$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37657350-229b-4947-b8dd-7bb673c7f7c2.cer File: 37657350-229b-4947-b8dd-7bb673c7f7c2.cer (raw, json) Hash identifier: LhoLSK7YqEUkivUplVix0uAnPVjJF44XCOArFzzyhcA= Subject key identifier: F6:69:E4:2A:77:59:2C:30:28:71:66:4E:BC:13:38:43:6F:8D:07:11 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AFD79AAADEDBC88EC1ABEB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37657350-229b-4947-b8dd-7bb673c7f7c2/37657350-229b-4947-b8dd-7bb673c7f7c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37657350-229b-4947-b8dd-7bb673c7f7c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Aug 2025 00:45:25 +0000 Certificate not after: Tue 30 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 398715 IP: 209.142.125.0/24 IP: 2605:e7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:79:aa:ad:ed:bc:88:ec:1a:be:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 27 00:45:25 2025 GMT Not After : Nov 30 01:45:25 2027 GMT Subject: CN=37657350-229b-4947-b8dd-7bb673c7f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:dd:bf:b4:e6:c7:2b:43:2d:55:82:7c:33: 0c:d9:98:1b:ab:09:00:4e:a2:a8:2d:87:79:ee:0a: de:fd:fe:f3:a5:e4:f0:d9:36:ed:dc:d0:e1:30:64: 12:6d:ae:84:f8:0f:91:b5:1b:a4:14:a4:af:f9:52: e1:55:23:f2:27:10:02:26:f9:c3:2f:a2:06:64:33: 49:79:ba:f9:f3:06:b2:f2:9c:73:61:b2:08:e8:e7: ae:a4:2b:5c:e4:71:10:29:07:d1:45:23:4c:15:b3: 8c:d1:4d:72:68:64:27:9d:20:89:3a:0f:57:36:aa: 5f:b3:e9:8d:7b:c9:2e:8a:a1:7e:00:42:f9:0f:5d: 5a:13:35:32:ce:5f:3c:58:e5:2d:24:9d:0e:7a:9c: 8f:fa:f3:7f:17:e1:36:a9:27:4c:5c:b5:33:2c:77: 7c:21:97:35:af:08:36:ff:3f:3d:18:b3:d2:ff:23: 09:6e:98:f8:0b:ff:23:bc:fd:25:36:bd:fd:a5:13: fc:44:1f:43:4a:db:be:4e:0e:88:7b:d8:6d:38:05: 93:79:ff:0d:90:16:eb:b9:55:6b:be:99:cf:b4:08: be:e8:63:9c:75:58:e6:1b:11:fb:a3:e6:dc:81:0f: b9:04:6d:c4:ef:68:02:04:a0:14:6a:61:20:66:0e: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:69:E4:2A:77:59:2C:30:28:71:66:4E:BC:13:38:43:6F:8D:07:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37657350-229b-4947-b8dd-7bb673c7f7c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37657350-229b-4947-b8dd-7bb673c7f7c2/37657350-229b-4947-b8dd-7bb673c7f7c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 209.142.125.0/24 IPv6: 2605:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398715 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:40:6a:8b:04:78:66:f6:f6:d0:d1:4d:95:05:97:64:9a:08: 2a:2c:82:ae:74:06:e7:78:d2:f9:39:95:c0:4d:7d:1c:d0:72: 08:60:e4:a6:3d:2a:62:7e:bd:46:38:57:14:d5:3b:db:d8:cc: ee:dd:66:f3:5e:ba:e5:72:81:e9:e3:4f:51:7b:e0:94:6f:71: 7d:74:a9:f3:14:54:a9:65:e6:3e:f7:ff:bd:0f:e1:42:5b:9e: e3:50:7e:87:d4:c5:c5:1c:8f:a1:fc:4d:61:02:e8:38:8e:3a: ff:39:98:46:52:62:dc:9f:a7:6f:8e:6d:fe:fb:7f:31:a6:2c: d7:33:17:7c:42:58:59:df:3b:30:f1:ee:a7:ce:33:3a:3a:02: 17:64:a4:cd:80:06:9f:a7:44:47:2a:fc:e3:96:6e:c4:30:79: 42:93:35:f9:5a:fe:85:1c:e2:2c:13:50:ab:b6:c0:87:ab:f6: b8:f6:ee:35:76:41:6a:f3:8b:f3:d1:81:16:bd:ee:95:f3:30: 3b:97:61:f3:52:71:2f:4e:46:72:15:cc:e0:a6:dd:e3:7a:c4: 49:10:91:63:b8:46:35:97:18:d7:a9:99:b9:a8:74:99:e3:3b: 51:68:c8:29:b7:90:9a:a5:cf:9a:07:42:3d:75:1b:e7:2d:4d: 01:f5:94:c8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEr9eaqt7byI7Bq+tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDgyNzAwNDUyNVoXDTI3MTEzMDAxNDUyNVowLzEtMCsGA1UEAxMk Mzc2NTczNTAtMjI5Yi00OTQ3LWI4ZGQtN2JiNjczYzdmN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTzdv7TmxytDLVWCfDMM2ZgbqwkATqKoLYd5 7gre/f7zpeTw2Tbt3NDhMGQSba6E+A+RtRukFKSv+VLhVSPyJxACJvnDL6IGZDNJ ebr58way8pxzYbII6OeupCtc5HEQKQfRRSNMFbOM0U1yaGQnnSCJOg9XNqpfs+mN e8kuiqF+AEL5D11aEzUyzl88WOUtJJ0OepyP+vN/F+E2qSdMXLUzLHd8IZc1rwg2 /z89GLPS/yMJbpj4C/8jvP0lNr39pRP8RB9DStu+Tg6Ie9htOAWTef8NkBbruVVr vpnPtAi+6GOcdVjmGxH7o+bcgQ+5BG3E72gCBKAUamEgZg7q9QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPZp5Cp3WSwwKHFmTrwTOENvjQcRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NzY1NzM1MC0yMjliLTQ5NDctYjhkZC03YmI2NzNjN2Y3YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM3NjU3MzUwLTIyOWItNDk0Ny1i OGRkLTdiYjY3M2M3ZjdjMi8zNzY1NzM1MC0yMjliLTQ5NDctYjhkZC03YmI2NzNj N2Y3YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADRjn0wDQQCAAIwBwMFACYF58AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhV7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH1AaosEeGb29tDRTZUFl2SaCCos gq50Bud40vk5lcBNfRzQcghg5KY9KmJ+vUY4VxTVO9vYzO7dZvNeuuVygenjT1F7 4JRvcX10qfMUVKll5j73/70P4UJbnuNQfofUxcUcj6H8TWEC6DiOOv85mEZSYtyf p2+Obf77fzGmLNczF3xCWFnfOzDx7qfOMzo6AhdkpM2ABp+nREcq/OOWbsQweUKT Nfla/oUc4iwTUKu2wIer9rj27jV2QWrzi/PRgRa97pXzMDuXYfNScS9ORnIVzOCm 3eN6xEkQkWO4RjWXGNepmbmodJnjO1FoyCm3kJqlz5oHQj11G+ctTQH1lMg= -----END CERTIFICATE-----Generated at Mon Nov 3 01:03:33 2025 by rpki-client