$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0.cer File: 64db7e92-777d-4c08-864a-85f57c2290b0.cer (raw, json) Hash identifier: UykI803+cQpmIGOUEXFXHXgmx6cvvfW6Nqx35osoRUM= Subject key identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B269E4EB3577EE2511349A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 18:27:23 +0000 Certificate not after: Sun 19 Sep 2027 14:30:15 +0000 Subordinate resources: AS: 401781 IP: 64.190.218.0/24 IP: 167.150.89.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:9e:4e:b3:57:7e:e2:51:13:49:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 10 18:27:23 2025 GMT Not After : Sep 19 14:30:15 2027 GMT Subject: CN=64db7e92-777d-4c08-864a-85f57c2290b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:af:c5:9b:f4:9a:89:52:17:b3:71:8b:bf: f3:9c:d5:4c:a5:f1:12:67:e3:e3:3c:d9:b8:ba:65: 6d:ff:88:f0:3c:9a:ab:af:d8:f7:e8:03:cd:28:fd: 1c:70:3f:76:50:9a:be:f2:44:3a:3d:a3:15:15:b1: 4e:21:2e:ed:45:47:c0:ec:0b:88:bd:e4:b1:a8:4b: b5:43:0a:41:55:95:a0:9a:88:fb:56:26:f4:ed:c4: 78:6a:fc:c7:5c:20:fd:f0:51:cd:35:ff:e0:12:1c: 71:3f:14:ef:7e:24:6f:ed:9c:17:50:fe:9d:98:3f: 6d:d1:35:56:53:5d:29:51:e6:08:ab:eb:36:c7:3d: d4:55:8d:61:e5:ec:62:04:68:96:99:e4:96:59:e9: 58:70:fd:92:ab:95:53:5a:a4:29:03:9d:1c:8f:02: 7c:ec:43:a3:b0:df:09:10:88:2f:d8:95:06:85:41: 99:36:98:a1:44:a7:19:71:9f:ff:99:75:5c:d1:c1: b7:23:66:18:56:35:b4:71:fb:d8:77:ba:83:1b:12: 80:0c:58:09:62:96:8b:c6:a9:13:5f:6b:3c:2d:d0: 24:ea:b3:86:75:e9:79:e2:a7:9d:d2:e8:c2:77:ab: 38:62:96:94:1a:8f:d9:94:f7:9a:35:55:cb:a2:bb: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.190.218.0/24 167.150.89.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:8a:f2:ca:3b:6f:a8:03:6a:29:22:eb:5d:e5:57:27:2c: 89:b3:e7:7f:7c:9f:fa:c7:0d:45:11:29:f8:85:39:81:ec:ae: c8:9a:5b:b8:3d:1c:bd:6c:25:11:30:23:fb:cd:60:81:d2:2b: e0:f5:ed:ba:dc:00:2e:55:5b:a8:40:41:4d:5d:3f:e6:c0:a0: f9:16:85:9b:7c:8e:42:af:46:de:b2:b8:32:53:e9:9d:3e:b5: 0e:ea:a3:a5:bd:b6:37:6a:e0:6b:72:77:86:6a:3f:3f:22:0b: 8c:4e:0f:cd:09:dc:6b:ab:52:34:54:30:e8:93:a1:29:1d:c0: 90:47:b8:50:0c:f6:47:ce:59:37:8b:33:c5:f8:92:d6:be:20: de:5f:33:25:7c:ab:66:26:92:f8:77:9b:02:bb:23:cf:7c:15: 87:95:85:8b:b6:df:33:ef:ae:b3:60:1b:53:f4:90:e7:61:6c: 41:d8:6b:e6:7a:33:db:e6:6c:cc:5f:67:af:31:ca:be:7c:80: 28:b9:8d:17:db:4b:3f:61:69:f6:bc:e2:cd:9f:17:17:cf:18: 4f:cd:98:0b:bd:b9:a2:4f:5e:de:bb:87:49:75:3c:52:b8:ac: bf:2a:58:e7:71:11:d4:e9:cb:dc:43:fb:e2:d2:bf:64:30:31: 21:a0:1f:98 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEsmnk6zV37iURNJpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDkxMDE4MjcyM1oXDTI3MDkxOTE0MzAxNVowLzEtMCsGA1UEAxMk NjRkYjdlOTItNzc3ZC00YzA4LTg2NGEtODVmNTdjMjI5MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKvxZv0molSF7Nxi7/znNVMpfESZ+PjPNm4 umVt/4jwPJqrr9j36APNKP0ccD92UJq+8kQ6PaMVFbFOIS7tRUfA7AuIveSxqEu1 QwpBVZWgmoj7Vib07cR4avzHXCD98FHNNf/gEhxxPxTvfiRv7ZwXUP6dmD9t0TVW U10pUeYIq+s2xz3UVY1h5exiBGiWmeSWWelYcP2Sq5VTWqQpA50cjwJ87EOjsN8J EIgv2JUGhUGZNpihRKcZcZ//mXVc0cG3I2YYVjW0cfvYd7qDGxKADFgJYpaLxqkT X2s8LdAk6rOGdel54qed0ujCd6s4YpaUGo/ZlPeaNVXLoruhoQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBruXgv/2hxun6tBHrKBv8hCLCktMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2MyMjkwYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY0ZGI3ZTkyLTc3N2QtNGMwOC04 NjRhLTg1ZjU3YzIyOTBiMC82NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2My MjkwYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAvtoDBACnllkwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiF1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADkgivLKO2+oA2opIutd5VcnLImz5398n/rHDUUR KfiFOYHsrsiaW7g9HL1sJREwI/vNYIHSK+D17brcAC5VW6hAQU1dP+bAoPkWhZt8 jkKvRt6yuDJT6Z0+tQ7qo6W9tjdq4Gtyd4ZqPz8iC4xOD80J3GurUjRUMOiToSkd wJBHuFAM9kfOWTeLM8X4kta+IN5fMyV8q2Ymkvh3mwK7I898FYeVhYu23zPvrrNg G1P0kOdhbEHYa+Z6M9vmbMxfZ68xyr58gCi5jRfbSz9hafa84s2fFxfPGE/NmAu9 uaJPXt67h0l1PFK4rL8qWOdxEdTpy9xD++LSv2QwMSGgH5g= -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:53 2025 by rpki-client