:37: 03:51:cc:14:04:81:59:91:a6:6f:ba:2d:40:93:cc: d4:a1:fb:51:c9:58:36:ea:42:82:9a:9a:49:88:66: d4:43:36:c5:9a:a5:5e:ba:74:aa:b0:e8:c1:13:42: 5b:7a:71:11:6a:d2:64:82:7d:f0:d5:59:10:95:71: 3f:b8:a0:3e:73:16:c7:7c:14:3a:36:46:2c:b1:aa: 96:18:3b:c4:12:ff:8d:af:7d:c4:d0:46:6b:78:ff: 36:32:d2:15:b4:e4:72:65:86:21:b5:0f:02:98:d7: 4d:65:ec:bf:3b:0c:8a:51:6a:ef:d5:5b:24:47:5b: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 169.197.184.0/22 IPv6: 2602:fcb5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:49:f6:0a:a0:ea:ca:f8:de:73:36:b7:4a:0a:52:a4:af:0b: 9a:28:d8:35:47:2a:52:d7:e6:42:5a:51:fd:7b:a6:6f:d3:fc: 48:1c:b1:27:e8:4c:42:6f:87:84:37:1c:ee:0a:71:be:a5:71: 0c:8b:af:21:7f:d2:72:f1:51:30:6a:9b:b3:ed:ca:5f:ba:67: 31:44:7c:ca:56:b8:8e:6b:fd:d8:a4:f3:20:35:bc:8b:c9:c2: a0:bf:49:75:ad:ae:e4:51:d1:3a:ce:43:15:8a:b5:92:76:a9: 66:27:62:5a:67:e2:05:87:53:6f:19:2d:a7:4d:4c:17:1a:b1: bb:47:91:8b:eb:e5:36:f5:f8:d9:82:7b:07:e6:0f:a1:16:db: b4:53:f1:5d:98:42:56:13:03:73:f1:25:c0:fd:00:89:bf:48: 3f:31:04:4e:d3:6a:1f:3d:d3:9f:91:db:08:c8:25:31:45:53: 73:3b:4a:e9:03:ea:96:84:ac:6b:f4:fe:53:88:57:0e:25:a2: 2e:e9:69:9d:7c:b0:dc:01:16:64:9a:82:4d:19:f2:68:fe:99: ee:5e:b1:69:5b:3d:08:b2:b7:b4:63:ee:0f:86:14:b5:22:7d: e0:f5:49:ef:78:33:51:6e:21:4d:49:62:88:a1:c6:f7:f5:f4: 75:24:71:5f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuiMAQAR5FnxMBkr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyNTAwNDUyNFoXDTI4MDEyODAxNDUyNFowLzEtMCsGA1UEAxMk ZjM4YzdjYTQtM2E0MS00MTM0LWExMjctODFkYzE0MGJjN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG35e2RGjlhL9tJCTSIGtamCJ1++Y2Xgo+RW RY138+HPJv0qkDpGA+7mZCnWpFDnedGRloDTxw2ytqGRnKEr4VnOYVIb/WmmdsMJ H2jcsFvDlgIPn1E2Hk2JdHA5VTfW5InJLMCx0B252Qf3/1J9s+BiFaM7XOw+D2my ieINQH8acy5h1TcDUcwUBIFZkaZvui1Ak8zUoftRyVg26kKCmppJiGbUQzbFmqVe unSqsOjBE0JbenERatJkgn3w1VkQlXE/uKA+cxbHfBQ6NkYssaqWGDvEEv+Nr33E 0EZreP82MtIVtORyZYYhtQ8CmNdNZey/OwyKUWrv1VskR1s/kQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKHH3C+QFQaDwDx8W2iAPowYVhx5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m MzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQwYmM3YTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YzOGM3Y2E0LTNhNDEtNDEzNC1h MTI3LTgxZGMxNDBiYzdhOS9mMzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQw YmM3YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKpxbgwDgQCAAIwCAMGBCYC/LUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnX5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEtJ9gqg6sr43nM2t0oKUqSvC5oo 2DVHKlLX5kJaUf17pm/T/EgcsSfoTEJvh4Q3HO4Kcb6lcQyLryF/0nLxUTBqm7Pt yl+6ZzFEfMpWuI5r/dik8yA1vIvJwqC/SXWtruRR0TrOQxWKtZJ2qWYnYlpn4gWH U28ZLadNTBcasbtHkYvr5Tb1+NmCewfmD6EW27RT8V2YQlYTA3PxJcD9AIm/SD8x BE7Tah8905+R2wjIJTFFU3M7SukD6paErGv0/lOIVw4loi7paZ18sNwBFmSagk0Z 8mj+me5esWlbPQiyt7Rj7g+GFLUifeD1Se94M1FuIU1JYoihxvf19HUkcV8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:02:23 2025 by rpki-client