$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer File: 39901aa6-e826-47dc-9f16-612ab05bfcfd.cer (raw, json) Hash identifier: OCpLl0hxsOtjHGZ2+q2lt6QneZ+QiLpYbuu1i2SPnMY= Subject key identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B354F59932B58BFA8DC828100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Sep 2025 00:45:25 +0000 Certificate not after: Mon 20 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 54539 IP: 199.182.64.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:4f:59:93:2b:58:bf:a8:dc:82:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 16 00:45:25 2025 GMT Not After : Dec 20 01:45:25 2027 GMT Subject: CN=39901aa6-e826-47dc-9f16-612ab05bfcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:dc:dd:ab:f4:47:c0:51:67:1c:82:e8:08: f0:db:13:16:8a:da:ab:02:bf:2c:b3:10:41:7a:da: 61:3e:10:f3:d5:ee:ef:47:9c:2d:88:1b:74:8d:80: 78:df:c5:11:e9:41:07:7f:4a:6d:33:72:df:b7:fc: dc:c7:51:55:0c:b0:22:39:c8:c1:77:c3:72:42:0a: 1d:6f:ed:79:74:54:f0:f2:59:9c:36:c1:05:27:16: 1a:00:c7:d7:b3:3d:7c:32:a0:27:bd:60:ae:93:80: 6e:87:77:21:e2:b1:e7:e5:d8:6b:5b:65:3c:c6:75: f8:e4:ff:28:7f:93:37:85:9d:48:82:00:bb:40:6f: ac:41:2e:de:f3:3d:56:c0:05:5e:fd:13:40:b7:65: db:aa:79:94:c1:5f:ee:05:05:10:2f:ba:3a:2a:d1: 01:2a:e4:ef:1d:f5:4b:6c:e1:e8:45:08:cf:8f:b0: 93:7c:60:54:3f:63:61:54:2f:f0:f5:36:4d:95:f3: bf:f1:bc:52:05:a0:8b:e7:a0:5e:d1:0c:d4:1f:00: 85:74:10:79:a1:99:e6:12:87:fe:6c:ca:5d:d9:2e: a8:21:94:38:d6:8a:0b:3c:a0:b0:de:29:72:71:82: ed:61:dc:18:9c:ba:d0:4a:ea:f0:e1:5b:11:82:fc: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.182.64.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54539 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:df:72:3a:07:a7:17:ad:a6:cc:8a:3f:ad:0a:fa:46:31:14: 59:29:af:11:7b:9b:67:a1:cb:fd:32:34:cf:23:9f:2d:9e:af: 4c:02:4e:eb:3d:40:a3:32:34:d5:35:06:8e:38:e9:18:41:2e: 70:27:83:e0:f0:c6:25:b9:17:dd:08:f0:69:2b:fb:c2:f8:3e: 4e:89:0a:df:5e:78:de:e9:6b:ee:92:b4:da:4e:02:fb:fe:c0: 0c:ef:a0:07:45:0c:85:67:b5:79:59:72:3e:53:30:05:8a:4a: 1c:7f:c9:d4:0c:2a:fe:1b:92:19:54:68:75:e0:1b:d6:f1:3a: fd:25:a8:d1:89:9d:aa:a9:ef:7a:93:97:38:94:6c:c7:27:88: 12:ac:46:b9:4f:fe:bd:f2:76:b9:8b:a5:dc:f3:af:1b:83:f7: b0:0c:6a:09:d1:ac:95:6a:4c:f3:03:11:62:db:9f:3f:bd:64: 05:b0:7d:03:9f:81:9c:72:8a:8a:4d:93:30:f7:08:15:b6:44: 3e:90:c1:e2:72:18:c3:ae:a8:f4:dc:6c:c0:11:0f:12:f0:13: a7:c2:f6:d2:1f:ff:91:6d:f7:36:5b:fd:49:69:4f:18:ed:cd: 44:b1:de:69:4a:ae:1d:69:2c:88:af:c0:b3:c0:64:e1:25:f3: 84:0a:7a:ef -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEs1T1mTK1i/qNyCgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkxNjAwNDUyNVoXDTI3MTIyMDAxNDUyNVowLzEtMCsGA1UEAxMk Mzk5MDFhYTYtZTgyNi00N2RjLTlmMTYtNjEyYWIwNWJmY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqfc3av0R8BRZxyC6Ajw2xMWitqrAr8ssxBB etphPhDz1e7vR5wtiBt0jYB438UR6UEHf0ptM3Lft/zcx1FVDLAiOcjBd8NyQgod b+15dFTw8lmcNsEFJxYaAMfXsz18MqAnvWCuk4Buh3ch4rHn5dhrW2U8xnX45P8o f5M3hZ1IggC7QG+sQS7e8z1WwAVe/RNAt2XbqnmUwV/uBQUQL7o6KtEBKuTvHfVL bOHoRQjPj7CTfGBUP2NhVC/w9TZNlfO/8bxSBaCL56Be0QzUHwCFdBB5oZnmEof+ bMpd2S6oIZQ41ooLPKCw3ilycYLtYdwYnLrQSurw4VsRgvzxIwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFbmRho7y3jIgOWm26iR//M4rZtaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z OTkwMWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJhYjA1YmZjZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM5OTAxYWE2LWU4MjYtNDdkYy05 ZjE2LTYxMmFiMDViZmNmZC8zOTkwMWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJhYjA1 YmZjZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHtkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANULMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEzfcjoHpxetpsyKP60K+kYxFFkprxF7m2ehy/0yNM8jny2e r0wCTus9QKMyNNU1Bo446RhBLnAng+DwxiW5F90I8Gkr+8L4Pk6JCt9eeN7pa+6S tNpOAvv+wAzvoAdFDIVntXlZcj5TMAWKShx/ydQMKv4bkhlUaHXgG9bxOv0lqNGJ naqp73qTlziUbMcniBKsRrlP/r3ydrmLpdzzrxuD97AMagnRrJVqTPMDEWLbnz+9 ZAWwfQOfgZxyiopNkzD3CBW2RD6QweJyGMOuqPTcbMARDxLwE6fC9tIf/5Ft9zZb /UlpTxjtzUSx3mlKrh1pLIivwLPAZOEl84QKeu8= -----END CERTIFICATE-----Generated at Sat Oct 18 00:26:32 2025 by rpki-client