$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer File: 5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer (raw, json) Hash identifier: Qi0eZaNdadq8vk+6OTtZOb87ZtsOos7+W6fCatkhH5I= Subject key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849C4CD21DFC72A42A5B939AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 May 2025 00:45:34 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 14972 IP: 208.75.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:cd:21:df:c7:2a:42:a5:b9:39:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 7 00:45:34 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:90:fe:eb:9c:ab:c6:81:6a:4b:7c:69:d9: 2e:d8:be:ce:10:ae:8a:12:5d:ab:24:95:a7:59:e2: 26:c1:ec:e0:e0:d7:10:fd:c0:e6:77:28:7d:70:88: 6d:69:32:77:9a:51:d8:5c:3b:59:d5:d6:02:81:6d: d5:0e:d7:dd:4a:f5:c8:b9:3e:47:f7:eb:07:7c:ac: 4e:a6:10:31:ee:63:10:1d:1c:b3:e5:66:3d:e6:b7: 54:d0:a2:2c:68:c1:e1:c2:43:fe:1a:b5:a6:3a:aa: 01:a4:db:27:d2:00:f7:53:2e:99:df:2c:5b:08:8c: fa:32:5b:42:6f:94:00:9a:23:a2:a4:c2:db:25:3d: e5:38:ca:7c:f9:ff:88:23:77:43:46:6d:e8:cb:f7: ae:db:42:c4:ef:44:51:e6:f5:ea:79:8e:88:9c:bc: 18:f7:aa:9f:7f:78:93:61:ef:ee:f7:83:c6:b6:d0: 2b:b8:82:b9:b5:fa:44:00:98:b9:4e:17:d1:39:76: 58:ad:8d:3a:aa:28:db:34:a2:89:e7:bb:aa:b8:3c: e3:63:c7:13:77:92:6f:fc:b6:c2:a6:e5:a7:0e:c1: 3c:af:19:b8:ef:c5:5d:16:6b:3c:5e:7d:4c:99:72: 4f:83:46:bc:b9:25:db:c2:8f:b1:e0:45:4f:1c:ef: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 208.75.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:42:2b:f8:e0:e0:ae:3e:7c:8b:16:c9:4c:61:7c:a1:7f:94: 9c:dc:eb:1c:bb:5b:f1:e6:4a:97:f5:4d:cd:a1:2d:65:eb:cd: 29:3a:3c:08:fe:12:ff:51:19:1b:fe:25:c1:97:b4:6b:ed:91: e5:3d:be:c8:c4:59:e1:16:e4:c0:ba:cb:36:a5:66:b8:fc:31: 7e:06:9e:43:4e:4b:28:ec:65:b9:b1:46:d7:d2:af:df:ab:8f: 4f:78:f3:d3:90:9f:d7:70:9f:de:fc:1b:35:f3:c8:fd:8b:ac: e9:72:24:89:15:43:e7:22:ff:dd:5a:64:91:47:c4:e1:e2:4e: 10:bb:d7:13:33:ab:55:57:6c:d8:fc:da:26:5c:69:dc:ec:48: 68:8d:54:f5:01:a6:3d:2b:79:c4:5f:a5:ec:30:bd:69:3a:91: a9:20:cd:3c:b1:c4:84:33:f0:7e:05:87:18:fa:6c:b7:69:1a: 64:c5:ee:ab:0f:04:2a:1a:4c:ab:18:a2:16:8a:b5:23:41:26: 0a:82:b7:3e:92:83:71:11:e5:2f:05:ce:ba:3d:2f:31:bf:9a: 31:40:d4:93:e9:a5:3c:63:ee:c1:d0:64:cf:3b:95:41:c9:b2: 3c:e0:39:d2:06:e2:a4:f3:d8:03:38:8d:41:36:6a:6e:17:16: 5c:00:4b:f3 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnEzSHfxypCpbk5roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDUwNzAwNDUzNFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk NWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNiZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRSQ/uucq8aBakt8adku2L7OEK6KEl2rJJWn WeImwezg4NcQ/cDmdyh9cIhtaTJ3mlHYXDtZ1dYCgW3VDtfdSvXIuT5H9+sHfKxO phAx7mMQHRyz5WY95rdU0KIsaMHhwkP+GrWmOqoBpNsn0gD3Uy6Z3yxbCIz6MltC b5QAmiOipMLbJT3lOMp8+f+II3dDRm3oy/eu20LE70RR5vXqeY6InLwY96qff3iT Ye/u94PGttAruIK5tfpEAJi5ThfROXZYrY06qijbNKKJ57uquDzjY8cTd5Jv/LbC puWnDsE8rxm478VdFms8Xn1MmXJPg0a8uSXbwo+x4EVPHO9LzwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIZdhm61Xr3HHBhG/i3IaCUAsJ+OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVlZDgxYTY2LWY0OWUtNGExNi1h NjQ3LWY3MDllNTVjYmRiMS81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1 Y2JkYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQSzgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OnwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhUIr+ODgrj58ixbJTGF8oX+UnNzrHLtb8eZKl/VNzaEtZevN KTo8CP4S/1EZG/4lwZe0a+2R5T2+yMRZ4RbkwLrLNqVmuPwxfgaeQ05LKOxlubFG 19Kv36uPT3jz05Cf13Cf3vwbNfPI/Yus6XIkiRVD5yL/3VpkkUfE4eJOELvXEzOr VVds2PzaJlxp3OxIaI1U9QGmPSt5xF+l7DC9aTqRqSDNPLHEhDPwfgWHGPpst2ka ZMXuqw8EKhpMqxiiFoq1I0EmCoK3PpKDcRHlLwXOuj0vMb+aMUDUk+mlPGPuwdBk zzuVQcmyPOA50gbipPPYAziNQTZqbhcWXABL8w== -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:12 2025 by rpki-client