$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer File: 58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer (raw, json) Hash identifier: WBSwWBIQ9mR7CUSwtu7sPd/c3dF2TMlhErVpPfHiKHk= Subject key identifier: 8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A611C67410DCB8BFE796C5BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 00:31:24 +0000 Certificate not after: Tue 05 Oct 2027 00:31:24 +0000 Subordinate resources: AS: 12110 IP: 199.47.172.0/22 IP: 2605:900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:1c:67:41:0d:cb:8b:fe:79:6c:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 2 00:31:24 2025 GMT Not After : Oct 5 00:31:24 2027 GMT Subject: CN=58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:eb:c7:d4:90:b5:fb:55:f5:b7:e9:bf:65: 65:fb:ab:b7:da:be:67:45:e6:fb:e8:20:80:6d:92: 3a:48:b1:e6:62:7e:52:4c:c3:fc:46:ee:ef:6f:00: 7a:35:f4:86:e6:74:ff:53:48:f2:23:69:9a:65:5d: 6d:76:bb:f5:a0:f9:0d:45:d5:f1:5e:e2:a2:b1:a0: 02:f2:bf:85:69:6a:19:91:94:57:dc:77:8c:1a:11: 80:df:88:79:a1:2a:e1:dc:e8:3f:68:43:e7:31:9a: ef:57:2a:e5:18:75:bf:53:74:5e:56:03:52:82:dd: 94:09:5a:67:21:43:48:20:07:07:6e:0f:a9:59:57: ab:4d:e8:5b:e2:27:26:f0:5c:8d:86:55:1b:1b:54: b8:40:99:24:55:eb:55:38:3d:4c:a6:c9:95:d7:1c: a4:2f:23:0b:b9:bc:9d:5a:9d:4b:81:a5:3c:9e:90: 5e:0e:07:b5:e0:3f:00:44:79:7e:b5:c2:37:4c:34: 81:11:7e:68:18:65:aa:f1:1a:7d:22:f3:ce:13:45: 9d:c3:c6:7e:d1:9c:0f:d1:a6:36:12:8d:70:78:a1: 8c:8c:9d:e8:af:60:cd:ab:54:b5:67:ed:59:b2:1a: 9b:7b:c1:a4:55:dd:c3:e3:86:1c:5c:27:70:61:19: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.47.172.0/22 IPv6: 2605:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:97:b4:25:35:a4:c1:1d:f4:2a:a9:58:a0:fb:ac:68:79:3d: 49:df:ae:1f:15:b4:ae:84:ae:94:41:05:ae:50:93:f3:bb:16: a8:a0:76:12:61:e0:5c:3c:ba:4e:d8:58:43:8b:a5:df:ca:3e: 6f:ec:e8:54:13:03:57:69:d3:87:91:00:0a:73:6c:c5:72:c7: 63:dd:20:2d:2d:03:88:73:5a:f7:05:6b:50:5c:e4:28:1a:2e: 3b:7f:d2:9a:5e:68:90:52:80:cf:4a:fa:aa:cd:e8:87:ee:ed: 45:37:2f:b5:18:87:ab:1f:f2:7d:75:45:cf:c1:21:30:d1:97: a0:9f:75:9a:93:46:37:ea:01:33:70:c6:af:d1:37:3f:66:c2: 4c:8b:4c:6c:bc:d5:35:ac:3f:b5:10:fa:4b:4d:11:9a:2b:b8: 80:d4:42:eb:4b:0d:92:e6:32:02:9e:61:7e:92:fe:f6:f1:45: a0:ec:b2:b8:ca:4d:a6:bd:b7:39:8c:ff:aa:c6:70:96:76:ee: 6b:a2:26:46:c5:82:f5:b3:0c:3f:20:99:2b:4f:ad:8b:3e:91: 28:cc:93:68:7a:e7:fd:f9:e4:cc:9b:3a:8e:98:fd:e4:77:0f: e6:33:ea:c5:43:64:bd:55:2b:8d:74:87:2a:c5:d0:f3:74:4b: eb:8c:99:ca -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEphHGdBDcuL/nlsW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDcwMjAwMzEyNFoXDTI3MTAwNTAwMzEyNFowLzEtMCsGA1UEAxMk NThkOWU0MjUtZTc2YS00MGFlLThlMDAtM2VhMmJiMmU3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifDrx9SQtftV9bfpv2Vl+6u32r5nReb76CCA bZI6SLHmYn5STMP8Ru7vbwB6NfSG5nT/U0jyI2maZV1tdrv1oPkNRdXxXuKisaAC 8r+FaWoZkZRX3HeMGhGA34h5oSrh3Og/aEPnMZrvVyrlGHW/U3ReVgNSgt2UCVpn IUNIIAcHbg+pWVerTehb4icm8FyNhlUbG1S4QJkkVetVOD1MpsmV1xykLyMLubyd Wp1LgaU8npBeDge14D8ARHl+tcI3TDSBEX5oGGWq8Rp9IvPOE0Wdw8Z+0ZwP0aY2 Eo1weKGMjJ3or2DNq1S1Z+1Zshqbe8GkVd3D44YcXCdwYRkZDQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFI5niBqnii141vsc5spGjPSdTm+BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 OGQ5ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEyYmIyZTdlMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU4ZDllNDI1LWU3NmEtNDBhZS04 ZTAwLTNlYTJiYjJlN2UyYS81OGQ5ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEyYmIy ZTdlMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHL6wwDQQCAAIwBwMFACYFCQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICL04wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASZe0JTWkwR30KqlYoPusaHk9Sd+u HxW0roSulEEFrlCT87sWqKB2EmHgXDy6TthYQ4ul38o+b+zoVBMDV2nTh5EACnNs xXLHY90gLS0DiHNa9wVrUFzkKBouO3/Sml5okFKAz0r6qs3oh+7tRTcvtRiHqx/y fXVFz8EhMNGXoJ91mpNGN+oBM3DGr9E3P2bCTItMbLzVNaw/tRD6S00Rmiu4gNRC 60sNkuYyAp5hfpL+9vFFoOyyuMpNpr23OYz/qsZwlnbua6ImRsWC9bMMPyCZK0+t iz6RKMyTaHrn/fnkzJs6jpj95HcP5jPqxUNkvVUrjXSHKsXQ83RL64yZyg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:44 2025 by rpki-client