$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer File: 529c456a-0a45-44a6-8d94-800e442e44a9.cer (raw, json) Hash identifier: 5k9Ewk9ivzCihY7X0gvT1z9nTxbKWHlvO9Z9cKwrM+Y= Subject key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B5F2F99B81C57273662CF44E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 00:45:24 +0000 Certificate not after: Tue 04 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 394933 IP: 198.252.166.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:2f:99:b8:1c:57:27:36:62:cf:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 1 00:45:24 2025 GMT Not After : Jan 4 01:45:24 2028 GMT Subject: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:6b:e7:ec:16:47:8a:06:c4:5f:67:f8:e1: 83:df:a3:80:c5:40:12:77:0a:a1:e7:5c:c0:4c:d8: 2f:62:37:3c:44:76:c5:48:a1:18:24:52:e8:c1:59: fd:a3:28:c8:87:fb:cd:e0:78:d2:ed:0f:b7:56:03: 16:cb:43:fe:33:cc:a1:18:23:37:9b:01:17:a5:20: 59:0e:95:36:c5:ef:9a:7c:88:48:4e:65:0f:22:93: 4b:fa:5d:dc:52:d3:ea:16:2d:c9:c3:1b:c4:cb:4b: 45:46:cc:85:47:b4:3e:33:78:1e:9f:53:ed:08:d6: 61:86:88:56:d3:43:20:66:47:12:eb:97:c5:ab:c6: 55:eb:bf:0b:fb:ee:da:bb:4c:d2:ba:8e:e7:7d:6a: a5:b3:31:6a:43:db:29:34:aa:d6:8e:37:46:02:82: 6d:11:67:81:4a:e7:a3:1d:93:ef:01:85:cb:f6:0d: 0b:c7:45:1d:e9:63:a4:91:dc:2a:3c:55:f7:a5:8b: 98:f9:44:01:eb:aa:d3:cb:7a:04:83:fb:c5:79:7a: e3:d0:4e:93:94:6d:ea:e3:32:30:6f:17:e5:d9:7f: 9e:65:68:c3:a4:c9:c7:62:67:ce:fe:8e:40:40:24: 64:20:27:90:6c:13:44:5f:6f:c9:c8:6d:c7:45:33: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.252.166.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1f:88:c6:b1:45:57:c0:bd:55:77:33:ab:9c:02:46:18:d5: d4:77:2b:99:30:ff:f3:d3:72:81:52:da:1d:e7:56:21:d3:cd: 31:30:b6:43:62:71:f0:7b:c8:ad:e4:34:27:5d:e0:f2:1e:bc: fc:6a:8b:ac:1c:f5:27:8d:0d:55:40:61:cb:a1:95:fa:45:76: 49:bc:2b:55:0d:13:d8:83:db:45:2b:39:f6:5b:9d:57:00:57: b8:d0:66:f5:8c:4a:30:e3:aa:13:3f:27:6d:f8:b9:f2:ff:d0: 79:d5:c9:bb:91:67:a8:6f:a5:9c:d7:0d:3a:7e:2f:ad:22:40: 04:d6:36:7a:6a:f0:ae:8f:2d:9f:e7:26:71:8f:71:02:f8:d7: ee:e6:df:85:32:1f:64:dc:2f:ba:19:f5:4b:db:24:15:06:3e: c3:c2:c7:cd:da:ed:74:5a:df:63:2d:13:0c:03:96:1b:36:1c: 4e:38:9b:1f:ae:e4:4c:33:04:3b:7b:09:ae:cf:2f:1c:73:09: 7a:6b:9f:f3:3f:8e:bf:e9:8c:c1:bf:ce:91:27:d2:49:99:10: 9e:47:23:51:03:34:52:f3:8c:45:6c:b2:b9:d1:d5:b7:b5:ec: 17:7b:5c:4b:92:27:50:74:41:03:f2:0d:4a:c6:73:20:ba:58: 88:77:19:02 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtfL5m4HFcnNmLPROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwMTAwNDUyNFoXDTI4MDEwNDAxNDUyNFowLzEtMCsGA1UEAxMk NTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZr5+wWR4oGxF9n+OGD36OAxUASdwqh51zA TNgvYjc8RHbFSKEYJFLowVn9oyjIh/vN4HjS7Q+3VgMWy0P+M8yhGCM3mwEXpSBZ DpU2xe+afIhITmUPIpNL+l3cUtPqFi3JwxvEy0tFRsyFR7Q+M3gen1PtCNZhhohW 00MgZkcS65fFq8ZV678L++7au0zSuo7nfWqlszFqQ9spNKrWjjdGAoJtEWeBSuej HZPvAYXL9g0Lx0Ud6WOkkdwqPFX3pYuY+UQB66rTy3oEg/vFeXrj0E6TlG3q4zIw bxfl2X+eZWjDpMnHYmfO/o5AQCRkICeQbBNEX2/JyG3HRTPsdQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHZMqGgLoPYO3NzMZsm07Obhg/CiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUyOWM0NTZhLTBhNDUtNDRhNi04 ZDk0LTgwMGU0NDJlNDRhOS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQy ZTQ0YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHG/KYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bga1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACofiMaxRVfAvVV3M6ucAkYY1dR3K5kw//PTcoFS2h3nViHT zTEwtkNicfB7yK3kNCdd4PIevPxqi6wc9SeNDVVAYcuhlfpFdkm8K1UNE9iD20Ur OfZbnVcAV7jQZvWMSjDjqhM/J234ufL/0HnVybuRZ6hvpZzXDTp+L60iQATWNnpq 8K6PLZ/nJnGPcQL41+7m34UyH2TcL7oZ9UvbJBUGPsPCx83a7XRa32MtEwwDlhs2 HE44mx+u5EwzBDt7Ca7PLxxzCXprn/M/jr/pjMG/zpEn0kmZEJ5HI1EDNFLzjEVs srnR1be17Bd7XEuSJ1B0QQPyDUrGcyC6WIh3GQI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:51:47 2025 by rpki-client