$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer File: 5c7a2328-dcf6-422c-86d8-1338335ce380.cer (raw, json) Hash identifier: F6DUNoFXqrUUc+XLJAc1P09Mjw8vvCgu+rz+abdrvyo= Subject key identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B9E29A5AD2AB02FC5BDB33740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 14:09:20 +0000 Certificate not after: Sun 13 Jun 2027 05:22:58 +0000 Subordinate resources: AS: 20446 AS: 38439 IP: 199.127.129.0/24 IP: 2602:f831::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:29:a5:ad:2a:b0:2f:c5:bd:b3:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 23 14:09:20 2025 GMT Not After : Jun 13 05:22:58 2027 GMT Subject: CN=5c7a2328-dcf6-422c-86d8-1338335ce380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:28:e6:dd:ba:58:36:2f:19:2d:65:d4:ec: 41:48:d6:01:7d:b0:8d:f0:59:14:ce:ee:78:da:b6: 86:d3:4f:2d:f9:f9:b1:20:aa:18:2e:57:14:eb:50: 9e:7c:df:61:72:b6:23:d5:bb:63:fa:65:63:4e:6d: 8b:c2:05:02:1b:06:52:e5:0c:c6:2b:30:d8:57:aa: f2:74:0c:f5:20:76:8b:a5:5b:72:0c:49:a4:3f:04: 1b:95:b2:13:8d:f3:76:88:8f:d4:e7:c2:7c:8e:1d: 30:eb:75:00:d5:f6:a4:c9:0e:56:bf:e2:81:53:3e: 9e:09:b2:1d:d8:7c:c3:a0:ba:71:c2:9b:57:12:69: 28:8c:51:33:64:06:dd:bd:3d:89:0f:1a:a4:9f:6d: 67:24:a9:e9:a2:e8:03:66:6e:1c:e7:40:dd:38:96: 9e:f2:1c:b0:56:31:71:92:f2:20:a3:19:3e:b8:78: ee:87:6e:d9:a5:61:95:8e:1c:52:ae:3c:72:66:09: e1:83:6c:63:df:63:fd:38:f3:e2:70:c0:c0:7a:36: b6:bc:bf:af:41:e3:5e:78:51:e0:db:67:6f:9b:7c: 3d:73:ca:47:62:06:42:c4:79:f8:89:fd:63:1c:1d: f8:f7:71:da:ce:57:45:38:de:49:22:40:29:06:da: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.127.129.0/24 IPv6: 2602:f831::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20446 38439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:4c:ad:e3:8c:b2:59:a9:cd:db:6d:03:4e:e3:5d:3c:e5:cf: 1b:aa:d7:e2:52:ba:0c:61:5c:48:cc:66:14:aa:15:7d:34:f4: fc:a6:2e:32:ec:19:ce:09:db:21:07:f8:a9:eb:7e:8f:85:a9: f8:81:7b:2c:38:e5:a7:0f:f4:cc:17:8b:a8:7d:ef:4c:1e:8c: b7:c5:0a:7a:e9:74:17:b3:d6:5c:6b:f6:08:6e:98:35:1f:80: 19:2f:e0:45:b5:03:9a:5a:35:e2:a9:7a:ee:05:23:34:5c:7c: a2:e2:30:05:f1:8d:75:5e:72:d0:b9:df:a1:86:ac:13:fe:51: 7a:b7:6f:76:15:b5:ab:8d:e4:ef:81:6a:75:38:3c:9a:95:36: ff:0a:cc:5e:20:fe:6b:29:44:55:86:7a:5e:f8:a2:b2:11:8b: 84:a1:1b:6d:69:22:71:aa:0a:31:f3:69:1d:cc:4a:bc:42:e8: ec:fd:b0:4d:a8:72:c8:1b:c2:e1:a4:b9:0d:3f:c1:67:20:28: 04:06:0f:00:fe:3c:e2:eb:2e:80:72:e5:9e:99:40:bf:6c:4f: af:76:cd:5b:a0:59:93:47:b8:fa:48:5e:9a:2c:5e:2a:a5:6f: 06:03:3e:4e:ee:6d:fd:94:b2:51:94:fe:3c:4e:ef:0d:d0:92: d0:c7:33:66 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEueKaWtKrAvxb2zN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAyMzE0MDkyMFoXDTI3MDYxMzA1MjI1OFowLzEtMCsGA1UEAxMk NWM3YTIzMjgtZGNmNi00MjJjLTg2ZDgtMTMzODMzNWNlMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSwo5t26WDYvGS1l1OxBSNYBfbCN8FkUzu54 2raG008t+fmxIKoYLlcU61CefN9hcrYj1btj+mVjTm2LwgUCGwZS5QzGKzDYV6ry dAz1IHaLpVtyDEmkPwQblbITjfN2iI/U58J8jh0w63UA1fakyQ5Wv+KBUz6eCbId 2HzDoLpxwptXEmkojFEzZAbdvT2JDxqkn21nJKnpougDZm4c50DdOJae8hywVjFx kvIgoxk+uHjuh27ZpWGVjhxSrjxyZgnhg2xj32P9OPPicMDAeja2vL+vQeNeeFHg 22dvm3w9c8pHYgZCxHn4if1jHB3493HazldFON5JIkApBtquNwIDAQABo4IELzCC BCswHQYDVR0OBBYEFD2S6rE1yWZVPBoZvqyWt8d7kkUMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YzdhMjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4MzM1Y2UzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjN2EyMzI4LWRjZjYtNDIyYy04 NmQ4LTEzMzgzMzVjZTM4MC81YzdhMjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4MzM1 Y2UzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHf4EwDgQCAAIwCAMGACYC+DEAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAk/eAgMAlicwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnUyt44yyWanN220DTuNd POXPG6rX4lK6DGFcSMxmFKoVfTT0/KYuMuwZzgnbIQf4qet+j4Wp+IF7LDjlpw/0 zBeLqH3vTB6Mt8UKeul0F7PWXGv2CG6YNR+AGS/gRbUDmlo14ql67gUjNFx8ouIw BfGNdV5y0LnfoYasE/5RerdvdhW1q43k74FqdTg8mpU2/wrMXiD+aylEVYZ6Xvii shGLhKEbbWkicaoKMfNpHcxKvELo7P2wTahyyBvC4aS5DT/BZyAoBAYPAP484usu gHLlnplAv2xPr3bNW6BZk0e4+khemixeKqVvBgM+Tu5t/ZSyUZT+PE7vDdCS0Mcz Zg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:09 2025 by rpki-client