$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer File: bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer (raw, json) Hash identifier: Z6GjHibho+0qJR4/jUkuTdyWkOroJXECgEphpwmMl1U= Subject key identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B7A61C47D2ECAD4AE3C9D9080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 18:33:18 +0000 Certificate not after: Sun 11 Apr 2027 17:29:24 +0000 Subordinate resources: AS: 396250 IP: 142.248.126.0/24 IP: 2607:e940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:61:c4:7d:2e:ca:d4:ae:3c:9d:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 10 18:33:18 2025 GMT Not After : Apr 11 17:29:24 2027 GMT Subject: CN=bcb5b54f-1a4d-4baf-89e1-873ab351e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:33:f6:e5:81:3d:77:f8:93:f5:52:51:4a: 17:92:36:d8:93:4d:24:26:ad:44:6e:aa:01:66:5d: aa:73:fa:cc:05:1d:a8:1e:b8:a6:06:a1:34:71:3e: 07:88:75:2e:00:53:8b:01:53:2b:49:69:c1:69:b1: 9a:ee:01:0a:fe:30:df:b6:b9:7a:e7:3f:98:d7:ab: 63:79:03:82:eb:27:ea:eb:bd:20:f6:65:65:13:1d: 97:9c:d2:7c:93:ae:28:9a:a8:82:b1:32:89:35:02: c9:c5:0b:88:8c:62:2b:07:d4:e0:52:32:6c:2c:2d: 6e:50:0e:d8:4e:3d:db:09:52:ab:f0:41:40:a1:7b: fb:cf:f9:3d:46:18:d6:8a:fa:14:ed:e6:1c:73:f8: 86:57:87:a8:c2:57:d7:b6:df:26:7f:9f:7e:8f:66: 89:e9:c5:9d:5e:1d:6b:cb:00:fb:bd:7f:fd:75:e7: 1b:cb:b6:bd:9d:50:4f:36:7c:b9:c0:89:79:6f:ec: 97:0c:dd:1c:c5:59:ef:0f:52:fa:6f:44:19:c6:9c: 97:26:02:fe:b2:b7:21:30:89:3a:7f:e7:f1:0a:64: 72:48:e6:0a:6b:b7:d4:27:c2:aa:85:54:16:1d:6f: a0:25:5e:0e:84:18:a7:be:a4:f0:b9:68:51:d8:fb: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.126.0/24 IPv6: 2607:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396250 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4b:0b:0c:28:04:99:cd:33:e6:74:05:5a:24:8b:18:1b:47: 05:2d:df:2d:97:03:67:4d:ea:e5:e3:40:80:bc:cf:46:26:ae: d0:c8:11:c4:9f:c1:6c:87:a4:fb:64:e4:08:9e:d3:31:a3:94: 5b:88:97:87:02:b8:cb:a6:fe:a4:9b:f8:6f:a2:11:66:26:cf: 70:73:84:7d:c3:0f:27:f5:e5:e1:f2:33:e0:ca:30:6a:62:1c: 55:7f:c8:10:42:e8:cf:47:cd:ab:02:2d:aa:08:21:1e:15:55: 5e:18:26:c8:ef:4a:77:52:b7:79:6a:29:4c:4f:c9:4b:84:72: c4:a4:f7:22:bd:dc:58:51:0e:ce:c7:75:02:a3:2e:a7:d6:28: 69:15:b3:93:ab:39:a8:b4:e5:2d:b0:20:6f:b5:e2:87:9d:1d: 50:70:f9:2e:12:a9:33:01:66:cf:ac:35:18:d9:ba:99:5e:28: d2:32:42:ed:d4:a1:da:57:ef:af:79:11:69:49:31:30:38:4e: 72:96:1d:7e:6c:48:5e:0b:34:fe:2a:8d:d4:00:b3:23:67:ca: f5:ba:ff:23:a5:8f:f8:a0:c0:f6:f0:a8:ba:f3:ec:df:93:7b: 09:bd:63:88:eb:64:03:c6:d5:09:eb:21:96:da:ec:44:9d:07: 53:82:47:bc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEt6YcR9LsrUrjydkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTAxMDE4MzMxOFoXDTI3MDQxMTE3MjkyNFowLzEtMCsGA1UEAxMk YmNiNWI1NGYtMWE0ZC00YmFmLTg5ZTEtODczYWIzNTFlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaoz9uWBPXf4k/VSUUoXkjbYk00kJq1EbqoB Zl2qc/rMBR2oHrimBqE0cT4HiHUuAFOLAVMrSWnBabGa7gEK/jDftrl65z+Y16tj eQOC6yfq670g9mVlEx2XnNJ8k64omqiCsTKJNQLJxQuIjGIrB9TgUjJsLC1uUA7Y Tj3bCVKr8EFAoXv7z/k9RhjWivoU7eYcc/iGV4eowlfXtt8mf59+j2aJ6cWdXh1r ywD7vX/9decby7a9nVBPNny5wIl5b+yXDN0cxVnvD1L6b0QZxpyXJgL+srchMIk6 f+fxCmRySOYKa7fUJ8KqhVQWHW+gJV4OhBinvqTwuWhR2Ptu2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB9TereLSmHNoWvV0Wv4xqouDMDCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1MWUyNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjViNTRmLTFhNGQtNGJhZi04 OWUxLTg3M2FiMzUxZTI1My9iY2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1 MWUyNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACO+H4wDQQCAAIwBwMFACYH6UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgvaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGhLCwwoBJnNM+Z0BVokixgbRwUt 3y2XA2dN6uXjQIC8z0YmrtDIEcSfwWyHpPtk5Aie0zGjlFuIl4cCuMum/qSb+G+i EWYmz3BzhH3DDyf15eHyM+DKMGpiHFV/yBBC6M9HzasCLaoIIR4VVV4YJsjvSndS t3lqKUxPyUuEcsSk9yK93FhRDs7HdQKjLqfWKGkVs5OrOai05S2wIG+14oedHVBw +S4SqTMBZs+sNRjZupleKNIyQu3UodpX7695EWlJMTA4TnKWHX5sSF4LNP4qjdQA syNnyvW6/yOlj/igwPbwqLrz7N+Tewm9Y4jrZAPG1QnrIZba7ESdB1OCR7w= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:10 2025 by rpki-client