$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer File: 341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer (raw, json) Hash identifier: bxahFMUTLBCCuMS7qBay8uD9ao+8+SlhzaNvlVVsfLE= Subject key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B98F214076FE2646738940D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 17:18:20 +0000 Certificate not after: Thu 11 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 14960 AS: 19551 IP: 45.60.0.0/16 IP: 45.223.0.0/16 IP: 107.154.0.0/16 IP: 192.230.64.0/18 IP: 198.143.32.0/19 IP: 199.83.128.0/21 IP: 2620:28:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:f2:14:07:6f:e2:64:67:38:94:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 21 17:18:20 2025 GMT Not After : Nov 11 01:45:25 2027 GMT Subject: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:04:ba:fe:56:48:92:72:a9:a6:3a:a0:5e: e8:47:9d:09:87:9a:df:cc:cd:a8:00:3a:68:6e:03: 3d:12:42:40:59:66:e1:cb:03:99:41:35:b6:ba:35: d4:d2:15:09:e4:6e:6f:4a:5e:34:d8:56:50:80:66: d7:41:82:36:22:63:b1:ed:a2:cd:1d:7f:1f:13:97: 97:4e:33:b8:8b:23:6b:24:cc:db:9e:ed:7e:62:f6: 47:4a:e4:c6:d8:23:bf:7e:66:88:90:72:1f:2b:58: 9c:ed:b6:ce:0b:f7:02:20:a4:5f:9a:e9:82:b8:af: 7c:07:12:1a:4b:76:2f:7c:5c:f9:db:cd:03:01:f2: c5:5c:a1:f7:ea:8b:55:d8:b7:ac:da:93:8e:4d:c8: 2f:b4:9d:d7:06:16:43:e1:80:9a:f5:21:2c:91:84: bb:0f:2d:c8:db:df:f9:f0:46:da:13:e5:b1:4d:27: 09:fa:45:6f:98:e7:20:5c:08:11:06:ed:5f:b0:2f: a6:4c:0b:81:8d:60:c4:04:ef:06:51:a0:0f:2f:e6: ad:6c:8d:7b:9c:3d:9c:ec:67:f5:de:69:54:ff:a9: 09:26:02:fb:8b:bf:df:9e:fb:fc:d6:e4:41:47:57: 32:29:19:e4:d7:4d:dc:a4:4d:54:41:8b:24:69:4e: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 45.60.0.0/16 45.223.0.0/16 107.154.0.0/16 192.230.64.0/18 198.143.32.0/19 199.83.128.0/21 IPv6: 2620:28:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14960 19551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9d:31:7f:a8:4c:0d:e3:9f:77:d1:3b:39:13:1d:f9:2a:51: 7c:5d:d4:25:af:00:09:1b:51:48:21:c8:86:f9:42:f2:30:cd: f1:ea:47:81:ed:d4:b0:98:26:ef:b7:8b:74:ce:f3:79:53:7b: 6e:2e:eb:7d:14:07:02:13:99:29:0d:e1:90:da:ef:cc:82:72: c9:10:c2:6d:18:1f:c3:80:cc:68:0b:00:10:9d:f3:50:5a:64: f2:3d:ca:0d:00:ea:ce:eb:85:32:0b:f6:8d:5a:a9:46:dc:11: 9e:a1:51:6b:aa:09:67:10:78:f6:3a:5e:83:34:7c:7c:f0:be: cf:8f:87:58:18:41:9b:d7:6d:af:79:b1:1e:01:c8:7b:5d:97: 4c:c8:b1:fb:2b:42:1c:de:4a:60:da:75:24:b6:c3:62:40:4a: a9:a8:53:c9:d6:fc:61:9e:40:d4:4a:8d:91:8c:d8:8f:ca:60: 69:d3:b1:cf:87:dc:c6:a2:f9:32:b0:f4:e8:4c:70:2f:e7:85: d1:01:fc:2b:df:73:7c:1a:29:f9:cf:e4:fc:fd:54:5e:b6:82: 28:d6:e8:76:37:65:23:b7:a4:ca:8f:7c:b4:7a:2e:16:7b:dd: 49:73:4d:51:da:65:31:c0:7a:e3:c4:bc:46:17:1b:6c:19:18: 7a:af:ce:13 -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEuY8hQHb+JkZziUDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyMTE3MTgyMFoXDTI3MTExMTAxNDUyNVowLzEtMCsGA1UEAxMk MzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNjYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvewEuv5WSJJyqaY6oF7oR50Jh5rfzM2oADpo bgM9EkJAWWbhywOZQTW2ujXU0hUJ5G5vSl402FZQgGbXQYI2ImOx7aLNHX8fE5eX TjO4iyNrJMzbnu1+YvZHSuTG2CO/fmaIkHIfK1ic7bbOC/cCIKRfmumCuK98BxIa S3YvfFz5280DAfLFXKH36otV2Les2pOOTcgvtJ3XBhZD4YCa9SEskYS7Dy3I29/5 8EbaE+WxTScJ+kVvmOcgXAgRBu1fsC+mTAuBjWDEBO8GUaAPL+atbI17nD2c7Gf1 3mlU/6kJJgL7i7/fnvv81uRBR1cyKRnk103cpE1UQYskaU6ItwIDAQABo4IESjCC BEYwHQYDVR0OBBYEFKDwQXhhjEiWz6mMxppTi0BQKLK1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM0MWI3ZTk2LWE2ZjAtNDRkMy1h ZWNjLTkyOTRkNmJjY2M3OC8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZi Y2NjNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCcEAgABMCEDAwAtPAMDAC3fAwMAa5oDBAbA5kADBAXGjyADBAPH U4AwDwQCAAIwCQMHBCYgAChAADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgI6cAIC TF8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAOJ0xf6hMDeOfd9E7ORMd+SpRfF3UJa8ACRtRSCHIhvlC8jDN 8epHge3UsJgm77eLdM7zeVN7bi7rfRQHAhOZKQ3hkNrvzIJyyRDCbRgfw4DMaAsA EJ3zUFpk8j3KDQDqzuuFMgv2jVqpRtwRnqFRa6oJZxB49jpegzR8fPC+z4+HWBhB m9dtr3mxHgHIe12XTMix+ytCHN5KYNp1JLbDYkBKqahTydb8YZ5A1EqNkYzYj8pg adOxz4fcxqL5MrD06ExwL+eF0QH8K99zfBop+c/k/P1UXraCKNbodjdlI7ekyo98 tHouFnvdSXNNUdplMcB648S8RhcbbBkYeq/OEw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:10 2025 by rpki-client