$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5e3d07dc-0592-44d2-b206-d438babc0ce6.cer File: 5e3d07dc-0592-44d2-b206-d438babc0ce6.cer (raw, json) Hash identifier: W+doeA96UN93jBA6exBzBM9GDz2bdSkqGKS5Lt+8dD8= Subject key identifier: 76:09:E9:AE:E6:77:3A:64:2B:32:66:3C:33:6C:DE:C1:6B:CA:A0:51 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B7AA642C024E25D135FBCE8B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5e3d07dc-0592-44d2-b206-d438babc0ce6/5e3d07dc-0592-44d2-b206-d438babc0ce6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5e3d07dc-0592-44d2-b206-d438babc0ce6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 20:51:19 +0000 Certificate not after: Mon 11 Jan 2027 13:45:27 +0000 Subordinate resources: AS: 32819 IP: 104.249.169.0/24 IP: 142.248.4.0/22 IP: 2602:f6a5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:a6:42:c0:24:e2:5d:13:5f:bc:e8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 10 20:51:19 2025 GMT Not After : Jan 11 13:45:27 2027 GMT Subject: CN=5e3d07dc-0592-44d2-b206-d438babc0ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:99:17:ce:db:23:7f:c1:03:24:57:fa:cc: 07:1c:20:bd:d9:14:e3:db:2a:9a:8e:bf:20:68:f0: 91:07:80:50:e2:19:25:0b:7d:f0:64:4b:45:7e:2f: 93:30:36:14:73:d3:82:57:18:2c:fb:ee:3e:e0:27: fc:01:41:8c:61:d1:ee:3f:86:43:93:65:a7:5d:e3: 81:e0:3f:f6:20:f1:77:b9:51:36:2f:34:1f:47:76: 5b:13:10:40:c1:04:d6:2b:4d:e6:d3:02:f6:53:de: 11:1f:8d:b0:d0:12:0f:f4:99:73:19:1b:8a:c1:5c: bd:79:97:b7:5a:7f:f6:c3:ba:b1:5c:2b:b6:7d:35: 5a:4f:c0:2f:5e:82:79:1e:cd:e6:4f:a9:6c:8c:da: d5:e5:71:f2:c8:fb:d5:1a:c7:1f:31:db:f5:84:05: 0d:0e:1d:0c:dd:d5:36:63:40:81:52:66:d7:07:61: 59:4d:ab:c4:d0:ab:87:f2:e4:34:5a:42:58:24:3a: bc:fa:5d:ab:c0:06:8e:7f:0a:40:20:6c:43:c7:b6: 3c:90:72:26:62:13:20:2c:30:ef:18:66:96:2f:1b: 3d:14:04:c7:b5:8c:66:32:37:a9:f0:06:03:72:31: 2e:34:ab:d5:bc:7e:d7:3f:24:ea:cf:59:c1:7c:f2: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:09:E9:AE:E6:77:3A:64:2B:32:66:3C:33:6C:DE:C1:6B:CA:A0:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5e3d07dc-0592-44d2-b206-d438babc0ce6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5e3d07dc-0592-44d2-b206-d438babc0ce6/5e3d07dc-0592-44d2-b206-d438babc0ce6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.249.169.0/24 142.248.4.0/22 IPv6: 2602:f6a5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32819 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9d:46:8f:64:ba:c5:c3:dd:ff:63:bf:29:65:cb:47:2a:00: 41:a8:a7:23:e3:c4:7e:93:64:a6:90:a7:64:cf:bb:d7:1e:16: 22:58:4e:8b:cc:9c:89:e0:7d:61:03:f4:13:2b:66:9d:6b:5f: 1c:e0:cc:9f:03:12:cb:53:18:42:aa:c0:43:a2:92:c5:c5:a3: 22:12:ef:b0:94:d2:89:30:f2:72:63:cc:9b:79:fa:ea:87:d5: b5:67:54:cf:7b:06:67:41:24:30:d0:81:04:59:94:39:02:a5: d2:21:82:eb:85:4e:81:c0:6e:07:06:1c:2a:6f:f1:67:40:22: f3:d4:e4:9d:63:ad:42:da:3e:40:15:bd:23:7c:78:83:7a:45: d7:6d:c2:01:cd:98:8c:a3:f5:c6:ea:80:26:8a:20:93:44:ef: 49:eb:e6:a5:06:ac:6d:50:21:86:98:18:06:55:c5:85:b3:e9: c5:75:db:1f:4f:df:fb:81:54:4e:58:fe:4b:77:1d:02:63:31: 70:a3:81:1e:09:4f:01:d8:c4:eb:e4:9a:a5:64:f4:e1:c0:e5: f6:13:f2:8a:89:3e:c9:17:f0:19:b2:b7:2c:af:34:07:66:35: d0:2b:78:dc:73:30:77:d8:60:57:5a:ef:7b:d0:e3:82:43:7e: 9d:dc:e7:2f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt6pkLAJOJdE1+86LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAxMDIwNTExOVoXDTI3MDExMTEzNDUyN1owLzEtMCsGA1UEAxMk NWUzZDA3ZGMtMDU5Mi00NGQyLWIyMDYtZDQzOGJhYmMwY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknmZF87bI3/BAyRX+swHHCC92RTj2yqajr8g aPCRB4BQ4hklC33wZEtFfi+TMDYUc9OCVxgs++4+4Cf8AUGMYdHuP4ZDk2WnXeOB 4D/2IPF3uVE2LzQfR3ZbExBAwQTWK03m0wL2U94RH42w0BIP9JlzGRuKwVy9eZe3 Wn/2w7qxXCu2fTVaT8AvXoJ5Hs3mT6lsjNrV5XHyyPvVGscfMdv1hAUNDh0M3dU2 Y0CBUmbXB2FZTavE0KuH8uQ0WkJYJDq8+l2rwAaOfwpAIGxDx7Y8kHImYhMgLDDv GGaWLxs9FATHtYxmMjep8AYDcjEuNKvVvH7XPyTqz1nBfPKK+wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHYJ6a7mdzpkKzJmPDNs3sFryqBRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 ZTNkMDdkYy0wNTkyLTQ0ZDItYjIwNi1kNDM4YmFiYzBjZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVlM2QwN2RjLTA1OTItNDRkMi1i MjA2LWQ0MzhiYWJjMGNlNi81ZTNkMDdkYy0wNTkyLTQ0ZDItYjIwNi1kNDM4YmFi YzBjZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABo+akDBAKO+AQwDgQCAAIwCAMGACYC9qUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCAMzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBinUaPZLrFw93/Y78p ZctHKgBBqKcj48R+k2SmkKdkz7vXHhYiWE6LzJyJ4H1hA/QTK2ada18c4MyfAxLL UxhCqsBDopLFxaMiEu+wlNKJMPJyY8ybefrqh9W1Z1TPewZnQSQw0IEEWZQ5AqXS IYLrhU6BwG4HBhwqb/FnQCLz1OSdY61C2j5AFb0jfHiDekXXbcIBzZiMo/XG6oAm iiCTRO9J6+alBqxtUCGGmBgGVcWFs+nFddsfT9/7gVROWP5Ldx0CYzFwo4EeCU8B 2MTr5JqlZPThwOX2E/KKiT7JF/AZsrcsrzQHZjXQK3jcczB32GBXWu970OOCQ36d 3Ocv -----END CERTIFICATE-----Generated at Mon Nov 3 00:58:42 2025 by rpki-client