$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer File: 369643f4-a849-4a0c-af2a-677957de74bc.cer (raw, json) Hash identifier: dHsWuQNJoUD1QEbRQX4wqbkoghu/0bBWwv2VjkUbd98= Subject key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A58C368C1C33B648E8A854380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 25926 IP: 23.133.0.0 -- 23.133.6.255 IP: 45.58.48.0/20 IP: 103.11.64.0/22 IP: 103.28.68.0/22 IP: 104.128.224.0/20 IP: 162.245.216.0/21 IP: 202.5.16.0/20 IP: 208.87.96.0/21 IP: 216.189.144.0/20 IP: 2602:ffc5::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:68:c1:c3:3b:64:8e:8a:85:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=369643f4-a849-4a0c-af2a-677957de74bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:2e:fa:51:47:5d:0c:46:d3:58:f6:3a:a1: 7c:df:21:6d:42:e6:e7:e6:e2:27:30:86:82:2c:2f: c7:c4:9a:4e:3c:42:fd:2e:9d:f3:7a:03:06:2c:20: 53:bc:84:bb:2b:75:41:38:7e:b3:0d:08:6d:1a:ca: b9:4a:0c:a3:e4:52:cd:bd:77:f1:f0:18:c9:31:ba: 86:d0:60:94:2e:bd:b6:bc:0a:fc:49:bf:cc:5c:ae: 21:9e:eb:d5:42:12:ef:7b:75:26:de:05:ae:08:a8: 62:f6:f2:40:ef:ec:a6:ce:26:9e:05:b8:6e:08:1a: 6b:cc:fb:80:9d:cd:ec:93:16:13:32:78:e2:2a:81: 98:0d:b1:fb:20:38:77:50:10:60:56:11:5c:9f:92: f3:4a:b0:64:37:66:8a:35:d0:78:e7:03:fe:be:f8: e2:7d:54:84:ed:53:71:3b:dd:d1:53:52:42:1d:c6: a3:a3:9b:f2:87:c8:07:c2:4f:f6:4a:b8:ae:10:f3: 91:92:66:ca:4c:40:2b:35:29:97:dd:41:50:45:c4: 4b:a5:12:d7:28:e1:27:11:33:49:3f:f4:0f:f3:62: 6b:7a:1f:9f:a7:6e:0b:b1:08:4b:7e:3f:a6:eb:2c: 06:32:ab:57:bb:76:fa:30:8e:e2:46:ab:8b:60:b8: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.0.0-23.133.6.255 45.58.48.0/20 103.11.64.0/22 103.28.68.0/22 104.128.224.0/20 162.245.216.0/21 202.5.16.0/20 208.87.96.0/21 216.189.144.0/20 IPv6: 2602:ffc5::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25926 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:51:5a:fd:7d:3d:31:27:7f:ad:e4:af:6c:55:b4:8e:9b:31: 5a:94:ac:17:ba:37:52:a8:ca:34:27:95:0b:d9:c3:f5:ba:9d: bb:ce:3f:a6:a2:5e:66:89:ff:93:2c:29:8f:7c:d1:50:e3:6a: b6:e1:42:34:28:54:62:45:3d:55:12:5e:ce:6c:6a:8f:bc:f3: 62:51:57:a8:4e:52:72:ab:f1:fe:31:42:ce:05:ef:87:ad:64: 98:3c:0e:ff:6c:fc:97:a7:21:27:32:41:0c:f2:41:75:a4:4d: e9:b7:35:44:22:20:7e:a8:fa:80:7c:bc:2d:56:3b:f1:3f:58: 52:81:a7:b3:bf:91:4e:5f:d4:86:0d:eb:a7:36:fd:2d:57:c3: 5d:5d:c3:e4:fa:e1:43:45:91:e5:c8:15:31:83:b3:8b:33:c7: 24:65:52:d4:f6:9b:cd:3f:2c:57:c1:f5:39:83:8d:97:b3:e4: cc:00:de:20:10:25:f3:df:4b:4f:61:52:e1:77:a8:66:a0:c1: bb:18:39:f1:7f:da:46:b2:e4:3f:d7:cc:16:2e:6b:c2:ec:d1: f5:00:44:ca:96:31:00:b6:53:ba:87:ba:e5:68:f2:61:df:85: 57:13:01:87:05:2c:ad:ad:91:4c:7e:be:d7:b5:08:32:dd:72: 92:4f:21:16 -----BEGIN CERTIFICATE----- MIIHTjCCBjagAwIBAgIUAQ0Mn0MoWEpYw2jBwztkjoqFQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk MzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR4u+lFHXQxG01j2OqF83yFtQubn5uInMIaC LC/HxJpOPEL9Lp3zegMGLCBTvIS7K3VBOH6zDQhtGsq5Sgyj5FLNvXfx8BjJMbqG 0GCULr22vAr8Sb/MXK4hnuvVQhLve3Um3gWuCKhi9vJA7+ymziaeBbhuCBprzPuA nc3skxYTMnjiKoGYDbH7IDh3UBBgVhFcn5LzSrBkN2aKNdB45wP+vvjifVSE7VNx O93RU1JCHcajo5vyh8gHwk/2SriuEPORkmbKTEArNSmX3UFQRcRLpRLXKOEnETNJ P/QP82Jreh+fp24LsQhLfj+m6ywGMqtXu3b6MI7iRquLYLg6xwIDAQABo4IEYDCC BFwwHQYDVR0OBBYEFHhOlsWH5evl5MOQl1dCoHz33ZypMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z Njk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM2OTY0M2Y0LWE4NDktNGEwYy1h ZjJhLTY3Nzk1N2RlNzRiYy8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdk ZTc0YmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwZQYIKwYBBQUH AQcBAf8EVjBUMEMEAgABMD0wCwMDABeFAwQAF4UGAwQELTowAwQCZwtAAwQCZxxE AwQEaIDgAwQDovXYAwQEygUQAwQD0FdgAwQE2L2QMA0EAgACMAcDBQAmAv/FMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmVGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZRWv19PTEnf63kr2xV tI6bMVqUrBe6N1KoyjQnlQvZw/W6nbvOP6aiXmaJ/5MsKY980VDjarbhQjQoVGJF PVUSXs5sao+882JRV6hOUnKr8f4xQs4F74etZJg8Dv9s/JenIScyQQzyQXWkTem3 NUQiIH6o+oB8vC1WO/E/WFKBp7O/kU5f1IYN66c2/S1Xw11dw+T64UNFkeXIFTGD s4szxyRlUtT2m80/LFfB9TmDjZez5MwA3iAQJfPfS09hUuF3qGagwbsYOfF/2kay 5D/XzBYua8Ls0fUARMqWMQC2U7qHuuVo8mHfhVcTAYcFLK2tkUx+vte1CDLdcpJP IRY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:02 2025 by rpki-client