$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e.cer File: 53691b85-8428-42e5-92a1-4f4a6c808f1e.cer (raw, json) Hash identifier: kFFJvqAZMdMA0CZizRld5ATHfcKPbqlzFpcl2QcgIds= Subject key identifier: 25:48:56:4F:D4:2D:DF:16:B6:2E:30:61:25:2F:07:57:D5:3E:D7:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A18188891EE7754AD9DD04260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/53691b85-8428-42e5-92a1-4f4a6c808f1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 20:49:36 +0000 Certificate not after: Wed 08 Sep 2027 20:49:36 +0000 Subordinate resources: AS: 398484 IP: 204.238.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:18:88:91:ee:77:54:ad:9d:d0:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 5 20:49:36 2025 GMT Not After : Sep 8 20:49:36 2027 GMT Subject: CN=53691b85-8428-42e5-92a1-4f4a6c808f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:74:e5:98:64:7f:c7:ae:d2:82:b2:0d:89: cb:b6:cd:86:29:fd:5b:5b:d9:29:a8:6e:1e:70:a8: 7a:b5:fe:b6:93:04:64:a7:10:c0:4f:20:ef:d0:93: 94:83:a3:51:c1:37:cb:9e:06:a4:00:4f:df:69:4b: ae:8f:61:31:83:a9:a3:16:a8:57:78:46:5e:1a:5e: 3b:cd:76:6c:39:fc:c8:45:39:71:c7:32:f7:84:b1: 7d:42:d2:be:e5:a6:7a:c5:c9:31:a4:6d:b4:6c:27: c2:ba:2b:92:71:7a:f5:4c:a7:6d:b7:68:c0:6e:a4: cc:0b:d0:1e:bd:6d:5c:3a:5b:86:35:15:bc:36:84: f7:f5:6e:1a:15:a7:f7:9d:3b:ff:30:d0:6e:eb:42: 66:4c:a3:c6:3b:83:b9:25:91:66:c7:62:7c:2a:68: de:fe:ae:8e:2b:83:88:85:43:8d:87:96:93:33:6d: 5b:83:fa:16:ef:57:30:72:6b:c8:f3:d1:b0:e6:41: 1d:eb:36:8d:c7:aa:ac:ba:52:ad:cf:4a:88:29:22: 0b:76:3f:1b:d8:67:50:c0:f7:f8:50:84:9a:32:98: 26:55:d8:c6:95:a6:34:fa:ed:b8:e6:8b:e0:10:c2: a6:3b:92:8a:55:7a:36:89:55:c8:af:0b:ea:f0:d8: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:56:4F:D4:2D:DF:16:B6:2E:30:61:25:2F:07:57:D5:3E:D7:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/53691b85-8428-42e5-92a1-4f4a6c808f1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.238.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398484 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:df:5a:67:bb:19:d7:cc:48:64:47:81:be:55:cf:36:09:2a: b6:5f:c3:95:be:97:67:a7:5a:6d:3c:3f:a2:d9:d2:aa:e2:b9: 43:aa:60:2c:c7:00:64:fa:c4:01:61:25:fc:b2:ba:d1:0d:a9: 38:18:fd:16:b4:aa:9d:ba:ef:58:24:4d:6d:cf:01:9d:74:e5: 53:e1:15:78:0f:c1:6c:06:99:81:19:3a:6e:c1:df:e0:1b:eb: cf:3a:ad:8c:4f:6c:34:ea:30:f6:96:32:69:f5:31:41:5b:e4: a7:81:ff:7b:cb:35:84:33:4d:15:fd:c1:60:94:6e:a2:c0:34: 47:65:47:68:0f:6f:37:86:53:74:78:ec:42:b8:a0:0b:95:4a: 2e:a4:c9:fa:78:d3:ae:78:4b:eb:19:db:8a:3e:8d:f7:56:1f: 73:9e:93:86:4d:f2:b9:bb:80:4b:b2:cc:69:a4:c7:fb:60:a0: 90:b5:02:6e:9b:5d:4a:b6:95:a1:ea:97:58:42:89:27:39:32: 7a:32:92:03:f1:79:5f:28:7a:1c:67:bd:3a:25:ad:56:77:1b: fa:cd:ad:3f:7e:76:ec:88:af:67:5e:90:72:e1:d7:19:9a:73: 9c:fa:8e:b0:19:60:ae:2d:0a:57:39:3c:0a:55:07:60:83:59: d3:e0:32:27 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEoYGIiR7ndUrZ3QQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNTIwNDkzNloXDTI3MDkwODIwNDkzNlowLzEtMCsGA1UEAxMk NTM2OTFiODUtODQyOC00MmU1LTkyYTEtNGY0YTZjODA4ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve505Zhkf8eu0oKyDYnLts2GKf1bW9kpqG4e cKh6tf62kwRkpxDATyDv0JOUg6NRwTfLngakAE/faUuuj2Exg6mjFqhXeEZeGl47 zXZsOfzIRTlxxzL3hLF9QtK+5aZ6xckxpG20bCfCuiuScXr1TKdtt2jAbqTMC9Ae vW1cOluGNRW8NoT39W4aFaf3nTv/MNBu60JmTKPGO4O5JZFmx2J8Kmje/q6OK4OI hUONh5aTM21bg/oW71cwcmvI89Gw5kEd6zaNx6qsulKtz0qIKSILdj8b2GdQwPf4 UISaMpgmVdjGlaY0+u245ovgEMKmO5KKVXo2iVXIrwvq8NjIlwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCVIVk/ULd8Wti4wYSUvB1fVPte1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 MzY5MWI4NS04NDI4LTQyZTUtOTJhMS00ZjRhNmM4MDhmMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzUzNjkxYjg1LTg0MjgtNDJlNS05 MmExLTRmNGE2YzgwOGYxZS81MzY5MWI4NS04NDI4LTQyZTUtOTJhMS00ZjRhNmM4 MDhmMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADM7v8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhSUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHXfWme7GdfMSGRHgb5VzzYJKrZfw5W+l2enWm08P6LZ0qri uUOqYCzHAGT6xAFhJfyyutENqTgY/Ra0qp2671gkTW3PAZ105VPhFXgPwWwGmYEZ Om7B3+Ab6886rYxPbDTqMPaWMmn1MUFb5KeB/3vLNYQzTRX9wWCUbqLANEdlR2gP bzeGU3R47EK4oAuVSi6kyfp40654S+sZ24o+jfdWH3Oek4ZN8rm7gEuyzGmkx/tg oJC1Am6bXUq2laHql1hCiSc5MnoykgPxeV8oehxnvTolrVZ3G/rNrT9+duyIr2de kHLh1xmac5z6jrAZYK4tClc5PApVB2CDWdPgMic= -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:55 2025 by rpki-client