$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer File: b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer (raw, json) Hash identifier: A5HYUKUX+4WjtlM8MTbyVPA4C7uuinAdmMpHY1trhqE= Subject key identifier: 4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B5C64EADA3DB8FFA1A198A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 00:45:24 +0000 Certificate not after: Mon 03 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 393682 IP: 104.245.48.0/22 IP: 2605:c080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:64:ea:da:3d:b8:ff:a1:a1:98:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 30 00:45:24 2025 GMT Not After : Jan 3 01:45:24 2028 GMT Subject: CN=b9442e36-28bb-4dc7-852f-f37ff2d3582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:7a:40:7b:88:21:21:9f:db:e7:c7:29:d7: e2:6e:7b:94:09:2d:a0:54:80:88:28:7e:b8:28:3f: d8:3e:da:8a:93:2b:ef:df:46:b8:e6:d5:37:50:5e: 3a:bf:9f:fe:79:49:5e:39:a3:bd:79:12:93:8c:10: ad:ac:79:50:54:a1:c0:7e:78:cf:b7:8d:db:94:c8: 4d:e5:d6:6b:0e:af:cc:1a:63:37:c1:00:57:1c:0a: 1c:32:aa:2f:49:3c:02:bb:b5:87:1e:91:52:2e:77: 00:6b:da:9d:c1:fa:f2:fc:4b:71:7a:03:2d:de:d3: 25:24:a7:69:6c:3f:2c:c8:1e:dc:73:eb:57:d8:f4: 9a:9b:42:8e:79:a3:9b:32:f3:f3:a7:49:31:c1:94: 2a:28:ef:89:c6:8a:f8:b9:25:92:75:d8:25:f7:2c: 95:36:73:f9:4e:0b:72:8b:ae:35:7a:8a:73:b7:f3: d9:f4:8a:a6:c6:b8:64:ce:4b:75:73:75:70:14:01: 08:4e:a8:b4:53:52:38:da:f5:c8:3a:5d:01:c7:7d: 6d:2c:9b:a7:c8:97:06:13:fc:57:4b:d8:01:ca:ed: a5:ac:6f:94:44:1c:b0:03:dd:c1:3c:24:48:f9:e1: f0:e2:b6:b7:e1:79:08:ec:a1:6c:76:84:38:c3:e3: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.245.48.0/22 IPv6: 2605:c080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393682 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1b:ac:ed:e2:46:af:fa:26:f8:c2:0d:dd:47:a7:48:38:01: 9c:f1:36:11:da:0c:ca:6a:32:e5:15:3e:01:4f:4a:db:0d:fc: 37:80:3a:1f:be:79:d5:7e:e0:58:09:d9:6a:46:58:ae:bb:04: b5:df:b1:6a:1d:bb:e7:fb:07:d2:f3:b6:64:d0:1c:1c:4c:13: e1:30:6c:c1:29:bc:29:e9:bd:cf:6d:3e:59:00:88:59:1a:b5: cb:1a:9e:f8:bd:44:5c:a7:6e:4b:2c:bf:fb:28:5e:82:fa:c0: b8:07:eb:fe:45:82:ea:70:9f:1d:14:a1:fe:4e:c5:4e:63:9c: 01:83:11:e2:a1:2e:97:b5:22:b6:c0:6d:88:ab:50:76:14:67: 17:27:c6:13:a3:c5:90:f7:d5:f0:42:0b:cd:89:65:6f:82:2a: 78:be:ee:ce:f9:59:0c:ec:dd:04:68:5e:7b:e3:e4:fb:8b:b2: 7a:2e:e0:55:51:24:29:c7:55:a1:52:73:b4:a8:9b:67:fc:bc: 02:e1:6b:1a:92:5e:2a:1c:a0:c7:a3:28:60:c4:28:f6:93:b8: 7d:53:ab:01:61:9b:80:be:a5:21:bd:fd:50:d3:d8:b7:22:40: a0:0f:30:30:a8:cb:27:c2:c9:0e:7f:09:c2:87:65:95:75:cf: 89:28:c2:3c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEtcZOraPbj/oaGYpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkzMDAwNDUyNFoXDTI4MDEwMzAxNDUyNFowLzEtMCsGA1UEAxMk Yjk0NDJlMzYtMjhiYi00ZGM3LTg1MmYtZjM3ZmYyZDM1ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfl6QHuIISGf2+fHKdfibnuUCS2gVICIKH64 KD/YPtqKkyvv30a45tU3UF46v5/+eUleOaO9eRKTjBCtrHlQVKHAfnjPt43blMhN 5dZrDq/MGmM3wQBXHAocMqovSTwCu7WHHpFSLncAa9qdwfry/EtxegMt3tMlJKdp bD8syB7cc+tX2PSam0KOeaObMvPzp0kxwZQqKO+Jxor4uSWSddgl9yyVNnP5Tgty i641eopzt/PZ9Iqmxrhkzkt1c3VwFAEITqi0U1I42vXIOl0Bx31tLJunyJcGE/xX S9gByu2lrG+URBywA93BPCRI+eHw4ra34XkI7KFsdoQ4w+NegwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFE5FtExcQu9FfbjPjZk5U7wSo4vZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i OTQ0MmUzNi0yOGJiLTRkYzctODUyZi1mMzdmZjJkMzU4MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I5NDQyZTM2LTI4YmItNGRjNy04 NTJmLWYzN2ZmMmQzNTgyZS9iOTQ0MmUzNi0yOGJiLTRkYzctODUyZi1mMzdmZjJk MzU4MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJo9TAwDQQCAAIwBwMFACYFwIAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgHSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ0brO3iRq/6JvjCDd1Hp0g4AZzx NhHaDMpqMuUVPgFPStsN/DeAOh++edV+4FgJ2WpGWK67BLXfsWodu+f7B9LztmTQ HBxME+EwbMEpvCnpvc9tPlkAiFkatcsanvi9RFynbkssv/soXoL6wLgH6/5Fgupw nx0Uof5OxU5jnAGDEeKhLpe1IrbAbYirUHYUZxcnxhOjxZD31fBCC82JZW+CKni+ 7s75WQzs3QRoXnvj5PuLsnou4FVRJCnHVaFSc7Som2f8vALhaxqSXiocoMejKGDE KPaTuH1TqwFhm4C+pSG9/VDT2LciQKAPMDCoyyfCyQ5/CcKHZZV1z4kowjw= -----END CERTIFICATE-----Generated at Thu Oct 9 11:44:03 2025 by rpki-client