$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer File: 900e393b-502e-4acc-8781-1980cd140a32.cer (raw, json) Hash identifier: yJLnhHW/Gw4w8m3AkigBKO/RcI1Ut4bHd4xIP2uumOE= Subject key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584BB1C1357DA95F27E4C6DA2320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 14:35:04 +0000 Certificate not after: Wed 02 Feb 2028 15:35:04 +0000 Subordinate resources: AS: 18475 AS: 20453 AS: 33041 IP: 69.88.48.0/20 IP: 74.198.0.0/16 IP: 205.151.8.0/21 IP: 2605:8d80::/32 IP: 2607:f230::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:c1:35:7d:a9:5f:27:e4:c6:da:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 30 14:35:04 2025 GMT Not After : Feb 2 15:35:04 2028 GMT Subject: CN=900e393b-502e-4acc-8781-1980cd140a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:6a:f8:04:89:b1:25:bb:31:b0:7c:5d:8b: d9:36:ee:dc:44:f8:5e:07:38:27:c6:4e:f5:ff:60: ed:3b:5e:3e:e5:dc:ab:36:fd:72:89:d5:52:72:34: 8d:dd:cc:4a:97:70:ab:33:e5:59:7f:ca:17:63:ff: 5b:f6:15:a7:2d:ad:b4:cf:b0:07:f3:2e:20:8d:b5: f9:0c:79:15:bf:4d:44:cd:50:2d:87:c0:00:64:1c: 6b:36:44:c5:ee:cc:47:48:0f:e0:f3:f5:a8:ab:1d: 61:6a:da:1a:7a:6f:07:ec:cb:1d:96:3d:fb:75:76: 81:dc:a8:5a:29:31:d5:41:57:d2:df:89:20:5b:6e: bd:b4:82:22:7f:9d:53:47:8a:11:1c:0e:d7:a3:c5: 20:6a:18:37:15:a6:36:9e:fc:bc:c0:65:95:c9:2d: 70:41:ef:c0:5d:90:6d:b8:08:20:4c:00:be:74:18: 94:85:2a:75:bf:77:58:cb:79:23:ef:07:d5:69:1b: bb:79:ed:f4:26:6d:45:9b:fb:e5:6b:04:ea:b9:67: 88:5a:17:8f:18:a3:17:e5:68:9b:32:f7:20:91:65: 32:ed:67:1d:d7:d4:14:2c:20:2d:6a:d6:76:92:06: 02:e0:b8:54:67:85:3d:f7:d8:6b:15:bf:0a:c1:ee: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 69.88.48.0/20 74.198.0.0/16 205.151.8.0/21 IPv6: 2605:8d80::/32 2607:f230::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18475 20453 33041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:60:1f:19:bb:eb:b8:5d:d2:77:b9:25:57:6e:7d:d3:02:63: f8:28:8c:93:91:6c:a1:8a:5b:65:77:6a:13:d3:8e:e7:00:ad: a5:07:08:47:38:ac:aa:fb:38:98:03:84:70:c2:b5:03:c8:ab: 8e:df:f9:1c:01:57:21:b9:02:45:70:47:4c:9d:2c:e0:38:e8: 75:b4:f5:59:59:cb:de:9f:00:ae:d3:01:61:d8:22:a6:92:40: 39:86:dc:c3:18:35:81:0b:1a:e4:36:3b:0c:ba:1e:b1:b3:e3: 36:2d:57:a6:a1:ef:e8:1d:d5:27:49:54:23:5d:64:85:73:9b: de:51:78:d2:a7:98:7f:56:79:ae:8a:9e:d1:a3:b5:7a:00:a2: 3f:46:92:89:df:89:b7:47:c5:47:34:e6:98:01:f8:3a:38:4d: fa:5e:4e:e0:23:a8:5b:8b:b3:1d:9a:ba:6a:e8:33:15:f1:52: 87:f2:43:32:bf:ed:56:ed:3e:b5:2b:eb:0e:50:a4:d2:c5:ba: 07:7d:5d:13:db:64:3b:b5:66:23:b5:48:89:97:be:69:e1:40: 84:6a:1d:39:77:21:89:f2:ec:12:85:78:a3:96:5e:c9:58:90: 65:5b:ba:a0:5e:91:40:43:2b:a2:c9:4e:49:ff:a1:ce:b4:0a: 23:ed:79:4b -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEuxwTV9qV8n5MbaIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAzMDE0MzUwNFoXDTI4MDIwMjE1MzUwNFowLzEtMCsGA1UEAxMk OTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQwYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Htq+ASJsSW7MbB8XYvZNu7cRPheBzgnxk71 /2DtO14+5dyrNv1yidVScjSN3cxKl3CrM+VZf8oXY/9b9hWnLa20z7AH8y4gjbX5 DHkVv01EzVAth8AAZBxrNkTF7sxHSA/g8/Woqx1hatoaem8H7Msdlj37dXaB3Kha KTHVQVfS34kgW269tIIif51TR4oRHA7Xo8Ugahg3FaY2nvy8wGWVyS1wQe/AXZBt uAggTAC+dBiUhSp1v3dYy3kj7wfVaRu7ee30Jm1Fm/vlawTquWeIWhePGKMX5Wib MvcgkWUy7Wcd19QULCAtatZ2kgYC4LhUZ4U999hrFb8Kwe7PcwIDAQABo4IERDCC BEAwHQYDVR0OBBYEFPCQDma+yDa4ktsK+coq7OMZPCtOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkwMGUzOTNiLTUwMmUtNGFjYy04 NzgxLTE5ODBjZDE0MGEzMi85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2Qx NDBhMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMBcEAgABMBEDBARFWDADAwBKxgMEA82XCDAUBAIAAjAOAwUAJgWN gAMFACYH8jAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICSCsCAk/lAgMAgREwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd2AfGbvruF3Sd7klV2590wJj+CiMk5FsoYpbZXdqE9OO5wCtpQcIRzis qvs4mAOEcMK1A8irjt/5HAFXIbkCRXBHTJ0s4DjodbT1WVnL3p8ArtMBYdgippJA OYbcwxg1gQsa5DY7DLoesbPjNi1XpqHv6B3VJ0lUI11khXOb3lF40qeYf1Z5roqe 0aO1egCiP0aSid+Jt0fFRzTmmAH4OjhN+l5O4COoW4uzHZq6augzFfFSh/JDMr/t Vu0+tSvrDlCk0sW6B31dE9tkO7VmI7VIiZe+aeFAhGodOXchifLsEoV4o5ZeyViQ ZVu6oF6RQEMroslOSf+hzrQKI+15Sw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:02 2025 by rpki-client