$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer File: 5138de2d-512a-4692-8c53-d2d9a6ceb549.cer (raw, json) Hash identifier: M2e8sUvqu/HWD09ucSsPc4rK+0LRe1kFapI7n3Zf+jU= Subject key identifier: 48:CF:03:1E:B0:F1:B4:01:7F:2D:DA:26:E5:2B:3D:55:AC:5D:F9:05 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A5FFF8E99C564F69AB7FA1E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 14:57:28 +0000 Certificate not after: Mon 29 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 15353 IP: 199.47.144.0/22 IP: 2602:fa11::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:ff:8e:99:c5:64:f6:9a:b7:fa:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 1 14:57:28 2025 GMT Not After : Mar 29 00:45:33 2027 GMT Subject: CN=5138de2d-512a-4692-8c53-d2d9a6ceb549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:29:3f:d3:3c:b8:6d:92:40:af:c1:49:4c: 13:ca:0e:8e:87:c3:10:49:ee:3c:5c:2b:d6:bf:16: 77:37:b0:87:2b:0e:4e:ae:c6:ee:3b:b6:1a:3c:23: 5e:f6:64:37:83:db:52:12:0f:2e:aa:04:dc:d8:aa: de:74:80:8d:80:3c:95:72:cd:b0:e6:7e:3e:e5:1e: 89:f5:d6:00:c9:35:36:0c:62:2a:e4:24:3a:64:9e: 8a:a9:9c:dc:50:83:30:36:39:16:ea:93:40:31:60: 24:d5:14:89:71:fd:7f:19:be:a6:37:52:c7:44:ee: 5f:05:2c:56:7a:a0:b3:2d:cd:a9:be:d7:b6:06:68: a6:29:da:28:67:1c:79:8f:28:1f:7f:d3:89:a8:85: af:d6:2d:d8:af:7e:44:28:59:26:42:96:78:9e:d0: 96:ca:ee:0e:6b:43:ac:b3:c5:a2:f2:35:b7:28:8e: f6:42:de:5a:2f:ec:40:12:e6:5b:ed:cb:a4:e0:f3: 5a:89:78:5a:33:4a:f8:ce:28:f1:c6:61:00:45:67: 8b:9b:bc:93:ac:de:7f:0d:97:eb:00:8d:ea:93:3b: a6:7f:e9:7b:ed:fb:2a:54:60:1c:a7:ad:31:ab:2b: b5:ce:d5:d5:eb:50:5d:1b:66:58:f7:b0:db:d3:26: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:03:1E:B0:F1:B4:01:7F:2D:DA:26:E5:2B:3D:55:AC:5D:F9:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.47.144.0/22 IPv6: 2602:fa11::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c5:7d:92:06:7d:3d:96:86:ee:8c:e5:f4:0d:68:ce:f4:a0: d9:d8:95:51:69:55:f0:c5:bf:98:85:4b:34:8d:8b:3c:f7:17: 6b:9b:b3:41:97:40:18:40:04:cd:1d:31:d6:3b:9f:f5:1f:10: 23:f1:7d:ff:aa:82:3b:a5:3d:6d:ac:53:94:38:85:a1:d1:ea: 9c:1f:7b:e5:62:06:d2:40:a5:97:33:ad:67:a7:62:1c:cb:91: 8f:82:e0:11:81:53:f0:47:c7:4f:4b:73:f6:dc:30:f4:7c:11: 29:d6:71:60:a2:44:72:ae:8f:a0:df:6d:4c:10:f0:04:0b:58: e9:ab:69:74:6a:29:ff:ac:34:07:1e:50:30:31:23:8e:2a:01: 30:b9:1e:04:69:83:49:63:07:df:24:14:cb:47:cc:15:b9:3e: 6e:de:cc:14:00:e5:52:ba:f4:25:19:9a:d1:b6:b6:8b:39:bf: f5:98:24:b5:62:da:7f:27:a0:64:41:cf:4f:80:fc:0d:07:a9: f0:49:0c:34:31:22:7b:02:f8:b5:7d:c6:96:2f:d3:0d:38:3d: e4:c0:26:e5:49:6d:97:89:c3:03:1a:64:7b:f2:86:a9:87:cd: 25:49:18:5e:51:0a:77:d9:6c:36:2c:9d:04:f7:62:26:d4:22: 6b:04:7b:71 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpf/46ZxWT2mrf6HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcwMTE0NTcyOFoXDTI3MDMyOTAwNDUzM1owLzEtMCsGA1UEAxMk NTEzOGRlMmQtNTEyYS00NjkyLThjNTMtZDJkOWE2Y2ViNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZApP9M8uG2SQK/BSUwTyg6Oh8MQSe48XCvW vxZ3N7CHKw5OrsbuO7YaPCNe9mQ3g9tSEg8uqgTc2KredICNgDyVcs2w5n4+5R6J 9dYAyTU2DGIq5CQ6ZJ6KqZzcUIMwNjkW6pNAMWAk1RSJcf1/Gb6mN1LHRO5fBSxW eqCzLc2pvte2BmimKdooZxx5jygff9OJqIWv1i3Yr35EKFkmQpZ4ntCWyu4Oa0Os s8Wi8jW3KI72Qt5aL+xAEuZb7cuk4PNaiXhaM0r4zijxxmEARWeLm7yTrN5/DZfr AI3qkzumf+l77fsqVGAcp60xqyu1ztXV61BdG2ZY97Db0yaj7wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEjPAx6w8bQBfy3aJuUrPVWsXfkFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1kMmQ5YTZjZWI1NDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzUxMzhkZTJkLTUxMmEtNDY5Mi04 YzUzLWQyZDlhNmNlYjU0OS81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1kMmQ5YTZj ZWI1NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHL5AwDgQCAAIwCAMGBCYC+hEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjv5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjFfZIGfT2Whu6M5fQNaM70oNnY lVFpVfDFv5iFSzSNizz3F2ubs0GXQBhABM0dMdY7n/UfECPxff+qgjulPW2sU5Q4 haHR6pwfe+ViBtJApZczrWenYhzLkY+C4BGBU/BHx09Lc/bcMPR8ESnWcWCiRHKu j6DfbUwQ8AQLWOmraXRqKf+sNAceUDAxI44qATC5HgRpg0ljB98kFMtHzBW5Pm7e zBQA5VK69CUZmtG2tos5v/WYJLVi2n8noGRBz0+A/A0HqfBJDDQxInsC+LV9xpYv 0w04PeTAJuVJbZeJwwMaZHvyhqmHzSVJGF5RCnfZbDYsnQT3YibUImsEe3E= -----END CERTIFICATE-----Generated at Mon Oct 27 09:21:04 2025 by rpki-client