$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/117415f6-52a3-4bad-9a74-79e987b60004.cer File: 117415f6-52a3-4bad-9a74-79e987b60004.cer (raw, json) Hash identifier: fFMIeDuGLT8P+k9U6f7bRwkf0IwF3fJ7k4tVlp0+N/g= Subject key identifier: 15:10:E4:EF:07:A0:63:81:A2:3B:9B:89:9E:5B:C5:6D:23:A3:BB:E4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BBB6DF14A820806ED40932600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/117415f6-52a3-4bad-9a74-79e987b60004/117415f6-52a3-4bad-9a74-79e987b60004.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/117415f6-52a3-4bad-9a74-79e987b60004/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 01:45:22 +0000 Certificate not after: Sun 06 Feb 2028 01:45:22 +0000 Subordinate resources: IP: 23.182.64.0/23 IP: 170.39.248.0/22 IP: 2620:136:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:6d:f1:4a:82:08:06:ed:40:93:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 3 01:45:22 2025 GMT Not After : Feb 6 01:45:22 2028 GMT Subject: CN=117415f6-52a3-4bad-9a74-79e987b60004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:7c:2e:5a:58:ee:a9:ee:f4:19:c3:6f:e5: e8:64:4b:44:0b:0d:11:3a:0a:09:f2:71:c4:06:fe: 51:7d:15:11:f5:23:70:99:0b:19:dd:25:41:74:8e: 60:4f:2f:49:c6:4b:4a:2c:4e:9e:94:d6:a6:54:bc: 45:f2:a2:70:9b:13:c0:bb:0e:29:f6:0c:79:01:68: 8b:7c:14:ea:c1:b5:07:5b:d9:88:1b:7b:87:38:fd: be:75:2a:a1:15:42:35:55:c0:04:83:fa:ee:6b:56: 10:d2:e1:c4:6a:b0:12:42:f8:96:ba:c9:bd:73:dd: 20:28:f4:1d:b2:3f:b9:f6:7b:f3:7a:ef:59:60:3e: af:4e:71:9a:25:fe:5f:ad:f7:e4:26:4a:8a:2a:2a: fd:6e:74:12:f3:de:60:cb:36:86:08:89:40:22:74: 82:cf:41:99:ff:c4:e8:87:f7:79:1b:50:56:dd:bb: c5:15:44:c2:2f:e0:22:5c:b5:f0:b5:58:2c:ac:93: b5:35:82:f1:31:90:97:32:7f:e7:4d:2b:e6:15:b3: 1c:fc:15:b8:e5:02:bb:0b:ff:52:41:a0:ed:80:ad: 01:2a:a7:8a:06:e2:5f:44:b7:cd:8f:fd:98:b3:c7: a0:ae:28:77:c9:5a:42:f7:a8:e5:18:e8:8c:83:76: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:E4:EF:07:A0:63:81:A2:3B:9B:89:9E:5B:C5:6D:23:A3:BB:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/117415f6-52a3-4bad-9a74-79e987b60004/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/117415f6-52a3-4bad-9a74-79e987b60004/117415f6-52a3-4bad-9a74-79e987b60004.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.182.64.0/23 170.39.248.0/22 IPv6: 2620:136:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bc:1d:03:57:f8:f0:6a:45:98:74:de:03:29:56:58:f2:21: 21:c2:b7:aa:23:94:a2:4e:3c:4a:7b:13:61:a6:35:fd:ba:2b: 15:c9:28:a5:df:bd:80:01:83:66:70:4a:8f:6a:a7:d5:b8:d7: 43:3f:d5:3b:3b:66:cd:cb:be:9a:4c:4d:9d:a4:3b:9e:e4:45: 62:48:c0:b5:12:0b:0a:6f:9d:ac:d4:f4:06:7a:37:4d:34:53: fd:0a:7c:36:67:19:0e:3b:fc:9e:5f:8b:fc:80:58:1d:4d:08: b0:07:20:1c:2c:ec:64:32:10:f6:63:68:d1:91:dc:33:fb:28: b8:73:2a:e4:fb:e8:b8:8b:95:57:e1:ec:c2:8f:58:fe:d5:d7: 32:b8:d5:15:05:ff:c8:55:ef:2d:28:c5:f5:33:28:fd:46:4d: 51:8a:bf:dd:8c:1e:cc:cc:46:95:1a:df:24:93:b5:97:0f:6a: 01:4e:7e:b0:23:65:23:5a:49:c7:fa:eb:ee:af:f9:c2:3d:df: c6:38:84:18:5b:58:76:88:01:72:00:db:aa:c8:99:ce:20:0c: 8b:cb:75:27:ab:dd:0d:4f:39:24:15:92:07:69:19:a5:8f:85: a5:64:a9:1c:e3:ce:f4:e2:87:36:15:5c:73:fa:c3:64:5e:e2: a1:40:f9:b6 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEu7bfFKgggG7UCTJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEwMzAxNDUyMloXDTI4MDIwNjAxNDUyMlowLzEtMCsGA1UEAxMk MTE3NDE1ZjYtNTJhMy00YmFkLTlhNzQtNzllOTg3YjYwMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvul8LlpY7qnu9BnDb+XoZEtECw0ROgoJ8nHE Bv5RfRUR9SNwmQsZ3SVBdI5gTy9JxktKLE6elNamVLxF8qJwmxPAuw4p9gx5AWiL fBTqwbUHW9mIG3uHOP2+dSqhFUI1VcAEg/rua1YQ0uHEarASQviWusm9c90gKPQd sj+59nvzeu9ZYD6vTnGaJf5frffkJkqKKir9bnQS895gyzaGCIlAInSCz0GZ/8To h/d5G1BW3bvFFUTCL+AiXLXwtVgsrJO1NYLxMZCXMn/nTSvmFbMc/BW45QK7C/9S QaDtgK0BKqeKBuJfRLfNj/2Ys8egrih3yVpC96jlGOiMg3Yx1wIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFBUQ5O8HoGOBojubiZ5bxW0jo7vkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x MTc0MTVmNi01MmEzLTRiYWQtOWE3NC03OWU5ODdiNjAwMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzExNzQxNWY2LTUyYTMtNGJhZC05 YTc0LTc5ZTk4N2I2MDAwNC8xMTc0MTVmNi01MmEzLTRiYWQtOWE3NC03OWU5ODdi NjAwMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXtkADBAKqJ/gwDgQCAAIwCAMGACYgATbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm8HQNX+PBqRZh03gMpVljyISHCt6ojlKJOPEp7E2GmNf26KxXJKKXf vYABg2ZwSo9qp9W410M/1Ts7Zs3LvppMTZ2kO57kRWJIwLUSCwpvnazU9AZ6N000 U/0KfDZnGQ47/J5fi/yAWB1NCLAHIBws7GQyEPZjaNGR3DP7KLhzKuT76LiLlVfh 7MKPWP7V1zK41RUF/8hV7y0oxfUzKP1GTVGKv92MHszMRpUa3ySTtZcPagFOfrAj ZSNaScf66+6v+cI938Y4hBhbWHaIAXIA26rImc4gDIvLdSer3Q1POSQVkgdpGaWP haVkqRzjzvTihzYVXHP6w2Re4qFA+bY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:45 2025 by rpki-client