$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2e51a18e-7e09-4f70-9ad3-2641753cae19.cer File: 2e51a18e-7e09-4f70-9ad3-2641753cae19.cer (raw, json) Hash identifier: 2aSEUYRH7HjJizPN3dINOm3iFo761ZjMb/J90YB65Kw= Subject key identifier: B1:B3:2F:82:53:D7:0E:4D:B8:CB:25:DE:E9:A3:B4:D1:89:E2:A8:26 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B99CFF5D60CCB3D59B4BE4400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2e51a18e-7e09-4f70-9ad3-2641753cae19/2e51a18e-7e09-4f70-9ad3-2641753cae19.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2e51a18e-7e09-4f70-9ad3-2641753cae19/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 16750 IP: 130.51.244.0/22 IP: 162.251.8.0/21 IP: 2605:8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:d6:0c:cb:3d:59:b4:be:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=2e51a18e-7e09-4f70-9ad3-2641753cae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:34:89:dc:33:a3:a1:ac:d6:0d:10:85:72: 53:d9:60:b1:bd:b3:bb:02:2e:cf:e7:e8:05:15:b3: d0:09:fc:11:bd:1c:8e:f6:53:93:f3:5c:94:9d:6c: 43:3c:43:85:3c:55:6f:6b:44:ba:98:c7:9a:88:7b: 65:fb:65:eb:01:d7:de:a7:6c:83:d3:0b:c5:c5:66: 39:45:46:0b:e1:12:f9:b0:62:9e:1f:c5:cf:3e:b7: 22:ee:e6:9c:92:81:c8:f7:21:b1:af:d0:9b:73:cf: 0f:a1:6c:f9:e5:a0:ec:4e:40:b5:ea:b3:f1:88:82: 5c:af:72:20:58:3f:40:39:ba:4f:be:81:a6:1d:9f: 3f:bb:25:e5:21:40:4b:e5:e7:f1:67:e1:26:1f:2b: e0:74:0a:e7:0d:49:de:3a:f3:c4:ab:09:70:6a:95: de:37:6e:f8:34:44:50:b5:48:da:d7:4e:c4:be:6c: 33:6a:74:b8:e2:d8:88:7d:7f:f7:3c:3f:db:b2:76: 7b:66:34:1a:c3:88:c8:4e:13:a9:1d:4c:50:a1:eb: d6:69:c7:bb:de:fe:82:2f:b1:c6:7d:75:80:f1:4f: 6f:d4:15:4a:81:16:66:4a:e9:df:72:a9:d8:9d:07: fa:0b:b1:22:9e:f8:18:96:99:42:02:fb:b6:3c:4c: 9d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B3:2F:82:53:D7:0E:4D:B8:CB:25:DE:E9:A3:B4:D1:89:E2:A8:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2e51a18e-7e09-4f70-9ad3-2641753cae19/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2e51a18e-7e09-4f70-9ad3-2641753cae19/2e51a18e-7e09-4f70-9ad3-2641753cae19.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 130.51.244.0/22 162.251.8.0/21 IPv6: 2605:8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16750 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f9:8b:48:84:64:7b:0a:f2:b6:42:a2:29:e6:1c:87:1c:92: f5:db:6d:b0:67:ba:35:a0:ba:e2:2d:a1:32:a0:c2:67:68:c2: 77:f4:66:4b:2f:d1:76:ab:87:f3:5e:80:ee:a7:db:ac:53:91: 1c:df:e2:96:52:3a:6d:c9:f3:d1:fc:a2:16:dc:bc:96:93:c3: 05:21:4a:ee:62:ca:66:f8:44:f3:5e:b3:8f:07:d1:2d:c3:f3: 50:6f:7c:f0:f0:8b:03:68:e4:da:ba:81:d3:09:a2:1d:59:cd: 15:ff:b7:8c:d4:08:50:ec:4a:81:54:2d:be:16:9d:1f:d2:e2: 8f:c7:8a:60:8c:73:e3:3e:67:46:cb:41:2f:b8:2f:f5:05:c4: 2a:af:4b:79:96:09:7f:f9:38:43:fc:be:7b:a3:22:bf:30:54: 7e:b9:59:fe:30:c5:d0:f9:95:d0:08:ce:1b:8c:95:c8:f5:7b: 82:56:a9:38:0f:24:e5:15:05:b8:61:25:0a:6d:2d:f6:8b:92: 78:48:c2:16:dc:7f:25:32:27:0c:61:31:ca:a4:e6:6c:37:e1: 1e:2d:c3:4c:d4:78:d3:ef:96:42:d2:b4:69:35:de:05:ea:53: d2:84:ce:c8:a6:25:bc:eb:3a:f7:1e:b2:0d:6d:83:bf:1f:8e: 7a:4b:dd:4f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEuZz/XWDMs9WbS+RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk MmU1MWExOGUtN2UwOS00ZjcwLTlhZDMtMjY0MTc1M2NhZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6g0idwzo6Gs1g0QhXJT2WCxvbO7Ai7P5+gF FbPQCfwRvRyO9lOT81yUnWxDPEOFPFVva0S6mMeaiHtl+2XrAdfep2yD0wvFxWY5 RUYL4RL5sGKeH8XPPrci7uackoHI9yGxr9Cbc88PoWz55aDsTkC16rPxiIJcr3Ig WD9AObpPvoGmHZ8/uyXlIUBL5efxZ+EmHyvgdArnDUneOvPEqwlwapXeN274NERQ tUja107EvmwzanS44tiIfX/3PD/bsnZ7ZjQaw4jIThOpHUxQoevWace73v6CL7HG fXWA8U9v1BVKgRZmSunfcqnYnQf6C7EinvgYlplCAvu2PEydVQIDAQABo4IELzCC BCswHQYDVR0OBBYEFLGzL4JT1w5NuMsl3umjtNGJ4qgmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y ZTUxYTE4ZS03ZTA5LTRmNzAtOWFkMy0yNjQxNzUzY2FlMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJlNTFhMThlLTdlMDktNGY3MC05 YWQzLTI2NDE3NTNjYWUxOS8yZTUxYTE4ZS03ZTA5LTRmNzAtOWFkMy0yNjQxNzUz Y2FlMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKCM/QDBAOi+wgwDQQCAAIwBwMFACYFCMAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQW4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmvmLSIRkewrytkKiKeYc hxyS9dttsGe6NaC64i2hMqDCZ2jCd/RmSy/RdquH816A7qfbrFORHN/illI6bcnz 0fyiFty8lpPDBSFK7mLKZvhE816zjwfRLcPzUG988PCLA2jk2rqB0wmiHVnNFf+3 jNQIUOxKgVQtvhadH9Lij8eKYIxz4z5nRstBL7gv9QXEKq9LeZYJf/k4Q/y+e6Mi vzBUfrlZ/jDF0PmV0AjOG4yVyPV7glapOA8k5RUFuGElCm0t9ouSeEjCFtx/JTIn DGExyqTmbDfhHi3DTNR40++WQtK0aTXeBepT0oTOyKYlvOs69x6yDW2Dvx+Oekvd Tw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:01 2025 by rpki-client