$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480.cer File: 48a2536b-8c10-4195-83a4-071446d71480.cer (raw, json) Hash identifier: fyZR1HSMyJ42vsM8x+B1E9Yslo/0htAbD7PK7M32SWc= Subject key identifier: 35:5B:CF:21:9D:7F:91:9F:74:9F:E6:60:3C:CD:04:F1:3F:B9:C4:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B615083D08F8FF0D1CE9D3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/48a2536b-8c10-4195-83a4-071446d71480.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 19:03:20 +0000 Certificate not after: Mon 25 Jan 2027 13:45:27 +0000 Subordinate resources: AS: 14946 AS: 393310 IP: 198.97.226.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:50:83:d0:8f:8f:f0:d1:ce:9d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 1 19:03:20 2025 GMT Not After : Jan 25 13:45:27 2027 GMT Subject: CN=48a2536b-8c10-4195-83a4-071446d71480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:7b:d7:70:8f:cd:b1:a6:3c:6b:c7:c3:21: d4:74:35:e5:ca:f6:81:11:d1:ef:55:57:15:13:aa: a8:8e:fe:64:4f:92:86:79:ea:01:aa:3c:09:da:4a: f4:d6:9c:6f:3c:27:26:31:63:fe:1a:17:0b:07:1f: 0c:2a:7d:4f:a2:7b:8b:35:c1:64:0d:e3:34:ff:73: d7:34:b0:41:72:35:98:e6:1a:cb:48:84:30:c0:7d: f3:ba:f4:10:66:d6:d0:2f:3e:44:61:9c:13:26:2f: 1d:1d:fd:1b:23:b2:0e:51:6e:0e:d4:96:01:8e:2d: 4d:88:dc:14:23:d7:43:4e:af:02:31:8a:9e:aa:f8: 8d:39:c7:80:ba:b1:9a:da:15:a5:09:bf:61:aa:75: 1a:81:40:00:63:a3:49:2b:9f:53:d8:5c:5b:93:f7: ef:a8:e3:e1:61:e6:25:ff:3b:aa:ed:29:15:b9:f3: 59:c6:72:0c:c3:5e:64:aa:83:7f:b2:f4:d0:12:86: f8:95:b8:e9:a4:f3:db:1c:90:94:f8:d0:97:16:61: 3c:8f:bc:4c:42:c0:0b:46:0a:2d:7f:bc:0c:a7:1a: b5:d6:02:a9:9b:d3:5c:cf:ef:15:04:79:2b:6c:7f: 36:de:73:e1:48:4f:3c:9d:2e:52:a0:53:a9:26:73: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:CF:21:9D:7F:91:9F:74:9F:E6:60:3C:CD:04:F1:3F:B9:C4:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/48a2536b-8c10-4195-83a4-071446d71480.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.97.226.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14946 393310 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7c:b5:f1:21:ad:83:4e:2d:4c:eb:74:ea:d6:29:ff:9f:d9: 92:47:03:bf:09:7c:e5:97:00:f6:18:7d:2c:8a:9d:74:1e:6b: 48:34:05:59:60:0a:ec:6a:45:50:d9:ca:6c:57:87:c5:9e:d3: 44:6d:b6:7d:cc:27:ba:18:00:f9:2b:63:ef:0b:0d:e8:b6:c5: 8a:44:dd:a9:c5:91:b9:d1:b2:6b:71:ab:87:08:dd:1c:78:a7: 98:81:e4:ab:04:02:bc:2d:89:c4:2b:2a:00:b4:a6:24:ba:5d: 48:a9:fb:4b:85:9e:69:ba:be:11:0e:62:99:2b:5c:f0:f7:7f: 2a:39:12:49:4c:a1:0d:86:3e:d5:e8:87:90:7f:9b:d6:63:28: 46:87:e8:87:76:ce:82:1a:f7:e8:44:7b:5f:11:b1:93:b1:f9: 52:d7:f7:01:28:89:36:e3:7d:41:39:70:b0:e1:0e:10:09:d2: 44:ee:36:76:81:48:39:e9:69:d5:c2:cc:b8:ff:f1:22:e5:9c: 0b:56:45:2c:5a:28:89:6f:85:f3:36:c5:ec:5c:c6:92:2e:ab: 23:5f:58:88:a1:56:ec:45:e1:aa:7f:03:c4:a8:c1:3c:5a:d0: 76:d7:a1:0b:67:ef:1b:2c:7e:05:f5:d3:18:9a:4a:8c:bf:5f: e9:22:3a:d7 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEthUIPQj4/w0c6dNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAwMTE5MDMyMFoXDTI3MDEyNTEzNDUyN1owLzEtMCsGA1UEAxMk NDhhMjUzNmItOGMxMC00MTk1LTgzYTQtMDcxNDQ2ZDcxNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlB713CPzbGmPGvHwyHUdDXlyvaBEdHvVVcV E6qojv5kT5KGeeoBqjwJ2kr01pxvPCcmMWP+GhcLBx8MKn1PonuLNcFkDeM0/3PX NLBBcjWY5hrLSIQwwH3zuvQQZtbQLz5EYZwTJi8dHf0bI7IOUW4O1JYBji1NiNwU I9dDTq8CMYqeqviNOceAurGa2hWlCb9hqnUagUAAY6NJK59T2Fxbk/fvqOPhYeYl /zuq7SkVufNZxnIMw15kqoN/svTQEob4lbjppPPbHJCU+NCXFmE8j7xMQsALRgot f7wMpxq11gKpm9Ncz+8VBHkrbH823nPhSE88nS5SoFOpJnM/GwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFDVbzyGdf5GfdJ/mYDzNBPE/ucRIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 OGEyNTM2Yi04YzEwLTQxOTUtODNhNC0wNzE0NDZkNzE0ODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ4YTI1MzZiLThjMTAtNDE5NS04 M2E0LTA3MTQ0NmQ3MTQ4MC80OGEyNTM2Yi04YzEwLTQxOTUtODNhNC0wNzE0NDZk NzE0ODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGYeIwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC OmICAwYAXjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQANfLXxIa2DTi1M63Tq1in/n9mSRwO/CXzllwD2GH0s ip10HmtINAVZYArsakVQ2cpsV4fFntNEbbZ9zCe6GAD5K2PvCw3otsWKRN2pxZG5 0bJrcauHCN0ceKeYgeSrBAK8LYnEKyoAtKYkul1IqftLhZ5pur4RDmKZK1zw938q ORJJTKENhj7V6IeQf5vWYyhGh+iHds6CGvfoRHtfEbGTsflS1/cBKIk2431BOXCw 4Q4QCdJE7jZ2gUg56WnVwsy4//Ei5ZwLVkUsWiiJb4XzNsXsXMaSLqsjX1iIoVbs ReGqfwPEqME8WtB216ELZ+8bLH4F9dMYmkqMv1/pIjrX -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:19 2025 by rpki-client