$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer File: e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer (raw, json) Hash identifier: JdhFfi1ubb57YoR/954Kmr3r3jkeF/xmjF16xVNQ3l4= Subject key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AFD79AABA62414CB715B43200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Aug 2025 00:45:25 +0000 Certificate not after: Tue 30 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 11546 AS: 11920 IP: 64.39.240.0/20 IP: 64.89.176.0/20 IP: 216.128.208.0/20 IP: 2600:900::/28 IP: 2620:53:8000::/48 IP: 2620:d5::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:79:aa:ba:62:41:4c:b7:15:b4:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 27 00:45:25 2025 GMT Not After : Nov 30 01:45:25 2027 GMT Subject: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:16:90:1e:64:b9:c2:d5:4e:1e:ef:fc:d7: 5c:95:8f:64:d2:25:81:4d:1a:ac:7f:11:ef:13:97: 23:b8:4a:35:ab:34:e4:b6:49:b0:13:18:8b:1b:f5: 3f:4b:36:80:bb:26:96:7e:87:2c:ef:ef:fd:84:51: 51:8d:dd:b7:2b:ff:84:08:c3:8c:39:86:c4:ad:50: 3a:15:28:d1:f6:20:1d:ff:d2:80:86:34:1e:09:72: 73:dd:36:79:0c:b3:5c:e7:80:06:a1:da:0d:60:cf: fd:c7:6d:3b:7c:93:34:96:cf:c9:45:6a:41:37:92: 51:d4:4b:f1:b0:4e:bd:82:8f:67:d3:2d:cc:cf:f5: cc:b3:34:7e:68:a0:2f:14:2a:d3:a2:6c:f7:de:9c: 86:28:ca:a7:8b:46:55:63:49:cc:86:8f:bb:0b:f0: 37:32:10:6f:61:10:74:be:eb:83:92:fe:64:f1:a5: af:a1:35:8b:03:a3:08:2c:27:c0:9c:d7:f9:41:a6: 18:d0:81:ec:1d:9e:04:84:d2:f2:24:cd:45:6f:9d: 93:12:a2:d8:03:2f:be:26:65:59:b7:89:60:c6:94: 3c:35:b4:cb:25:44:cb:9b:4b:53:68:9c:ca:87:57: 18:83:fb:e2:2f:96:4b:ad:f9:c1:e0:a6:e2:b5:1e: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.39.240.0/20 64.89.176.0/20 216.128.208.0/20 IPv6: 2600:900::/28 2620:53:8000::/48 2620:d5::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11546 11920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ae:86:c8:45:84:d5:1b:0d:0d:61:ae:66:59:35:a7:38:55: 1f:c4:93:20:bc:ce:d3:28:4f:30:b7:91:b7:27:cc:bd:92:ae: 61:8e:a8:79:2f:90:3d:fa:bc:c7:49:09:05:56:a5:49:86:8e: 47:f1:f7:3b:73:2d:2a:09:1a:9f:c1:ca:7a:8c:64:79:42:31: a1:ab:3a:6a:2c:82:80:e9:40:03:10:50:ff:31:11:b7:d6:68: fd:08:ab:fa:41:f2:b4:76:f7:f8:9c:58:af:5c:70:42:55:dc: a8:e3:55:6f:99:03:a0:d7:3f:93:b7:f5:7d:24:e1:6a:7e:b4: 28:6b:7a:fa:cf:56:a0:3d:f7:3e:04:06:e6:ba:a3:41:8d:5f: 35:c6:7e:d6:0a:98:bf:81:fd:96:87:6a:cf:3e:34:e5:cf:41: 73:48:37:3d:aa:34:ba:2e:4d:1c:6c:52:aa:56:6d:31:cb:ef: aa:b2:22:0b:f3:08:40:14:e3:7d:05:1d:34:8b:4c:d3:9f:b5: 5c:e0:f1:f0:cc:0e:30:fd:4b:ea:3f:34:90:8f:63:12:af:6c: ba:b6:a4:fd:3d:62:f0:48:96:2c:cf:1d:38:7c:eb:17:68:2f: e0:ca:6c:e6:b1:15:60:b9:cf:47:17:00:f6:de:99:3d:9b:25: 45:a5:f9:3d -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEr9eaq6YkFMtxW0MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDgyNzAwNDUyNVoXDTI3MTEzMDAxNDUyNVowLzEtMCsGA1UEAxMk ZTE0ZWJkNWYtZDcyZi00ZmZlLWFlY2QtYWQyZDJiMWE4ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyYWkB5kucLVTh7v/NdclY9k0iWBTRqsfxHv E5cjuEo1qzTktkmwExiLG/U/SzaAuyaWfocs7+/9hFFRjd23K/+ECMOMOYbErVA6 FSjR9iAd/9KAhjQeCXJz3TZ5DLNc54AGodoNYM/9x207fJM0ls/JRWpBN5JR1Evx sE69go9n0y3Mz/XMszR+aKAvFCrTomz33pyGKMqni0ZVY0nMho+7C/A3MhBvYRB0 vuuDkv5k8aWvoTWLA6MILCfAnNf5QaYY0IHsHZ4EhNLyJM1Fb52TEqLYAy++JmVZ t4lgxpQ8NbTLJUTLm0tTaJzKh1cYg/viL5ZLrfnB4KbitR5VuwIDAQABo4IESzCC BEcwHQYDVR0OBBYEFCiTlrorsDy5JgrJ45t8jsy0iDG5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIxYThlZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UxNGViZDVmLWQ3MmYtNGZmZS1h ZWNkLWFkMmQyYjFhOGVmZi9lMTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIx YThlZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MBgEAgABMBIDBARAJ/ADBARAWbADBATYgNAwHwQCAAIwGQMFBCYA CQADBwAmIABTgAADBwAmIADVAAAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICLRoC Ai6QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIyuhshFhNUbDQ1hrmZZNac4VR/EkyC8ztMoTzC3kbcnzL2S rmGOqHkvkD36vMdJCQVWpUmGjkfx9ztzLSoJGp/BynqMZHlCMaGrOmosgoDpQAMQ UP8xEbfWaP0Iq/pB8rR29/icWK9ccEJV3KjjVW+ZA6DXP5O39X0k4Wp+tChrevrP VqA99z4EBua6o0GNXzXGftYKmL+B/ZaHas8+NOXPQXNINz2qNLouTRxsUqpWbTHL 76qyIgvzCEAU430FHTSLTNOftVzg8fDMDjD9S+o/NJCPYxKvbLq2pP09YvBIlizP HTh86xdoL+DKbOaxFWC5z0cXAPbemT2bJUWl+T0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:30 2025 by rpki-client