$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer File: 883ca040-a898-4e47-b1e1-f2461996a058.cer (raw, json) Hash identifier: cz4X5p43GB/I1Mkm44WWl2/GZpi4VjLfzvyWxhi9brI= Subject key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849EAC69D03DE1F397634B295A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 May 2025 15:13:10 +0000 Certificate not after: Mon 23 Aug 2027 15:13:10 +0000 Subordinate resources: AS: 54249 IP: 209.189.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:c6:9d:03:de:1f:39:76:34:b2:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 20 15:13:10 2025 GMT Not After : Aug 23 15:13:10 2027 GMT Subject: CN=883ca040-a898-4e47-b1e1-f2461996a058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:36:cb:72:5c:ac:6c:90:82:45:d1:20:4d: ff:e3:4d:46:bf:1f:0b:0a:eb:25:98:57:71:47:1a: c7:a7:63:40:f8:e2:95:fe:0e:99:99:f8:da:77:4d: 58:5f:b9:76:b4:0d:41:f6:91:ba:97:32:07:52:46: f4:07:8c:ca:0a:af:65:6e:cf:3b:1c:40:5b:74:8f: c2:a6:fb:53:72:8e:72:7d:d3:40:5e:e8:f6:47:31: 74:b5:69:73:35:e0:b1:f6:59:23:98:71:77:82:26: 1e:0f:9e:2b:af:c8:28:46:0c:99:2b:95:35:06:a7: 30:7a:3c:66:4b:f8:86:9f:42:b7:48:51:70:37:b6: f1:93:f4:fa:d8:bb:64:f0:c7:6e:c8:70:86:82:9d: a2:ea:eb:0b:fb:41:a9:a4:93:6d:48:07:b9:21:32: 87:0a:67:50:69:2b:0f:8a:0d:67:fe:23:3c:df:2e: a6:18:de:d8:8d:6c:65:a7:6a:d5:16:d8:4a:c9:89: 3f:f9:43:1f:ce:b1:c3:8f:c2:9e:4c:8e:5c:9e:6c: 88:a8:95:9b:4f:a7:bf:cf:03:3a:50:2a:ee:f3:74: 39:e6:d1:06:80:a9:7c:b2:32:9e:02:0b:a2:c3:78: f7:c4:35:48:07:a3:de:98:ba:12:1e:a4:78:59:ec: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.189.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:33:57:05:a0:dc:48:d2:10:8c:2a:b8:66:86:cc:85:9a:93: 7e:91:33:0b:ea:8b:06:28:ae:02:d9:ea:e5:ee:91:ff:a5:2f: 52:d2:65:5a:9a:e5:ea:4c:7c:e4:44:03:f9:26:58:40:ef:25: cc:d7:82:07:f3:6a:38:f3:8a:67:68:8c:cc:64:ee:42:4d:b6: 04:6c:5e:ac:fe:85:c7:e6:ae:dc:ec:35:ed:e0:a6:c2:14:8c: df:54:ab:f2:cc:f5:f1:03:90:b3:be:03:66:bf:c1:70:05:f9: 3a:8e:be:e4:08:16:dd:4d:6e:98:ec:6a:8a:69:41:2f:fb:6f: d7:6c:3c:dd:87:51:49:d8:a0:ec:7e:0d:a4:32:78:2c:04:1a: ef:00:c4:3d:6a:5d:9a:3a:15:72:73:e5:4c:f4:2a:38:cf:d1: d2:95:13:8b:1f:88:8c:e7:ed:55:40:a7:43:99:e5:e8:f0:55: 75:f8:84:56:57:86:ca:5d:ec:53:d9:8e:a1:07:eb:f5:1a:c3: 77:23:11:fb:23:5f:a4:fe:97:4c:e7:40:d3:57:b3:0a:b0:ae: 32:24:88:3b:8d:17:32:02:cf:3f:80:62:33:e8:aa:04:65:5c: e9:97:d7:df:c0:9a:0d:40:ce:e1:d8:2f:74:93:64:c5:ec:8c: 38:7c:ac:b8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEnqxp0D3h85djSylaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMDE1MTMxMFoXDTI3MDgyMzE1MTMxMFowLzEtMCsGA1UEAxMk ODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZhMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+s2y3JcrGyQgkXRIE3/401Gvx8LCuslmFdx RxrHp2NA+OKV/g6Zmfjad01YX7l2tA1B9pG6lzIHUkb0B4zKCq9lbs87HEBbdI/C pvtTco5yfdNAXuj2RzF0tWlzNeCx9lkjmHF3giYeD54rr8goRgyZK5U1Bqcwejxm S/iGn0K3SFFwN7bxk/T62Ltk8MduyHCGgp2i6usL+0GppJNtSAe5ITKHCmdQaSsP ig1n/iM83y6mGN7YjWxlp2rVFthKyYk/+UMfzrHDj8KeTI5cnmyIqJWbT6e/zwM6 UCru83Q55tEGgKl8sjKeAguiw3j3xDVIB6PemLoSHqR4WeyqVQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFL0PU14uzC2HQPTeofwOHMlLuHCWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg4M2NhMDQwLWE4OTgtNGU0Ny1i MWUxLWYyNDYxOTk2YTA1OC84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5 NmEwNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbRvYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANPpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEkzVwWg3EjSEIwquGaGzIWak36RMwvqiwYorgLZ6uXukf+l L1LSZVqa5epMfOREA/kmWEDvJczXggfzajjzimdojMxk7kJNtgRsXqz+hcfmrtzs Ne3gpsIUjN9Uq/LM9fEDkLO+A2a/wXAF+TqOvuQIFt1NbpjsaoppQS/7b9dsPN2H UUnYoOx+DaQyeCwEGu8AxD1qXZo6FXJz5Uz0KjjP0dKVE4sfiIzn7VVAp0OZ5ejw VXX4hFZXhspd7FPZjqEH6/Uaw3cjEfsjX6T+l0znQNNXswqwrjIkiDuNFzICzz+A YjPoqgRlXOmX19/Amg1AzuHYL3STZMXsjDh8rLg= -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:55 2025 by rpki-client