$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer File: 9546315b-1bef-4238-9dad-ebda966a76b5.cer (raw, json) Hash identifier: bo18dBcsMw4kViV7Kkb69b62D3TMYmYWXLKHQSP1bHM= Subject key identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B74CDE6713D73E88C7B8FCE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 18:36:20 +0000 Certificate not after: Sun 28 Mar 2027 20:11:33 +0000 Subordinate resources: AS: 54014 IP: 130.12.120.0/22 IP: 2607:cb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:cd:e6:71:3d:73:e8:8c:7b:8f:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 8 18:36:20 2025 GMT Not After : Mar 28 20:11:33 2027 GMT Subject: CN=9546315b-1bef-4238-9dad-ebda966a76b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:28:39:65:6d:4f:d8:57:b9:5e:05:ce:b0: 19:7c:7f:86:8d:44:5f:f3:e4:5b:f8:75:a9:6c:11: 8a:77:6a:54:e5:03:a2:39:df:8b:7c:c4:12:2a:23: 2b:cf:c3:9b:ee:dd:0f:51:45:01:f4:43:74:ba:eb: 3d:b1:0e:0d:4d:30:80:61:cf:d6:8f:f4:6e:67:4b: 6d:a8:3e:2c:0c:50:91:1b:fb:49:2e:4e:59:08:2e: 24:21:21:90:72:1f:a3:e1:ff:f8:a1:10:21:85:a1: 73:be:d3:bf:62:c8:29:c7:58:40:ff:64:c6:40:4f: 0e:61:8f:a7:b0:2d:ba:de:7f:60:ac:7b:87:00:84: a9:31:0d:84:a3:e7:c6:3e:01:9f:93:0a:e9:18:a0: 78:08:f4:e0:f9:0d:18:1f:d9:df:4a:76:3c:4b:7d: 4d:27:42:6f:8b:e6:b5:3b:87:4a:86:d6:63:3a:13: cf:22:8e:c1:f8:af:14:f3:9b:11:fa:c7:a0:48:d3: 32:a7:42:51:09:22:30:e5:28:d9:11:36:b1:8d:02: 42:1c:92:10:b6:f7:92:39:5d:81:bb:a2:02:54:68: bc:71:3b:6a:c3:ab:35:8d:06:20:ae:ee:f4:a4:75: 42:3d:dd:72:51:4c:12:4b:fb:bd:57:cd:74:e9:f3: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 130.12.120.0/22 IPv6: 2607:cb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54014 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6f:64:37:bd:c0:40:a0:a7:1d:23:5c:5c:ea:ba:2d:74:37: ad:a2:91:ca:01:99:c7:28:f2:b4:18:16:e1:dc:a1:b7:26:da: 5f:46:4a:6e:17:42:aa:07:31:57:e4:69:4a:19:f7:dd:2f:af: 13:4a:39:46:48:3d:95:f6:2f:06:cc:28:f3:39:82:74:56:82: b0:33:20:2c:d7:e9:64:4e:c2:cd:0c:96:7d:92:8f:87:33:69: 5b:7e:91:c7:3f:ea:ed:3f:10:77:bb:84:dd:35:41:de:10:11: cb:fd:04:c6:14:a4:8e:77:3b:57:52:33:b8:04:c8:c7:11:2c: 5d:8c:d7:4b:65:3e:39:58:3d:4b:59:9a:7c:80:68:eb:de:da: a5:65:95:88:e4:b3:b0:ef:cb:c0:ca:4f:09:b3:58:af:cd:0f: e7:0c:8f:05:0b:e6:a5:81:b3:d3:b7:a0:2f:1c:f7:11:da:a5: 07:6e:ed:c3:2a:6e:1e:fe:3e:dd:cc:ce:16:96:15:dc:6b:4c: 5f:97:53:d5:99:77:dc:9f:a3:89:d8:50:e5:49:bd:39:ca:20: 82:62:0c:b5:98:bc:af:31:b7:09:ef:a2:eb:ea:04:79:96:39: 60:b5:f4:97:50:6c:c3:60:5c:dd:ae:be:a6:b5:2b:ed:5e:dc: 29:01:1b:7c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEt0zeZxPXPojHuPzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAwODE4MzYyMFoXDTI3MDMyODIwMTEzM1owLzEtMCsGA1UEAxMk OTU0NjMxNWItMWJlZi00MjM4LTlkYWQtZWJkYTk2NmE3NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc4oOWVtT9hXuV4FzrAZfH+GjURf8+Rb+HWp bBGKd2pU5QOiOd+LfMQSKiMrz8Ob7t0PUUUB9EN0uus9sQ4NTTCAYc/Wj/RuZ0tt qD4sDFCRG/tJLk5ZCC4kISGQch+j4f/4oRAhhaFzvtO/Ysgpx1hA/2TGQE8OYY+n sC263n9grHuHAISpMQ2Eo+fGPgGfkwrpGKB4CPTg+Q0YH9nfSnY8S31NJ0Jvi+a1 O4dKhtZjOhPPIo7B+K8U85sR+segSNMyp0JRCSIw5SjZETaxjQJCHJIQtveSOV2B u6ICVGi8cTtqw6s1jQYgru70pHVCPd1yUUwSS/u9V8106fPJ7wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPCq5wce2jg2RaLCDGDwzcDYzEusMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NTQ2MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRhOTY2YTc2YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk1NDYzMTViLTFiZWYtNDIzOC05 ZGFkLWViZGE5NjZhNzZiNS85NTQ2MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRhOTY2 YTc2YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKCDHgwDQQCAAIwBwMFACYHy0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANL+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKJvZDe9wECgpx0jXFzqui10N62i kcoBmcco8rQYFuHcobcm2l9GSm4XQqoHMVfkaUoZ990vrxNKOUZIPZX2LwbMKPM5 gnRWgrAzICzX6WROws0Mln2Sj4czaVt+kcc/6u0/EHe7hN01Qd4QEcv9BMYUpI53 O1dSM7gEyMcRLF2M10tlPjlYPUtZmnyAaOve2qVllYjks7Dvy8DKTwmzWK/ND+cM jwUL5qWBs9O3oC8c9xHapQdu7cMqbh7+Pt3MzhaWFdxrTF+XU9WZd9yfo4nYUOVJ vTnKIIJiDLWYvK8xtwnvouvqBHmWOWC19JdQbMNgXN2uvqa1K+1e3CkBG3w= -----END CERTIFICATE-----Generated at Fri Oct 10 09:54:44 2025 by rpki-client