$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer File: b2797f94-84cd-4d6b-a254-94f6593d32af.cer (raw, json) Hash identifier: CVdpKIv9wpbH88V1YC8WLbrPGZd9AcS/a8n+0lCNHHw= Subject key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B71BE98C18A075AD23ABA2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:18:04 +0000 Certificate not after: Mon 10 Jan 2028 17:18:04 +0000 Subordinate resources: AS: 22079 AS: 401381 AS: 401689 IP: 64.136.108.0/22 IP: 64.186.96.0/19 IP: 65.181.119.0/24 IP: 2606:1380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:be:98:c1:8a:07:5a:d2:3a:ba:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 7 16:18:04 2025 GMT Not After : Jan 10 17:18:04 2028 GMT Subject: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:81:ee:1a:26:cf:4b:2a:b1:cd:d2:15:ee: 00:80:d5:4f:0c:59:42:5b:2b:85:ea:20:d3:c6:8e: 99:f2:89:ae:0e:84:04:95:85:25:6a:03:7c:ae:98: e2:25:3b:4b:86:d2:b3:1c:b5:5e:a4:d9:8e:b2:ed: f1:f1:ea:73:fb:2c:3b:5e:21:7e:2e:56:1b:5d:4b: b6:2a:e6:56:7b:85:c9:63:d9:64:3f:2d:9c:26:e4: db:58:fc:49:d1:ea:50:c2:91:a6:ae:74:cd:99:e4: 87:70:05:07:7e:87:ff:02:d5:a9:05:d7:9f:ef:4f: ec:c2:37:a2:3c:1c:51:61:85:2a:57:1a:df:7a:b1: 1a:b9:c3:2c:a3:b6:d6:91:8a:e1:69:b2:38:84:b8: d8:74:36:d2:b8:ca:3e:38:f1:48:23:db:e7:c9:98: fa:ca:07:52:e4:aa:dc:3c:9b:ce:b4:a4:80:fe:ba: a4:d6:2b:7d:1e:3e:65:78:7a:b8:a0:7e:f4:0c:a5: 52:e5:12:e0:dd:12:12:07:bc:42:fc:70:d9:03:1f: 9f:4c:67:a1:31:2a:11:6e:1d:57:68:be:7f:72:69: 36:8e:71:eb:e8:44:dd:7d:75:e4:14:49:57:47:20: 70:08:9d:89:f1:c3:da:1c:db:63:a8:45:8b:2c:93: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.136.108.0/22 64.186.96.0/19 65.181.119.0/24 IPv6: 2606:1380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22079 401381 401689 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d8:c9:32:76:ee:8a:3b:6e:19:e5:fb:ae:0b:91:3d:49:6b: ba:dc:1d:62:b9:91:1a:61:02:89:a3:ca:a5:13:e1:f6:d9:d6: 08:9d:a4:78:58:b1:dc:27:fa:fe:93:3d:46:6d:dc:c0:d8:c6: 50:c0:38:00:70:66:da:cd:32:e5:e0:5f:e5:17:2a:29:68:5c: c0:71:ff:9c:48:0d:50:4b:38:3b:59:2c:68:b5:66:4c:1c:09: ba:77:7f:97:9e:36:30:0f:0f:8e:a5:bc:d8:57:de:32:5a:a8: 52:8c:41:78:fe:7e:09:e0:25:6d:94:4d:94:c8:33:c1:ac:00: aa:07:0a:40:f4:b6:9f:f1:3a:a2:e9:b3:ae:f6:bc:bd:34:eb: 19:c1:8d:e7:0c:5d:8a:66:d3:d4:02:bb:f7:b8:48:d6:8e:ba: 12:9d:4b:17:b1:50:40:f2:85:82:90:81:85:4e:a3:9c:bd:75: 71:b2:a6:77:7b:cf:3c:47:28:a4:2a:16:99:85:51:3a:65:d1: 8c:dc:b2:ac:68:a9:c3:22:db:74:88:43:c7:1e:d1:8a:c0:55: 89:ce:de:48:5f:42:fd:6c:43:c5:bf:03:16:ff:90:c3:6f:9f: fd:b6:52:74:e4:d2:cf:41:7b:41:7f:72:92:dd:8c:a2:25:5f: b6:58:2c:f4 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEtxvpjBigda0jq6KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTAwNzE2MTgwNFoXDTI4MDExMDE3MTgwNFowLzEtMCsGA1UEAxMk YjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2QzMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitSB7homz0sqsc3SFe4AgNVPDFlCWyuF6iDT xo6Z8omuDoQElYUlagN8rpjiJTtLhtKzHLVepNmOsu3x8epz+yw7XiF+LlYbXUu2 KuZWe4XJY9lkPy2cJuTbWPxJ0epQwpGmrnTNmeSHcAUHfof/AtWpBdef70/swjei PBxRYYUqVxrferEaucMso7bWkYrhabI4hLjYdDbSuMo+OPFII9vnyZj6ygdS5Krc PJvOtKSA/rqk1it9Hj5leHq4oH70DKVS5RLg3RISB7xC/HDZAx+fTGehMSoRbh1X aL5/cmk2jnHr6ETdfXXkFElXRyBwCJ2J8cPaHNtjqEWLLJNqUQIDAQABo4IEPzCC BDswHQYDVR0OBBYEFGpYmTGEUew1BXsiNf9wUuoYbFchMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i Mjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1h MjU0LTk0ZjY1OTNkMzJhZi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkz ZDMyYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJAiGwDBAVAumADBABBtXcwDQQCAAIwBwMFACYG E4AwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICVj8CAwYf5QIDBiEZMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJbYyTJ27oo7bhnl+64LkT1Ja7rcHWK5kRphAomjyqUT4fbZ1gidpHhYsdwn+v6T PUZt3MDYxlDAOABwZtrNMuXgX+UXKiloXMBx/5xIDVBLODtZLGi1ZkwcCbp3f5ee NjAPD46lvNhX3jJaqFKMQXj+fgngJW2UTZTIM8GsAKoHCkD0tp/xOqLps672vL00 6xnBjecMXYpm09QCu/e4SNaOuhKdSxexUEDyhYKQgYVOo5y9dXGypnd7zzxHKKQq FpmFUTpl0YzcsqxoqcMi23SIQ8ce0YrAVYnO3khfQv1sQ8W/Axb/kMNvn/22UnTk 0s9Be0F/cpLdjKIlX7ZYLPQ= -----END CERTIFICATE-----Generated at Mon Nov 3 00:57:48 2025 by rpki-client