$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer File: 250ff67c-5904-4655-8b50-832a485ad1b8.cer (raw, json) Hash identifier: yQrWjeXfHanS03gji8H2jeWtmWn+4jocRAyFv9rcNts= Subject key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AE687D4765D063269EB988900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 19:30:22 +0000 Certificate not after: Fri 02 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 22483 IP: 199.247.85.0/24 IP: 216.163.189.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:87:d4:76:5d:06:32:69:eb:98:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 18 19:30:22 2025 GMT Not After : Apr 2 00:45:33 2027 GMT Subject: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:78:13:a3:1c:f2:ce:7c:50:e5:91:81:d1: 34:61:4b:ac:e9:e1:f6:a6:8c:e8:9f:d4:2d:ea:09: 50:8f:71:67:46:d0:ec:bd:9d:8c:9a:8c:ca:65:a6: f8:00:15:80:11:50:49:28:8b:2c:de:5e:80:8d:d4: da:57:96:3f:26:bd:c8:a6:14:e8:f0:b5:c7:fc:ad: b7:ff:7c:7d:df:f8:1f:26:c8:99:fb:7b:e5:e7:5b: e5:e8:84:07:78:6f:d8:9b:77:29:6f:ae:d7:d9:9f: 79:a7:6e:56:7f:16:61:f1:dd:78:a8:a2:10:39:0f: 64:35:6c:f4:c3:73:46:33:99:05:4f:4a:12:fc:bd: 64:76:e4:5c:ab:e8:65:1d:4a:77:71:e9:ec:ea:01: ed:c1:09:8d:3c:8d:15:7a:15:e7:40:cf:45:a8:89: 77:9d:cf:bc:d7:7f:59:cc:ca:1d:71:7d:92:a6:c2: 03:1a:df:f0:7a:04:58:45:b7:fb:02:3b:f2:9e:ac: 94:2b:cf:f2:0d:aa:b3:c7:68:d6:ca:d9:72:78:a8: 85:d6:50:6b:70:6b:a1:41:cf:63:38:4f:ce:48:9c: 2d:38:57:ab:3c:8b:4e:43:80:87:39:2e:dd:cd:6f: 3e:11:af:9a:80:64:f0:a2:d2:a6:23:b5:05:e8:92: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.247.85.0/24 216.163.189.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22483 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:72:2f:8a:83:7f:25:30:df:a5:11:2c:ab:36:8d:95:2b:cd: 63:8f:9e:1f:ce:a7:ad:f1:c0:73:ee:69:2e:9e:f8:e7:e3:86: 38:64:49:d3:7f:e3:ff:89:16:5e:30:61:6f:11:14:f5:04:6c: da:3e:80:4b:33:9e:c1:f2:73:0b:14:77:99:a6:13:a1:2c:ac: 14:14:be:bf:80:17:f7:c4:fb:6b:54:78:7f:5b:b8:07:5f:e8: 53:12:3e:83:c7:7c:95:26:4d:8c:4e:33:55:09:41:f2:b3:9a: e0:af:4d:6a:04:45:9a:e8:6e:37:59:42:e5:cc:0f:e2:4a:66: b1:22:78:ba:84:84:43:0f:ff:78:9c:ca:25:23:77:36:ed:12: 9c:33:3d:96:ed:37:38:e0:62:21:f1:96:e6:7b:27:2a:52:51: 29:11:9e:35:e7:25:3a:ca:4f:77:f5:80:12:75:c3:9a:4d:4d: fa:ec:3e:d2:30:cd:ed:32:9b:27:a2:0d:31:39:4c:6a:4a:98: f7:33:24:e1:f0:38:77:5f:2d:25:ce:ba:b9:03:30:6f:c5:a0: 53:33:75:04:1b:62:8e:2f:36:df:52:2b:41:59:ea:6c:39:b0: ad:07:3f:eb:ae:1b:eb:44:c0:ad:65:3d:79:4c:10:af:d2:00: bc:54:87:d5 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWErmh9R2XQYyaeuYiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxODE5MzAyMloXDTI3MDQwMjAwNDUzM1owLzEtMCsGA1UEAxMk MjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFkMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWp4E6Mc8s58UOWRgdE0YUus6eH2pozon9Qt 6glQj3FnRtDsvZ2MmozKZab4ABWAEVBJKIss3l6AjdTaV5Y/Jr3IphTo8LXH/K23 /3x93/gfJsiZ+3vl51vl6IQHeG/Ym3cpb67X2Z95p25WfxZh8d14qKIQOQ9kNWz0 w3NGM5kFT0oS/L1kduRcq+hlHUp3cens6gHtwQmNPI0VehXnQM9FqIl3nc+8139Z zModcX2SpsIDGt/wegRYRbf7AjvynqyUK8/yDaqzx2jWytlyeKiF1lBrcGuhQc9j OE/OSJwtOFerPItOQ4CHOS7dzW8+Ea+agGTwotKmI7UF6JLUKQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNlsVd5kuMy7qvEsaTeXUpl1VWs5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y NTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI1MGZmNjdjLTU5MDQtNDY1NS04 YjUwLTgzMmE0ODVhZDFiOC8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1 YWQxYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADH91UDBADYo70wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICV9MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEALXIvioN/JTDfpREsqzaNlSvNY4+eH86nrfHAc+5p Lp745+OGOGRJ03/j/4kWXjBhbxEU9QRs2j6ASzOewfJzCxR3maYToSysFBS+v4AX 98T7a1R4f1u4B1/oUxI+g8d8lSZNjE4zVQlB8rOa4K9NagRFmuhuN1lC5cwP4kpm sSJ4uoSEQw//eJzKJSN3Nu0SnDM9lu03OOBiIfGW5nsnKlJRKRGeNeclOspPd/WA EnXDmk1N+uw+0jDN7TKbJ6INMTlMakqY9zMk4fA4d18tJc66uQMwb8WgUzN1BBti ji8231IrQVnqbDmwrQc/664b60TArWU9eUwQr9IAvFSH1Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:48 2025 by rpki-client