$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer File: 53ff129b-845f-449d-8e32-2b24ecbefea4.cer (raw, json) Hash identifier: 0Dd0NiKRZhIpCWavy0ILlvavj678GKD2N/dbj+AQswY= Subject key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B5DCA4304350C4D647DDC3200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 12:45:24 +0000 Certificate not after: Mon 03 Jan 2028 13:45:24 +0000 Subordinate resources: AS: 35923 IP: 199.65.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:ca:43:04:35:0c:4d:64:7d:dc:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 30 12:45:24 2025 GMT Not After : Jan 3 13:45:24 2028 GMT Subject: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:f6:13:a6:46:47:ff:5e:c6:10:d0:e1:7d: 32:c9:4e:82:bb:b2:eb:50:f6:a2:5f:09:0c:cd:fd: 67:9f:e9:ed:e0:ee:67:a8:2b:96:9e:ba:f4:31:ff: e9:cf:5f:df:c8:8d:14:bc:ce:8f:b0:04:af:27:0d: 76:0a:f3:4f:d0:ab:8a:be:0d:5d:d9:f3:c0:c8:d0: 9f:c3:78:85:02:f7:11:8b:16:48:26:2a:8f:01:41: a5:d1:02:71:e0:30:9b:29:25:6f:65:e6:7b:b7:36: dd:eb:04:08:c9:41:de:33:35:9e:49:ed:66:cf:72: e7:01:6b:af:13:bc:52:da:96:a5:82:da:7e:a9:a8: 69:6f:59:b4:f8:d1:be:4f:c2:d0:b4:8b:83:09:ed: 96:e9:1f:98:d9:5e:69:3b:98:7c:86:1e:49:44:f5: c6:19:65:06:86:95:11:7d:5b:41:df:28:1f:fe:ab: 8e:89:00:5e:db:93:b0:77:b2:76:8e:fc:30:68:43: 09:68:62:e9:09:e5:ca:61:ae:3a:a3:6b:34:10:53: 15:97:dc:7e:ec:ac:8e:9c:99:ce:85:da:0b:57:e9: 0a:69:9f:1b:81:4a:93:ae:d2:62:9f:e7:49:6c:00: c2:d2:b6:94:c9:ee:d6:59:8f:3b:d0:e5:aa:be:90: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35923 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d9:64:a1:6c:7a:86:32:50:b9:a2:5a:a1:d6:a2:f0:5a:50: 27:4e:2e:d2:27:aa:fe:6a:b6:00:ae:df:a9:d7:dc:69:d4:7a: 33:65:3d:75:b8:2d:d8:1b:d6:71:cb:84:cd:39:e4:62:d9:99: fa:b3:ee:16:3f:2d:9e:1f:25:2d:9c:41:da:4f:d7:ad:72:82: 14:a5:6a:2b:4f:bc:d1:a1:e7:9f:81:ba:2b:79:19:b9:8a:29: 19:d7:63:c1:a4:e0:fb:98:fb:1d:5c:99:ca:23:d8:00:b5:f2: bd:27:08:f4:ff:d1:48:7a:1c:91:39:8a:ad:f0:5a:ea:3d:f1: 09:a2:37:a0:7f:18:b0:2c:bc:2e:8b:07:9c:7d:12:b7:ea:cd: 64:ef:7d:16:fa:6b:09:c8:f9:3a:6a:9b:7a:61:23:47:a6:14: b1:a6:d4:45:4e:6c:72:db:b2:27:7b:a9:40:f1:08:91:d4:9a: af:0e:ba:0a:bd:83:46:d7:13:f3:d4:a5:2a:20:8d:94:95:ab: 4b:e5:05:82:8b:8d:9d:c5:70:71:b0:a2:76:45:79:4c:77:dd: ad:78:cf:a3:f7:b9:76:a3:da:a7:ce:f1:da:9e:c1:18:00:07: da:92:0f:c1:cd:e6:78:a6:f8:f1:6b:bb:7a:8c:af:45:65:1b: 2c:ae:3f:01 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtdykMENQxNZH3cMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkzMDEyNDUyNFoXDTI4MDEwMzEzNDUyNFowLzEtMCsGA1UEAxMk NTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVmZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+72E6ZGR/9exhDQ4X0yyU6Cu7LrUPaiXwkM zf1nn+nt4O5nqCuWnrr0Mf/pz1/fyI0UvM6PsASvJw12CvNP0KuKvg1d2fPAyNCf w3iFAvcRixZIJiqPAUGl0QJx4DCbKSVvZeZ7tzbd6wQIyUHeMzWeSe1mz3LnAWuv E7xS2palgtp+qahpb1m0+NG+T8LQtIuDCe2W6R+Y2V5pO5h8hh5JRPXGGWUGhpUR fVtB3ygf/quOiQBe25Owd7J2jvwwaEMJaGLpCeXKYa46o2s0EFMVl9x+7KyOnJnO hdoLV+kKaZ8bgUqTrtJin+dJbADC0raUye7WWY870OWqvpCsowIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAwd7SWhFfI1yUfFa50Iqb4I6DVAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUzZmYxMjliLTg0NWYtNDQ5ZC04 ZTMyLTJiMjRlY2JlZmVhNC81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNi ZWZlYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATHQfAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIxTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACTZZKFseoYyULmiWqHWovBaUCdOLtInqv5qtgCu36nX3GnU ejNlPXW4Ldgb1nHLhM055GLZmfqz7hY/LZ4fJS2cQdpP161yghSlaitPvNGh55+B uit5GbmKKRnXY8Gk4PuY+x1cmcoj2AC18r0nCPT/0Uh6HJE5iq3wWuo98QmiN6B/ GLAsvC6LB5x9ErfqzWTvfRb6awnI+Tpqm3phI0emFLGm1EVObHLbsid7qUDxCJHU mq8Ougq9g0bXE/PUpSogjZSVq0vlBYKLjZ3FcHGwonZFeUx33a14z6P3uXaj2qfO 8dqewRgAB9qSD8HN5nim+PFru3qMr0VlGyyuPwE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:04 2025 by rpki-client