$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer File: e987b11b-b307-4d95-abbc-a061ff00c004.cer (raw, json) Hash identifier: J0Pny0VzKC5rJMkuwSJaDUghfwL5cppJGEK5w26uNKw= Subject key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D952F6ABB9B1CB9348E9CC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 16:24:28 +0000 Certificate not after: Mon 17 May 2027 15:24:28 +0000 Subordinate resources: AS: 11475 IP: 134.199.40.0/22 IP: 162.219.180.0/22 IP: 208.82.232.0/22 IP: 2602:ffe1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:52:f6:ab:b9:b1:cb:93:48:e9:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 11 16:24:28 2025 GMT Not After : May 17 15:24:28 2027 GMT Subject: CN=e987b11b-b307-4d95-abbc-a061ff00c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:ee:b0:52:45:1e:a6:bf:ce:54:d4:d0:b0: 1b:d0:dd:97:e5:c5:14:2b:03:ba:5b:cc:30:11:a6: 1f:08:f7:cd:87:8c:3c:8a:ff:92:70:bf:0e:28:b1: 40:ef:c8:68:cb:df:aa:63:c3:d2:78:e9:9f:3b:70: 0f:9a:14:f5:61:aa:89:95:47:5d:f5:47:2c:c5:32: 7d:85:e1:70:8d:e1:af:7a:57:d7:ba:79:fb:3e:19: 79:90:a9:86:47:d8:78:42:6a:5c:a5:96:e9:0e:a0: 0c:a7:68:74:1f:87:5f:16:5d:b6:15:4a:14:5a:6b: e1:63:9c:15:4a:65:5e:f2:6e:9b:b1:8e:ae:e0:77: 2b:0a:c9:8b:20:dd:f0:80:15:8e:db:0b:f0:be:68: 41:c4:33:5f:e4:d4:d4:9f:8b:5e:f1:6d:b9:cf:df: 61:9e:30:50:99:08:2e:97:5a:88:54:60:95:62:c6: 48:d3:2e:62:8a:e7:d1:ba:90:c0:26:6b:05:54:f1: 66:c4:a5:5b:e9:88:f3:e0:f6:0c:c4:f3:28:58:50: 74:3a:f3:bf:e8:60:9d:be:da:d9:3e:a7:d4:ce:9f: eb:89:93:34:a3:ee:6f:fb:6d:c3:02:1f:cf:52:66: 2d:8e:67:b1:f0:f9:08:26:f4:42:94:3a:fa:0f:93: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 134.199.40.0/22 162.219.180.0/22 208.82.232.0/22 IPv6: 2602:ffe1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11475 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8b:eb:54:63:7f:6b:49:db:28:11:5f:18:8e:51:13:a9:31: 58:f7:71:27:c5:66:b0:6b:da:5e:ca:dd:2f:a1:f7:06:5f:e5: 0c:d9:70:a5:5d:85:10:dd:d1:16:5a:61:8b:02:f1:ee:00:c5: 96:6c:42:c2:41:72:8d:a8:af:ee:ab:b4:bb:6d:68:61:04:30: 19:dc:b5:7c:e8:e0:01:c0:1f:e0:d4:de:b0:e2:94:77:ea:0f: 3d:ef:1c:1f:44:02:99:96:6d:4a:0b:e7:8d:97:b6:80:c1:d1: 29:03:7f:e6:c7:e0:3d:de:68:59:7f:db:e5:0d:5d:c8:46:68: c0:59:c1:cf:4c:af:b2:2e:dc:b1:2b:c7:d0:9c:9b:a3:cd:1c: a0:99:e7:ba:aa:39:a3:dc:48:a9:3a:98:4f:1f:ea:72:a1:e0: d9:fb:03:1a:92:46:23:29:ec:0f:ab:94:3d:c5:6c:35:f3:9d: f6:4a:77:b5:a1:b3:5f:53:a0:0b:13:9d:aa:b0:48:a1:65:21: f2:58:cb:ed:17:7b:ad:d1:7b:2c:e9:f2:f1:f2:05:f0:c7:d4: b9:ee:51:48:ca:7c:b0:71:25:41:b0:1e:07:b7:d0:35:21:06: 1c:17:1a:38:02:c6:73:d2:b8:af:16:3d:2c:b7:29:a0:fe:c5: 33:78:59:8f -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEjZUvarubHLk0jpzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMTE2MjQyOFoXDTI3MDUxNzE1MjQyOFowLzEtMCsGA1UEAxMk ZTk4N2IxMWItYjMwNy00ZDk1LWFiYmMtYTA2MWZmMDBjMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3/usFJFHqa/zlTU0LAb0N2X5cUUKwO6W8ww EaYfCPfNh4w8iv+ScL8OKLFA78hoy9+qY8PSeOmfO3APmhT1YaqJlUdd9UcsxTJ9 heFwjeGvelfXunn7Phl5kKmGR9h4QmpcpZbpDqAMp2h0H4dfFl22FUoUWmvhY5wV SmVe8m6bsY6u4HcrCsmLIN3wgBWO2wvwvmhBxDNf5NTUn4te8W25z99hnjBQmQgu l1qIVGCVYsZI0y5iiufRupDAJmsFVPFmxKVb6Yjz4PYMxPMoWFB0OvO/6GCdvtrZ PqfUzp/riZM0o+5v+23DAh/PUmYtjmex8PkIJvRClDr6D5MYXwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFLM78432kmt/WUZXlFlNWuz+dWteMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l OTg3YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYxZmYwMGMwMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U5ODdiMTFiLWIzMDctNGQ5NS1h YmJjLWEwNjFmZjAwYzAwNC9lOTg3YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYxZmYw MGMwMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKGxygDBAKi27QDBALQUugwDgQCAAIwCAMGBCYC /+EAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAizTMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI6L61Rjf2tJ 2ygRXxiOUROpMVj3cSfFZrBr2l7K3S+h9wZf5QzZcKVdhRDd0RZaYYsC8e4AxZZs QsJBco2or+6rtLttaGEEMBnctXzo4AHAH+DU3rDilHfqDz3vHB9EApmWbUoL542X toDB0SkDf+bH4D3eaFl/2+UNXchGaMBZwc9Mr7Iu3LErx9Ccm6PNHKCZ57qqOaPc SKk6mE8f6nKh4Nn7AxqSRiMp7A+rlD3FbDXznfZKd7Whs19ToAsTnaqwSKFlIfJY y+0Xe63Reyzp8vHyBfDH1LnuUUjKfLBxJUGwHge30DUhBhwXGjgCxnPSuK8WPSy3 KaD+xTN4WY8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:12 2025 by rpki-client