$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer File: 03e58790-8887-4eae-9965-80e3a70bdf97.cer (raw, json) Hash identifier: hs91U5jKJ6YiYdrpiCZAex0+6AtHNTaW2SpLAAnRpTA= Subject key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4CF8AAD602E3F253388E4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Jun 2025 19:23:14 +0000 Certificate not after: Mon 27 Sep 2027 19:23:14 +0000 Subordinate resources: AS: 46293 IP: 67.199.192.0/19 IP: 104.254.184.0/22 IP: 138.43.64.0/19 IP: 192.80.128.0/19 IP: 192.82.0.0/19 IP: 206.167.70.0/23 IP: 2604:1840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:f8:aa:d6:02:e3:f2:53:38:8e:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 24 19:23:14 2025 GMT Not After : Sep 27 19:23:14 2027 GMT Subject: CN=03e58790-8887-4eae-9965-80e3a70bdf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:49:df:f3:e5:b1:52:31:0f:98:3d:8c:35: e0:0f:f0:13:b2:cb:d3:38:e8:0f:57:29:e1:18:f7: 7e:63:3d:cd:eb:09:69:8d:14:0b:70:b7:c4:dd:59: 0a:21:0d:ef:2d:c9:e7:05:96:94:e9:6f:91:58:3b: 47:ca:d4:4f:d8:c6:b0:5a:42:51:84:d6:6a:85:0d: 9c:10:93:6d:f5:f3:57:96:42:ea:43:e6:84:8a:d7: b0:65:78:bd:80:50:23:62:2e:81:4e:27:62:e6:2a: 63:1e:3d:b6:bd:09:d5:bf:08:4a:9e:5c:d6:a8:96: 73:22:cd:41:80:76:2f:77:cf:23:d8:9f:98:2b:64: 79:6e:95:05:cb:58:7e:d5:96:3f:8b:ac:f7:3f:79: 75:f5:c5:90:48:ee:e9:18:ed:59:84:6e:74:54:d9: 27:a5:bc:71:9a:ee:3a:2b:8b:c1:90:b4:73:93:75: 80:07:a1:00:37:b0:41:6d:3b:4c:d6:ae:81:25:59: 3a:55:79:53:50:30:a5:69:21:4a:ad:7f:6c:a5:3e: a0:02:c7:4c:b9:48:58:ec:fe:8c:db:f7:d4:86:9e: 3a:f6:bb:8e:50:fb:b4:e3:58:d1:37:62:b9:05:27: 66:f7:be:bc:fb:d0:39:e6:ed:3e:be:91:38:6d:59: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 67.199.192.0/19 104.254.184.0/22 138.43.64.0/19 192.80.128.0/19 192.82.0.0/19 206.167.70.0/23 IPv6: 2604:1840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2a:ea:c2:10:4c:08:cf:05:1f:56:bf:6a:68:28:86:6d:f3: 49:74:91:14:f9:13:7c:8b:5e:f9:cd:f4:ed:62:21:6e:b3:e1: 24:af:bc:60:d5:50:ee:b1:c4:3a:ea:b6:5f:13:49:65:c6:f3: ab:70:b3:22:ea:1a:17:82:d3:6e:9c:ae:eb:1d:45:d7:04:c5: 4f:b1:ed:0f:51:fc:f9:24:2b:80:59:4d:b1:1a:47:0b:24:c4: 33:d5:3d:02:01:f8:49:f7:88:ed:43:b5:e1:8f:4d:9f:d0:7f: ce:6b:f0:ac:8d:11:fe:ee:fa:c9:e5:37:72:ea:fa:0a:a0:c2: e2:7b:cd:35:27:ca:23:62:b0:60:c3:0b:e2:42:04:73:be:46: d2:c2:3a:25:42:1b:60:57:4f:73:8d:35:0e:bd:2c:20:b3:63: 78:be:64:b5:35:a1:3d:50:98:fb:20:5e:63:c2:26:2f:40:c4: 29:9d:83:f7:5f:02:62:21:48:35:aa:00:50:e7:7d:56:b2:77: 86:bf:ff:ad:60:08:0b:de:2b:8b:8b:eb:2d:b9:83:fe:78:c1: 16:da:6b:b0:81:24:c2:fa:3e:75:c4:15:c9:7a:33:43:8d:37: 0c:66:3e:b1:0d:96:6d:de:37:27:07:ee:65:74:87:60:88:f1: 7a:6e:cf:7f -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEpM+KrWAuPyUziOQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNDE5MjMxNFoXDTI3MDkyNzE5MjMxNFowLzEtMCsGA1UEAxMk MDNlNTg3OTAtODg4Ny00ZWFlLTk5NjUtODBlM2E3MGJkZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR5J3/PlsVIxD5g9jDXgD/ATssvTOOgPVynh GPd+Yz3N6wlpjRQLcLfE3VkKIQ3vLcnnBZaU6W+RWDtHytRP2MawWkJRhNZqhQ2c EJNt9fNXlkLqQ+aEitewZXi9gFAjYi6BTidi5ipjHj22vQnVvwhKnlzWqJZzIs1B gHYvd88j2J+YK2R5bpUFy1h+1ZY/i6z3P3l19cWQSO7pGO1ZhG50VNknpbxxmu46 K4vBkLRzk3WAB6EAN7BBbTtM1q6BJVk6VXlTUDClaSFKrX9spT6gAsdMuUhY7P6M 2/fUhp469ruOUPu041jRN2K5BSdm9768+9A55u0+vpE4bVknsQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFFMqEUYA8j9Cqus+w7Ip9QLxl/X1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w M2U1ODc5MC04ODg3LTRlYWUtOTk2NS04MGUzYTcwYmRmOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzAzZTU4NzkwLTg4ODctNGVhZS05 OTY1LTgwZTNhNzBiZGY5Ny8wM2U1ODc5MC04ODg3LTRlYWUtOTk2NS04MGUzYTcw YmRmOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAVDx8ADBAJo/rgDBAWKK0ADBAXAUIADBAXAUgAD BAHOp0YwDQQCAAIwBwMFACYEGEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALTV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUq6sIQTAjPBR9Wv2poKIZt80l0kRT5E3yLXvnN9O1iIW6z4SSv vGDVUO6xxDrqtl8TSWXG86twsyLqGheC026crusdRdcExU+x7Q9R/PkkK4BZTbEa RwskxDPVPQIB+En3iO1DteGPTZ/Qf85r8KyNEf7u+snlN3Lq+gqgwuJ7zTUnyiNi sGDDC+JCBHO+RtLCOiVCG2BXT3ONNQ69LCCzY3i+ZLU1oT1QmPsgXmPCJi9AxCmd g/dfAmIhSDWqAFDnfVayd4a//61gCAveK4uL6y25g/54wRbaa7CBJML6PnXEFcl6 M0ONNwxmPrENlm3eNycH7mV0h2CI8Xpuz38= -----END CERTIFICATE-----Generated at Sun Oct 26 00:41:45 2025 by rpki-client