$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer File: ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer (raw, json) Hash identifier: YJ37eBiNkyLYUX4qB66FJfWNql9mcdEKqiaMAjN2Q8g= Subject key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B916FE79F52B9E126CE223E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Oct 2025 00:45:23 +0000 Certificate not after: Sat 22 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 395287 AS: 397457 IP: 147.160.162.0/23 IP: 192.104.234.0/24 IP: 2620:128:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:6f:e7:9f:52:b9:e1:26:ce:22:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 19 00:45:23 2025 GMT Not After : Jan 22 01:45:23 2028 GMT Subject: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:f2:b9:5c:ca:af:36:42:5d:11:ed:55:f6: d0:38:d4:8f:3e:3e:06:be:b7:b4:c0:81:59:e5:fa: 22:a3:7c:ad:82:72:4e:a4:a7:30:98:6c:ec:92:d0: 74:8a:47:28:d7:f0:6a:1f:70:00:86:bf:cd:d4:9c: 24:04:ff:38:b7:19:e5:e5:ab:c0:6c:4b:68:4c:61: 6f:70:d8:11:43:21:a0:ff:4c:b6:6c:2a:49:d4:a5: 07:56:6a:48:1d:81:6b:5b:4e:fb:9b:99:b0:84:20: 73:af:2e:a7:4a:f4:1d:64:b8:fb:be:f2:c4:3b:f6: f0:7e:33:73:d8:e9:0a:74:91:81:72:4b:50:18:f2: f0:3a:ff:26:38:d5:df:ef:b9:c9:f7:15:0b:e7:30: 02:0c:b5:86:a0:71:26:d0:e8:f9:5f:2f:3b:c8:9a: 16:4a:19:01:d3:68:29:2f:41:50:1f:ff:30:45:82: 8c:7f:81:1b:00:6d:33:d6:c5:5a:2f:c2:3e:34:9e: 15:30:93:f9:6d:d7:f1:5f:d5:e4:f1:72:a2:8e:03: 10:d3:8a:32:87:a6:2c:32:e9:22:75:6f:ce:c3:70: e9:bb:3e:6b:02:95:ec:a8:7b:ea:a5:14:e7:e5:b1: 85:f9:52:34:2b:06:8b:ba:e3:4e:54:b0:7c:e3:26: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 147.160.162.0/23 192.104.234.0/24 IPv6: 2620:128:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395287 397457 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ee:68:ce:76:c4:e3:61:1c:2a:b6:d7:b4:c4:c3:f7:2d:cf: 6c:d5:12:42:a2:4c:91:8d:d9:49:2c:5f:0e:05:39:1c:25:6d: f6:e9:30:57:c8:02:cd:ba:1c:be:c7:25:0a:23:fe:90:19:77: 6c:05:51:54:f8:5b:98:cb:07:d2:be:e7:fb:92:15:9f:a9:ec: 30:02:0b:9c:50:9f:eb:ce:3e:f9:d5:ea:ec:e3:e7:4f:da:10: df:1e:66:17:4a:fc:df:1a:ce:83:0c:84:6b:2f:cd:5c:72:4f: 6a:18:4a:41:b6:7d:d0:a6:8a:6b:b3:a4:ad:59:52:a1:ec:6a: 5a:26:0b:24:d2:fd:82:b2:4f:81:dc:11:4f:1d:44:77:e6:d9: df:9d:c3:2d:59:ca:2c:41:16:cb:8a:85:fc:c7:06:d1:6e:1b: d4:24:0e:80:34:47:7c:ca:85:fd:8a:94:5b:48:8b:a6:39:7d: d7:04:6a:bd:eb:62:c1:d8:63:8b:99:08:d0:a5:d3:6f:4e:e8: 35:b7:9d:25:74:d4:05:61:fa:39:c7:94:4e:af:3e:1d:4e:a9: 76:31:96:82:68:20:19:03:70:76:c5:70:a2:b2:16:40:17:17: e7:34:09:09:53:f8:ce:ff:8a:64:e8:06:c8:02:e3:58:c1:f3: ca:1b:dd:cb -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEuRb+efUrnhJs4iPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAxOTAwNDUyM1oXDTI4MDEyMjAxNDUyM1owLzEtMCsGA1UEAxMk YWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFlYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ3yuVzKrzZCXRHtVfbQONSPPj4Gvre0wIFZ 5foio3ytgnJOpKcwmGzsktB0ikco1/BqH3AAhr/N1JwkBP84txnl5avAbEtoTGFv cNgRQyGg/0y2bCpJ1KUHVmpIHYFrW077m5mwhCBzry6nSvQdZLj7vvLEO/bwfjNz 2OkKdJGBcktQGPLwOv8mONXf77nJ9xUL5zACDLWGoHEm0Oj5Xy87yJoWShkB02gp L0FQH/8wRYKMf4EbAG0z1sVaL8I+NJ4VMJP5bdfxX9Xk8XKijgMQ04oyh6YsMuki dW/Ow3Dpuz5rApXsqHvqpRTn5bGF+VI0KwaLuuNOVLB84ybwZwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFDFfBIoflKiggiVHXkIAoYcfqIk4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h YjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2FiM2RhMWNhLWEzMDItNDM2YS1i ZDVmLTBhNWI3NWJhZWFkZC9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzVi YWVhZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAGToKIDBADAaOowDgQCAAIwCAMGACYgASggMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYIFwIDBhCRMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHXuaM52xONh HCq217TEw/ctz2zVEkKiTJGN2UksXw4FORwlbfbpMFfIAs26HL7HJQoj/pAZd2wF UVT4W5jLB9K+5/uSFZ+p7DACC5xQn+vOPvnV6uzj50/aEN8eZhdK/N8azoMMhGsv zVxyT2oYSkG2fdCmimuzpK1ZUqHsalomCyTS/YKyT4HcEU8dRHfm2d+dwy1ZyixB FsuKhfzHBtFuG9QkDoA0R3zKhf2KlFtIi6Y5fdcEar3rYsHYY4uZCNCl029O6DW3 nSV01AVh+jnHlE6vPh1OqXYxloJoIBkDcHbFcKKyFkAXF+c0CQlT+M7/imToBsgC 41jB88ob3cs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:11 2025 by rpki-client