$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer File: 3df29669-3733-4127-bbde-a71cc4b5a661.cer (raw, json) Hash identifier: faxcpN9EI+Gqo95O2Fj2CpK/zIiFAxnBxPTQWxQWt5Q= Subject key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849B6D7B79901E4F36F1644E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 55247 IP: 162.211.140.0/22 IP: 208.82.168.0/22 IP: 216.162.208.0/22 IP: 2602:ff32::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b7:99:01:e4:f3:6f:16:44:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=3df29669-3733-4127-bbde-a71cc4b5a661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:fd:53:43:04:95:97:3d:1f:70:7f:91:26: 62:f5:6c:68:cf:31:8b:32:b1:ed:fe:7b:2b:8f:3b: 67:5f:f0:b8:7b:1c:c0:05:37:9c:50:d1:d6:66:af: 8f:6d:ba:e1:07:f4:3d:28:d2:1c:19:4d:82:bc:03: 07:42:20:0f:bf:9f:90:03:f0:eb:18:6f:63:29:80: d6:43:0f:db:45:f7:f9:b4:26:96:8b:0c:4a:6b:e6: ed:61:a5:4f:5e:ac:4e:c8:bd:73:22:a3:1c:f2:df: 8b:ff:29:42:1b:9e:dc:49:a8:b9:c8:be:8b:d8:82: ad:03:09:8f:28:05:c3:2f:e1:2c:b6:3c:b8:8e:c7: ba:3f:9f:a3:56:9a:3b:92:a2:30:7e:f5:c0:15:ae: 34:ea:2c:ad:23:21:f8:1c:a4:d2:b6:ed:f5:c1:eb: 92:97:80:15:48:40:a7:10:ad:04:c2:c6:0f:fc:7e: 9f:5a:b4:a3:2f:ab:9d:de:35:55:fd:5c:ac:6e:a2: dd:34:3c:f2:20:97:52:13:2f:aa:e9:aa:9c:fe:9f: 7e:7d:79:28:42:19:98:9f:51:e9:3e:6f:55:da:6d: 34:71:5d:70:b0:dc:33:a3:1c:c9:a1:a7:8c:cd:94: 70:22:ee:10:1a:59:30:c2:1f:47:42:1f:04:10:9b: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.211.140.0/22 208.82.168.0/22 216.162.208.0/22 IPv6: 2602:ff32::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55247 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:02:41:58:05:44:db:2b:52:15:a5:26:e6:da:6c:b7:72:c8: 2d:7c:8f:d1:2f:b3:c0:88:54:4b:96:de:58:12:e3:03:7d:57: 2a:e7:a1:3c:8f:e0:df:16:0d:ae:e0:36:72:93:56:36:57:b9: 15:1b:a2:a7:34:08:4b:97:58:96:47:46:f6:48:91:0d:c5:f3: 88:87:1a:ec:d1:ac:41:34:6e:fc:bc:66:b9:93:1e:8c:b1:e6: ba:9c:d7:60:90:e3:b3:f4:fe:02:fe:2f:86:1c:da:5b:f4:14: 63:97:6b:eb:4b:af:03:ee:64:4d:2b:9c:a0:16:a2:7e:46:96: c9:ed:22:69:c6:aa:ff:bf:20:d4:68:b4:b9:e9:8e:c3:bf:1d: 20:72:a7:d9:20:b0:4a:48:1f:8b:16:b0:34:e3:a4:3b:2e:35: 0f:aa:f5:85:0b:1e:78:36:9a:73:2e:13:9d:03:c0:58:0a:b9: 8a:ae:0a:be:fa:cf:c9:ef:94:05:a2:b8:77:30:39:c2:f2:2c: 7e:64:87:86:62:d5:90:e4:96:b4:af:42:a2:3a:b2:d1:ae:53: d9:ca:e8:93:d3:5d:7e:5a:3b:dc:a5:2e:37:dd:e5:cf:40:07: c7:99:ea:69:cc:10:3d:8e:a3:47:4f:6f:33:d4:8a:c9:c8:d0: 01:e4:27:aa -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEm217eZAeTzbxZE44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk M2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVhNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzn9U0MElZc9H3B/kSZi9WxozzGLMrHt/nsr jztnX/C4exzABTecUNHWZq+PbbrhB/Q9KNIcGU2CvAMHQiAPv5+QA/DrGG9jKYDW Qw/bRff5tCaWiwxKa+btYaVPXqxOyL1zIqMc8t+L/ylCG57cSai5yL6L2IKtAwmP KAXDL+Estjy4jse6P5+jVpo7kqIwfvXAFa406iytIyH4HKTStu31weuSl4AVSECn EK0EwsYP/H6fWrSjL6ud3jVV/VysbqLdNDzyIJdSEy+q6aqc/p9+fXkoQhmYn1Hp Pm9V2m00cV1wsNwzoxzJoaeMzZRwIu4QGlkwwh9HQh8EEJv1uwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFJWtJFTQHwm1tOSl0mauc/LUm1XcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z ZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNkZjI5NjY5LTM3MzMtNDEyNy1i YmRlLWE3MWNjNGI1YTY2MS8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRi NWE2NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKi04wDBALQUqgDBALYotAwDgQCAAIwCAMGBCYC /zIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDXzzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOAkFYBUTb K1IVpSbm2my3csgtfI/RL7PAiFRLlt5YEuMDfVcq56E8j+DfFg2u4DZyk1Y2V7kV G6KnNAhLl1iWR0b2SJENxfOIhxrs0axBNG78vGa5kx6Msea6nNdgkOOz9P4C/i+G HNpb9BRjl2vrS68D7mRNK5ygFqJ+RpbJ7SJpxqr/vyDUaLS56Y7Dvx0gcqfZILBK SB+LFrA046Q7LjUPqvWFCx54NppzLhOdA8BYCrmKrgq++s/J75QForh3MDnC8ix+ ZIeGYtWQ5Ja0r0KiOrLRrlPZyuiT011+WjvcpS433eXPQAfHmeppzBA9jqNHT28z 1IrJyNAB5Ceq -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:48 2025 by rpki-client