$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6.cer File: 3548b047-adc4-4529-a369-1f7a8b9f01e6.cer (raw, json) Hash identifier: DYyQNKYjcCKpCaOyvaoGSxJp+Oi5YnPtSf5ctmzVBOs= Subject key identifier: 1E:D3:5D:2D:50:FD:15:1A:03:72:E5:A3:BF:30:17:3B:24:09:C8:C5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B599A3BEED4D16BEB12A92700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/3548b047-adc4-4529-a369-1f7a8b9f01e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 00:45:24 +0000 Certificate not after: Sun 02 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 40512 IP: 199.91.48.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:9a:3b:ee:d4:d1:6b:eb:12:a9:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 29 00:45:24 2025 GMT Not After : Jan 2 01:45:24 2028 GMT Subject: CN=3548b047-adc4-4529-a369-1f7a8b9f01e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:eb:3f:0f:69:78:05:1f:65:db:5d:80:87: 99:1b:ca:cb:9f:dc:04:18:8a:8b:b2:24:59:0d:f2: 9e:91:f2:f9:4d:d5:e9:d4:70:84:e2:a2:86:e9:56: 1e:67:66:77:e1:ff:3e:39:d5:05:c1:f3:96:f7:e6: 86:3d:d7:22:81:6d:c4:3d:65:44:2c:95:36:bd:db: ca:d7:a2:b1:86:99:45:5c:a3:77:e2:3a:e6:c8:41: c7:9f:af:ca:f7:95:b0:02:13:65:85:88:4d:51:16: 48:76:b1:7f:a2:f9:ca:4d:ae:ad:69:a2:9a:9a:60: b8:1c:4b:0d:60:87:4a:73:41:74:73:aa:71:48:d4: fe:d4:4a:2c:cf:ed:04:81:64:ae:72:88:5b:ca:15: ae:d3:b1:08:36:ff:c1:6e:b3:9b:61:f1:ce:f7:df: a5:03:45:3c:6f:3a:7a:e7:ea:f8:a5:c3:cd:7e:ad: c4:22:43:d7:2b:41:6b:cc:79:92:ef:ad:7b:35:08: 95:04:3f:99:bd:2e:3d:30:20:51:63:6e:5b:0e:ce: eb:52:ee:c3:de:25:43:71:51:ab:eb:92:3a:5f:2f: e0:5d:a8:31:f8:cb:e3:12:d9:65:75:ba:23:a1:7b: e5:db:2e:9a:15:f8:4f:85:a5:74:2a:47:18:87:c6: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D3:5D:2D:50:FD:15:1A:03:72:E5:A3:BF:30:17:3B:24:09:C8:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/3548b047-adc4-4529-a369-1f7a8b9f01e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.91.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fb:4a:f0:b8:6c:8b:38:ca:b5:1f:40:34:ae:99:05:96:10: f0:ec:c1:4f:41:8c:ed:bb:79:c5:1b:f5:40:c2:9c:1f:b7:c6: dd:c0:ab:28:61:02:92:11:45:31:fc:83:01:43:7b:e8:7d:f0: ea:18:38:96:da:83:11:62:e1:2b:06:ce:81:bb:37:60:1d:fb: e8:3e:ca:88:22:65:9e:68:68:12:9e:72:3b:96:52:2d:4e:fb: f7:03:58:ab:67:e1:1b:37:ba:92:03:83:e0:e1:3b:7b:48:95: 1a:d9:73:47:12:45:38:6b:d4:bb:87:4d:99:b3:35:22:c0:1e: c5:b7:3c:a2:f4:56:4c:fe:41:d7:8e:f2:a0:08:ab:34:fc:20: 19:2f:2c:1e:41:86:2d:60:92:f8:15:f4:95:9b:57:a4:6d:ee: 27:ea:dc:8f:a7:c8:37:95:fa:80:6d:9f:8c:af:9f:9a:a0:8f: f6:09:0e:0b:d1:ca:b5:38:d7:e6:85:d6:c9:79:3d:32:a0:35: a4:64:c5:fb:96:50:89:ea:a5:5d:61:21:14:4f:0d:f3:08:4a: 3a:27:84:a2:57:95:11:a6:5a:eb:13:d0:85:50:08:f7:3e:81: ff:96:87:a3:c1:72:2d:aa:fa:5e:c2:41:96:11:95:e4:75:da: d5:e2:6f:e2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtZmjvu1NFr6xKpJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkyOTAwNDUyNFoXDTI4MDEwMjAxNDUyNFowLzEtMCsGA1UEAxMk MzU0OGIwNDctYWRjNC00NTI5LWEzNjktMWY3YThiOWYwMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprrPw9peAUfZdtdgIeZG8rLn9wEGIqLsiRZ DfKekfL5TdXp1HCE4qKG6VYeZ2Z34f8+OdUFwfOW9+aGPdcigW3EPWVELJU2vdvK 16KxhplFXKN34jrmyEHHn6/K95WwAhNlhYhNURZIdrF/ovnKTa6taaKammC4HEsN YIdKc0F0c6pxSNT+1Eosz+0EgWSucohbyhWu07EINv/BbrObYfHO99+lA0U8bzp6 5+r4pcPNfq3EIkPXK0FrzHmS7617NQiVBD+ZvS49MCBRY25bDs7rUu7D3iVDcVGr 65I6Xy/gXagx+MvjEtlldbojoXvl2y6aFfhPhaV0KkcYh8blRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFB7TXS1Q/RUaA3Llo78wFzskCcjFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NTQ4YjA0Ny1hZGM0LTQ1MjktYTM2OS0xZjdhOGI5ZjAxZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM1NDhiMDQ3LWFkYzQtNDUyOS1h MzY5LTFmN2E4YjlmMDFlNi8zNTQ4YjA0Ny1hZGM0LTQ1MjktYTM2OS0xZjdhOGI5 ZjAxZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHWzAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKD7SvC4bIs4yrUfQDSumQWWEPDswU9BjO27ecUb9UDCnB+3 xt3AqyhhApIRRTH8gwFDe+h98OoYOJbagxFi4SsGzoG7N2Ad++g+yogiZZ5oaBKe cjuWUi1O+/cDWKtn4Rs3upIDg+DhO3tIlRrZc0cSRThr1LuHTZmzNSLAHsW3PKL0 Vkz+QdeO8qAIqzT8IBkvLB5Bhi1gkvgV9JWbV6Rt7ifq3I+nyDeV+oBtn4yvn5qg j/YJDgvRyrU41+aF1sl5PTKgNaRkxfuWUInqpV1hIRRPDfMISjonhKJXlRGmWusT 0IVQCPc+gf+Wh6PBci2q+l7CQZYRleR12tXib+I= -----END CERTIFICATE-----Generated at Thu Oct 9 11:42:16 2025 by rpki-client