$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer File: 938e1602-8093-4bcd-b527-f5d1756295fc.cer (raw, json) Hash identifier: TCD11f2tSOI6G3yYonJxfxzoHLh4R/YG2IGkf1Z4Xqk= Subject key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B79DBC630736B7E14A0163280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 14:03:20 +0000 Certificate not after: Thu 11 Mar 2027 15:28:30 +0000 Subordinate resources: AS: 401482 IP: 142.248.252.0/24 IP: 2620:cf:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:db:c6:30:73:6b:7e:14:a0:16:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 14:03:20 2025 GMT Not After : Mar 11 15:28:30 2027 GMT Subject: CN=938e1602-8093-4bcd-b527-f5d1756295fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:68:99:10:47:18:66:ca:d7:d0:b6:27:21: 01:2f:16:cd:6b:0c:dc:ae:ec:a6:05:a3:1e:42:9f: 87:64:f1:e9:ce:57:d8:ba:0a:2a:dc:0c:33:c9:66: 78:9b:c6:2b:e5:9a:e0:46:b0:47:57:0e:68:10:68: 09:6e:75:95:61:d8:85:f3:28:a2:1f:f4:3e:a8:53: c5:d5:5b:21:10:fd:4a:4e:af:2f:60:06:a0:c7:0c: fe:b8:6b:2f:eb:10:14:21:cc:72:73:a4:ec:a7:ea: 97:cd:cf:ec:9d:65:60:2e:4a:a9:ac:d2:c8:3d:1f: 05:45:61:f3:3c:19:44:d6:cf:1b:86:13:a3:31:06: 05:33:02:bd:3d:e7:0a:a7:2a:b6:58:a3:2b:d3:fe: 65:4c:f3:4f:fd:fb:50:cb:c5:63:b5:7c:95:1a:78: 5a:9a:ba:4e:f0:f9:f2:a3:6b:03:34:0c:d0:bb:44: cf:08:64:42:44:a0:e8:89:52:fa:48:1a:aa:90:a8: 50:e0:d8:08:bd:76:7d:d3:47:6c:94:ab:a9:04:e2: 2a:93:ab:d7:b2:7b:60:8b:e2:4d:43:b5:9c:a3:db: df:12:0e:8a:ce:2a:81:14:05:a7:60:d5:39:42:9c: 1e:de:72:45:2b:35:8b:1b:54:04:62:88:3b:1f:91: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.252.0/24 IPv6: 2620:cf:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401482 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:87:c0:96:7b:59:37:8b:18:e8:2f:6c:3d:3e:b6:88:6a:62: 09:87:3b:3e:2b:00:c4:f5:79:22:09:8f:63:4b:6a:b4:db:f8: 51:6a:4c:bc:c1:66:a2:2b:6a:72:7b:50:b6:dd:34:25:a3:c0: 92:c9:bf:06:0c:84:19:51:cb:e9:bd:80:7d:80:7b:66:54:84: 58:60:e5:80:50:d8:81:42:18:eb:a0:96:40:12:57:d2:af:8e: ae:c8:3a:c0:fd:05:1b:cc:40:e4:43:d8:61:81:47:80:be:2d: 26:2d:ba:f8:6d:93:9f:51:c5:f5:e0:1c:9d:03:84:22:85:67: a1:ef:a7:80:0f:00:5f:82:95:6d:1a:97:fd:6c:02:e4:c0:af: e2:01:39:cc:ee:08:7f:f0:1e:54:c3:66:30:cb:b2:a8:6b:b2: 19:6c:f9:a8:34:0d:9e:42:31:9c:32:85:33:60:39:3c:42:f9: b1:1e:05:ac:82:55:29:12:fd:c7:67:f1:0c:c5:aa:62:62:65: 2e:1e:46:b6:a5:69:44:c7:68:fe:65:b6:75:83:eb:27:7a:5d: 51:66:eb:05:23:00:4b:e0:29:9f:87:55:db:7e:44:33:60:a7: 2a:b2:f8:54:28:d0:8f:f7:39:ed:34:ac:64:8f:bd:21:14:e8: ca:d9:22:45 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEt528Ywc2t+FKAWMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDE0MDMyMFoXDTI3MDMxMTE1MjgzMFowLzEtMCsGA1UEAxMk OTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZomRBHGGbK19C2JyEBLxbNawzcruymBaMe Qp+HZPHpzlfYugoq3AwzyWZ4m8Yr5ZrgRrBHVw5oEGgJbnWVYdiF8yiiH/Q+qFPF 1VshEP1KTq8vYAagxwz+uGsv6xAUIcxyc6Tsp+qXzc/snWVgLkqprNLIPR8FRWHz PBlE1s8bhhOjMQYFMwK9PecKpyq2WKMr0/5lTPNP/ftQy8VjtXyVGnhamrpO8Pny o2sDNAzQu0TPCGRCRKDoiVL6SBqqkKhQ4NgIvXZ900dslKupBOIqk6vXsntgi+JN Q7Wco9vfEg6KziqBFAWnYNU5Qpwe3nJFKzWLG1QEYog7H5GgRwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFPzMALTGvYB8aVdmLRmp68I3iXj2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkzOGUxNjAyLTgwOTMtNGJjZC1i NTI3LWY1ZDE3NTYyOTVmYy85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2 Mjk1ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACO+PwwDwQCAAIwCQMHACYgAM+gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIEowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjofAlntZN4sY6C9sPT62iGpi CYc7PisAxPV5IgmPY0tqtNv4UWpMvMFmoitqcntQtt00JaPAksm/BgyEGVHL6b2A fYB7ZlSEWGDlgFDYgUIY66CWQBJX0q+Orsg6wP0FG8xA5EPYYYFHgL4tJi26+G2T n1HF9eAcnQOEIoVnoe+ngA8AX4KVbRqX/WwC5MCv4gE5zO4If/AeVMNmMMuyqGuy GWz5qDQNnkIxnDKFM2A5PEL5sR4FrIJVKRL9x2fxDMWqYmJlLh5GtqVpRMdo/mW2 dYPrJ3pdUWbrBSMAS+Apn4dV235EM2CnKrL4VCjQj/c57TSsZI+9IRToytkiRQ== -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:59 2025 by rpki-client