$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer File: 32e58881-6422-4e0d-9578-7c256d9f70bc.cer (raw, json) Hash identifier: W0iAziKFp2I7shydo+r//B/tH7zg9TD8UOtgf5+5SsM= Subject key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B14FED9F8AF7EC0B5E712A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 10:57:22 +0000 Certificate not after: Sun 28 Feb 2027 18:14:02 +0000 Subordinate resources: AS: 398191 IP: 64.45.128.0/19 IP: 216.225.32.0/19 IP: 2607:c7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:14:fe:d9:f8:af:7e:c0:b5:e7:12:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Sep 4 10:57:22 2025 GMT Not After : Feb 28 18:14:02 2027 GMT Subject: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:02:e0:d3:7c:03:3d:13:83:1f:64:54:47: 05:c3:62:fc:15:37:a3:7c:e0:5d:ba:4c:df:3b:83: c2:99:35:12:d4:4e:2f:0d:5a:0a:50:7d:16:92:e8: a8:be:cd:84:8c:8d:b8:a3:86:53:93:7f:ff:eb:59: 39:ce:f3:e3:d0:ff:7f:54:fa:70:5b:2f:6e:cd:11: c8:0f:fa:6a:b8:64:df:ee:72:3a:e6:a6:2d:ba:9c: 1a:8b:72:71:2c:be:07:31:ef:da:75:df:ed:de:d3: 4f:fd:95:59:c8:a8:0c:e4:a2:ed:4f:5a:0c:b0:ca: 88:44:b1:ec:7b:86:83:b0:ed:25:78:56:f0:09:78: 68:4a:21:df:e6:6e:95:ef:cf:de:82:05:2c:23:6c: cb:d0:ac:e1:d9:52:f6:a3:41:11:a8:d2:4c:d0:81: 70:55:2e:5c:c3:05:cb:f9:d4:19:57:11:ec:26:5e: 07:8a:8d:d2:2e:b9:db:d3:1a:cc:ff:7f:4a:32:06: 12:dd:a3:86:47:df:b8:dd:86:d9:4f:ef:66:05:db: bd:14:37:74:15:98:e9:29:1d:e4:b0:43:6a:0b:27: de:ea:0c:5a:c8:d6:bc:25:ae:8d:8b:04:2e:d4:3d: 39:f9:40:f8:57:d7:21:f3:a9:25:b3:d5:2e:6d:2e: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.45.128.0/19 216.225.32.0/19 IPv6: 2607:c7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398191 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e8:20:a7:91:54:67:2e:74:c5:c3:4c:18:f6:c9:ca:42:c8: a2:58:c8:15:7e:4c:15:0a:30:b4:52:3f:b5:30:76:20:0a:96: 97:43:8f:49:d2:56:ad:e2:ed:a6:b2:37:11:dd:66:f8:96:e3: 2c:a0:2a:e3:12:c7:e1:66:76:22:29:fb:94:92:7d:a9:8f:5f: 20:20:da:9a:9b:73:77:ce:f1:45:77:05:f8:86:a0:9b:87:de: d4:f7:4e:34:dc:b4:fc:e5:18:fa:c9:b8:e5:94:bc:2a:96:f8: 7c:e0:a4:e2:6d:6e:2d:13:3a:98:3b:31:ed:c3:69:8b:4b:17: 18:ba:da:47:71:2f:92:e9:85:1e:98:b9:65:74:fd:19:8d:14: 73:74:e7:60:b8:19:cf:8b:d7:3f:61:75:9e:6e:7c:64:71:ca: 1a:dc:f1:31:5d:ae:41:3b:55:94:7d:5f:3a:a6:c6:ad:ba:59: 7b:74:81:69:26:a8:8e:e7:a4:2f:24:97:72:0b:85:f9:4a:d1: 13:7c:6e:39:25:53:2f:fc:e5:84:0b:f3:54:f4:ca:63:a9:a1: 67:3a:76:6b:9a:67:6b:79:07:fd:9d:37:20:d6:33:95:1a:f1: 1a:0a:e8:f4:8e:23:c5:cf:d7:cc:2b:ec:40:74:68:a2:a5:ec: 2a:7c:97:a2 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEsU/tn4r37AtecSqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDkwNDEwNTcyMloXDTI3MDIyODE4MTQwMlowLzEtMCsGA1UEAxMk MzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3UC4NN8Az0Tgx9kVEcFw2L8FTejfOBdukzf O4PCmTUS1E4vDVoKUH0Wkuiovs2EjI24o4ZTk3//61k5zvPj0P9/VPpwWy9uzRHI D/pquGTf7nI65qYtupwai3JxLL4HMe/add/t3tNP/ZVZyKgM5KLtT1oMsMqIRLHs e4aDsO0leFbwCXhoSiHf5m6V78/eggUsI2zL0Kzh2VL2o0ERqNJM0IFwVS5cwwXL +dQZVxHsJl4Hio3SLrnb0xrM/39KMgYS3aOGR9+43YbZT+9mBdu9FDd0FZjpKR3k sENqCyfe6gxayNa8Ja6NiwQu1D05+UD4V9ch86kls9UubS46XwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPN66/kw1d+WnHkiUdR9THA1zO3PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z MmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMyZTU4ODgxLTY0MjItNGUwZC05 NTc4LTdjMjU2ZDlmNzBiYy8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5 ZjcwYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVALYADBAXY4SAwDQQCAAIwBwMFACYHx8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhNvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADToIKeRVGcudMXDTBj2 ycpCyKJYyBV+TBUKMLRSP7UwdiAKlpdDj0nSVq3i7aayNxHdZviW4yygKuMSx+Fm diIp+5SSfamPXyAg2pqbc3fO8UV3BfiGoJuH3tT3TjTctPzlGPrJuOWUvCqW+Hzg pOJtbi0TOpg7Me3DaYtLFxi62kdxL5LphR6YuWV0/RmNFHN052C4Gc+L1z9hdZ5u fGRxyhrc8TFdrkE7VZR9Xzqmxq26WXt0gWkmqI7npC8kl3ILhflK0RN8bjklUy/8 5YQL81T0ymOpoWc6dmuaZ2t5B/2dNyDWM5Ua8RoK6PSOI8XP18wr7EB0aKKl7Cp8 l6I= -----END CERTIFICATE-----Generated at Fri Oct 10 10:00:18 2025 by rpki-client