$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer File: 94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer (raw, json) Hash identifier: nuod6rrzqwbvlVmo/s7WuBZ8mmygx3g3rp7+qTZGhmk= Subject key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B9849D6C4DC2061CDC6D85180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 11:39:21 +0000 Certificate not after: Tue 09 Mar 2027 07:31:03 +0000 Subordinate resources: AS: 13696 IP: 142.248.136.0/22 IP: 2602:f77c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:49:d6:c4:dc:20:61:cd:c6:d8:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 21 11:39:21 2025 GMT Not After : Mar 9 07:31:03 2027 GMT Subject: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:90:dc:35:6c:c6:1c:45:61:8d:28:cf:03: 12:65:1f:37:8c:43:43:9d:80:34:19:31:69:ba:b5: 5d:53:0b:be:e4:f4:13:78:5e:78:5a:42:a9:1b:c8: d0:7d:3e:dd:85:7f:3b:39:1c:9a:e0:05:c0:3a:f3: 58:6a:9f:a7:05:e5:4c:5f:4b:70:f7:3b:a6:2d:10: c5:52:6f:03:58:d6:45:c4:2a:0e:f3:2e:98:3d:15: aa:7f:53:94:fe:80:c4:65:9e:3b:82:06:a2:6a:87: f0:6a:21:9d:61:18:ed:47:aa:be:da:20:a1:a3:d4: f0:88:71:4c:e4:41:6d:8e:8a:df:39:40:75:17:0a: 98:64:8d:fe:e4:48:34:10:ea:db:a8:15:44:51:d1: e9:6d:00:c7:e4:54:03:5d:45:20:40:fc:d1:1b:f5: 0f:47:e5:71:d5:f1:da:78:b9:49:8d:09:c9:a8:61: e8:61:33:19:15:6e:52:e9:c0:07:ec:42:d7:ac:d1: 1a:81:af:79:23:cf:41:47:48:fe:c6:a9:bf:b6:b3: 2f:e3:38:9a:e1:53:95:53:c6:ac:ec:ef:e4:34:56: 35:d7:51:71:d2:00:b3:96:b2:d4:c6:3b:91:58:13: d5:6e:3b:56:7a:f0:2b:76:7c:a5:7a:99:ba:2c:f7: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 IPv6: 2602:f77c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13696 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5b:da:2f:97:c1:e1:14:53:58:ae:d1:6e:a9:cf:d9:4f:89: 68:9a:b3:99:2c:42:4a:2b:16:b4:ed:31:3a:38:e8:d0:c0:2d: af:7c:20:92:c8:ed:78:c4:60:69:6a:d5:bd:1c:62:48:bc:2e: 4b:6f:9c:67:c5:08:da:e3:56:cd:20:d8:22:dd:ed:42:cf:0c: 7c:bd:01:45:fb:f6:f8:34:33:8c:ca:59:18:af:dd:3d:98:25: 31:78:06:e8:0c:f6:96:71:09:39:60:c3:f6:cc:65:ea:58:09: ca:a5:ab:e0:02:8c:66:ff:80:86:d4:54:45:74:15:76:32:f5: 01:d0:9a:6c:d6:7c:5d:64:fd:ae:26:4f:8f:9d:d8:ba:2a:57: f6:e4:34:af:ca:05:02:8c:18:0e:a0:7c:1b:95:7c:e7:28:7f: bb:f8:fc:a6:73:95:ba:3e:9f:77:bb:68:b8:b7:b3:2c:f5:df: 0a:f5:79:29:4e:55:84:f6:3d:21:72:62:fd:d5:7b:37:6b:12: 21:98:7f:0a:ec:2b:75:f7:a6:83:30:f0:eb:3b:73:79:d7:9b: e8:5c:ea:d1:46:47:a5:a7:07:a3:46:14:d8:9f:b5:7f:98:87: 37:a0:f2:78:80:ae:5d:33:26:81:94:d2:e9:7f:12:81:6c:f4: f6:87:78:ca -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuYSdbE3CBhzcbYUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAyMTExMzkyMVoXDTI3MDMwOTA3MzEwM1owLzEtMCsGA1UEAxMk OTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qQ3DVsxhxFYY0ozwMSZR83jENDnYA0GTFp urVdUwu+5PQTeF54WkKpG8jQfT7dhX87ORya4AXAOvNYap+nBeVMX0tw9zumLRDF Um8DWNZFxCoO8y6YPRWqf1OU/oDEZZ47ggaiaofwaiGdYRjtR6q+2iCho9TwiHFM 5EFtjorfOUB1FwqYZI3+5Eg0EOrbqBVEUdHpbQDH5FQDXUUgQPzRG/UPR+Vx1fHa eLlJjQnJqGHoYTMZFW5S6cAH7ELXrNEaga95I89BR0j+xqm/trMv4zia4VOVU8as 7O/kNFY111Fx0gCzlrLUxjuRWBPVbjtWevArdnylepm6LPffewIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJHF2x7cpWErhAugrqSNZMUFyBBIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk0ZjYyM2U3LWM2YmUtNGMzYi1i NTU0LTZhZDZhY2IwODUwYi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNi MDg1MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKO+IgwDgQCAAIwCAMGBCYC93wAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGhb2i+XweEUU1iu0W6pz9lPiWia s5ksQkorFrTtMTo46NDALa98IJLI7XjEYGlq1b0cYki8LktvnGfFCNrjVs0g2CLd 7ULPDHy9AUX79vg0M4zKWRiv3T2YJTF4BugM9pZxCTlgw/bMZepYCcqlq+ACjGb/ gIbUVEV0FXYy9QHQmmzWfF1k/a4mT4+d2LoqV/bkNK/KBQKMGA6gfBuVfOcof7v4 /KZzlbo+n3e7aLi3syz13wr1eSlOVYT2PSFyYv3VezdrEiGYfwrsK3X3poMw8Os7 c3nXm+hc6tFGR6WnB6NGFNiftX+Yhzeg8niArl0zJoGU0ul/EoFs9PaHeMo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:17 2025 by rpki-client