$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer File: 5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer (raw, json) Hash identifier: 9wyW17qBYwKOOc23NiWuP63zdiQgrIy2MYAOBzUBM58= Subject key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B77DD11C66BEAC4100E13FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 20:54:19 +0000 Certificate not after: Thu 18 Mar 2027 00:40:07 +0000 Subordinate resources: AS: 401441 IP: 142.249.28.0/23 IP: 2602:f7b2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:dd:11:c6:6b:ea:c4:10:0e:13:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 9 20:54:19 2025 GMT Not After : Mar 18 00:40:07 2027 GMT Subject: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:4e:54:d4:1e:d9:83:ba:9e:b1:5d:24:fc: c4:97:ce:c9:be:dc:90:a3:d8:b4:8c:7f:99:42:bd: 55:88:ba:57:4e:62:15:13:f2:96:1a:be:15:b5:bb: c0:a1:31:d3:6b:73:13:03:d8:b4:db:72:c3:09:a5: 5c:33:f6:7f:fe:e3:31:f8:99:b8:a2:43:72:1d:ed: c6:bc:12:6e:cf:2b:8e:87:94:ef:a1:9e:ad:ff:14: 5f:cb:0e:a7:45:2a:d8:25:94:5b:b4:2a:0f:f2:df: c3:a0:a2:1f:bc:7c:32:a2:09:17:cc:93:65:cf:56: f0:f5:5e:7b:93:dd:68:09:b5:21:08:3c:53:ae:61: a0:6c:01:d7:bd:81:da:f3:0f:59:ce:b6:2a:5e:2e: 93:42:8f:32:0e:67:33:cf:ce:24:d7:40:51:bf:5a: e7:98:af:67:f9:00:6d:6e:d8:15:e5:37:01:af:a4: 0c:88:3e:f2:ad:c7:26:6e:eb:d4:d7:a8:6d:eb:18: e7:f7:0c:ab:80:07:e1:e4:b6:07:b1:14:fc:f1:2c: 00:bc:d9:0e:ea:72:a2:60:8f:74:34:1f:c6:22:11: 74:46:57:ab:68:d0:96:bc:76:f1:ab:ca:a8:d6:b9: 43:c0:6c:6c:16:8d:b2:0c:af:f2:aa:47:89:15:e5: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.249.28.0/23 IPv6: 2602:f7b2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:42:9d:db:98:98:4a:51:cb:35:df:f4:c4:0c:4b:5d:d3:29: c7:f8:31:12:69:9b:fc:12:2d:f5:4a:b6:08:1b:41:68:66:c1: e7:c9:47:6e:13:0a:6f:1e:ef:60:d3:f4:7a:c2:d0:c2:f9:0f: 9b:4b:0f:67:0b:1d:41:e9:4b:50:10:dd:91:de:0a:26:b4:fd: 4d:03:53:2f:96:47:25:64:04:1b:d9:c2:30:28:d6:dc:fe:ae: 34:45:da:be:57:b1:b5:92:f1:cc:89:2c:b6:74:03:19:1a:e6: 4b:2a:5f:43:78:85:8d:4d:dc:57:a2:30:72:08:0b:76:fb:01: 00:a4:b3:80:cf:06:64:bd:e6:a4:4a:db:ea:93:56:24:37:cc: 14:77:9b:59:a2:d3:49:22:63:18:b7:f6:c7:14:cb:6e:37:b9: 4e:db:75:a4:d5:64:bd:7e:d1:12:9e:b0:ef:71:83:d1:48:7a: d0:a0:e8:e8:94:b4:f4:0e:ab:0d:0b:c3:cd:4c:cf:b4:d8:1f: 61:5c:c2:77:30:2e:a8:1a:b3:1e:ad:9d:97:ed:08:1a:36:ad: 06:df:e3:13:35:5c:cc:d7:e9:94:b9:3b:ae:90:d5:b3:d8:75: b1:41:90:e0:71:d5:54:ec:9a:b1:0d:0a:00:b8:5b:42:5f:9d: 50:f0:04:c4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt33RHGa+rEEA4T/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAwOTIwNTQxOVoXDTI3MDMxODAwNDAwN1owLzEtMCsGA1UEAxMk NWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRmNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJOVNQe2YO6nrFdJPzEl87JvtyQo9i0jH+Z Qr1ViLpXTmIVE/KWGr4VtbvAoTHTa3MTA9i023LDCaVcM/Z//uMx+Jm4okNyHe3G vBJuzyuOh5TvoZ6t/xRfyw6nRSrYJZRbtCoP8t/DoKIfvHwyogkXzJNlz1bw9V57 k91oCbUhCDxTrmGgbAHXvYHa8w9ZzrYqXi6TQo8yDmczz84k10BRv1rnmK9n+QBt btgV5TcBr6QMiD7yrccmbuvU16ht6xjn9wyrgAfh5LYHsRT88SwAvNkO6nKiYI90 NB/GIhF0RleraNCWvHbxq8qo1rlDwGxsFo2yDK/yqkeJFeXSpQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFES7DjPSUih13GyXGfX+VZ/AbrB9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVhMDYwZmEzLWUyZjEtNDg1Ny1h Y2YzLTlhOThhOThkZjZmMi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4 ZGY2ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGO+RwwDgQCAAIwCAMGBCYC97IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLQp3bmJhKUcs13/TEDEtd0ynH +DESaZv8Ei31SrYIG0FoZsHnyUduEwpvHu9g0/R6wtDC+Q+bSw9nCx1B6UtQEN2R 3gomtP1NA1MvlkclZAQb2cIwKNbc/q40Rdq+V7G1kvHMiSy2dAMZGuZLKl9DeIWN TdxXojByCAt2+wEApLOAzwZkveakStvqk1YkN8wUd5tZotNJImMYt/bHFMtuN7lO 23Wk1WS9ftESnrDvcYPRSHrQoOjolLT0DqsNC8PNTM+02B9hXMJ3MC6oGrMerZ2X 7QgaNq0G3+MTNVzM1+mUuTuukNWz2HWxQZDgcdVU7JqxDQoAuFtCX51Q8ATE -----END CERTIFICATE-----Generated at Fri Oct 10 09:54:43 2025 by rpki-client