$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.cer (raw, json) Hash identifier: X2ZZvGMi8NaMSU+5prk19dCwRUDC8NoZqneS+u/Ghcc= Subject key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B77AD6975238B446EE57CDB48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 19:18:18 +0000 Certificate not after: Fri 02 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 399521 IP: 142.249.64.0/22 IP: 172.98.8.0/22 IP: 2606:4640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:ad:69:75:23:8b:44:6e:e5:7c:db:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 9 19:18:18 2025 GMT Not After : Apr 2 12:45:33 2027 GMT Subject: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:13:70:80:0c:9e:f7:22:84:b6:0b:5f:2e: 55:c7:44:60:ed:87:3e:a0:7a:d8:54:0d:85:64:9e: b0:b6:94:ad:ae:92:7b:e0:14:8d:de:51:9a:ef:55: bb:c4:93:0e:c5:07:43:b3:f9:bb:b4:32:1d:9a:22: 0a:f8:68:d6:f7:94:b2:7e:b3:48:ad:81:32:d7:13: ea:d2:44:38:e5:ac:4c:21:06:e7:d7:3a:1e:bd:c7: b0:a5:60:33:8b:98:ae:e5:78:67:c9:32:ca:24:57: d1:1f:8e:fb:b2:85:c8:ca:03:01:b9:39:ea:b6:02: a5:a3:80:b2:93:4e:e4:f4:1a:17:2e:30:48:5f:1b: 5b:9e:90:ad:11:f6:e8:48:a1:39:e1:ff:b2:80:e3: ba:73:86:20:f3:d0:41:55:2a:e1:8f:a3:87:34:02: b3:45:be:3a:35:0b:ec:62:1e:2d:29:9c:d7:06:22: 4e:fb:bf:26:98:e0:96:b5:a9:b2:1e:7f:d9:bd:92: d5:52:4c:8b:10:91:2d:30:19:23:bf:1a:61:54:a4: 79:6b:dd:66:3e:0c:6c:63:14:c6:d1:5c:f1:c4:dd: b0:2b:7f:23:59:44:1c:cd:97:5d:6b:44:d1:37:9d: 36:8e:8f:9a:f5:b1:63:e0:db:10:ab:36:4d:d7:7c: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.249.64.0/22 172.98.8.0/22 IPv6: 2606:4640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399521 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e7:e0:d0:a8:a2:1f:7e:87:04:11:46:40:51:bc:31:8c:8e: ba:5e:f3:fb:ed:a9:64:ea:2d:ef:e2:c8:33:1f:ce:c3:8f:03: e1:c1:9d:77:89:c3:a5:c8:d8:89:99:31:b5:bd:d7:f9:ad:32: 75:d8:ca:d7:3a:96:06:b2:53:db:da:b4:e4:01:72:83:64:da: 6f:82:74:84:51:85:ea:0c:7d:92:ef:dd:90:00:7f:ad:03:55: 0f:5a:9a:2c:20:70:5e:9c:9d:b7:85:ca:43:4f:61:7b:59:7e: 63:d4:b0:68:2a:a3:08:3b:57:22:af:8a:50:98:ec:64:68:aa: 12:96:a3:4e:6c:04:0d:3b:4f:32:55:e5:8a:7e:fd:31:9b:c7: 56:fe:28:37:e6:4d:cf:84:dd:ef:1b:59:b7:0c:90:2e:9d:34: f6:eb:89:08:30:89:70:a4:66:c1:11:61:f4:f1:e4:c2:3a:8a: e8:0d:4d:42:de:23:76:61:4c:1b:93:47:ae:30:a6:44:5f:4b: bd:c7:98:0b:a4:50:e0:29:4c:27:58:21:bd:77:6f:ee:78:4b: c0:c0:7e:3d:5c:cc:4a:53:c1:73:d2:78:f3:2c:58:46:c4:38: 77:ad:04:58:4b:ce:8b:5d:b3:98:51:b4:ab:3c:07:5c:c7:b9: fa:d5:9e:46 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt3rWl1I4tEbuV820gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAwOTE5MTgxOFoXDTI3MDQwMjEyNDUzM1owLzEtMCsGA1UEAxMk M2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVcTcIAMnvcihLYLXy5Vx0Rg7Yc+oHrYVA2F ZJ6wtpStrpJ74BSN3lGa71W7xJMOxQdDs/m7tDIdmiIK+GjW95SyfrNIrYEy1xPq 0kQ45axMIQbn1zoevcewpWAzi5iu5XhnyTLKJFfRH477soXIygMBuTnqtgKlo4Cy k07k9BoXLjBIXxtbnpCtEfboSKE54f+ygOO6c4Yg89BBVSrhj6OHNAKzRb46NQvs Yh4tKZzXBiJO+78mmOCWtamyHn/ZvZLVUkyLEJEtMBkjvxphVKR5a91mPgxsYxTG 0VzxxN2wK38jWUQczZdda0TRN502jo+a9bFj4NsQqzZN13xttwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBvNBQMS6/zXktb+qrmWafoNbLDAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z YmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNiZTcxMzNlLTdlNDYtNGZjNi05 NDEwLWUxOGJhZmI4ODVkOC8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZi ODg1ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKO+UADBAKsYggwDQQCAAIwBwMFACYGRkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhihMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFLn4NCooh9+hwQRRkBR vDGMjrpe8/vtqWTqLe/iyDMfzsOPA+HBnXeJw6XI2ImZMbW91/mtMnXYytc6lgay U9vatOQBcoNk2m+CdIRRheoMfZLv3ZAAf60DVQ9amiwgcF6cnbeFykNPYXtZfmPU sGgqowg7VyKvilCY7GRoqhKWo05sBA07TzJV5Yp+/TGbx1b+KDfmTc+E3e8bWbcM kC6dNPbriQgwiXCkZsERYfTx5MI6iugNTULeI3ZhTBuTR64wpkRfS73HmAukUOAp TCdYIb13b+54S8DAfj1czEpTwXPSePMsWEbEOHetBFhLzotds5hRtKs8B1zHufrV nkY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:02 2025 by rpki-client