$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer File: 4b36fa3e-06ec-405c-acf7-72589e9511d3.cer (raw, json) Hash identifier: Px74RpbaI9P2nItYrtcr2MpG6sT2mNMLOtMehyZR4QU= Subject key identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848EDF43A6FD16C882726152ADD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 395734 IP: 23.128.128.0/23 IP: 149.112.56.0/23 IP: 149.112.64.0/22 IP: 2607:df80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:6f:d1:6c:88:27:26:15:2a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=4b36fa3e-06ec-405c-acf7-72589e9511d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:b7:1e:6b:87:36:61:72:4b:24:d1:d1:24: d6:22:59:55:c7:85:9d:ab:43:7a:39:43:53:ab:89: 37:ee:49:d3:7f:18:5f:0a:f9:76:c3:d7:e5:6d:65: d9:cf:4e:95:0f:db:6c:34:82:ce:74:0b:7e:fa:1b: 18:a4:0f:4c:0d:0f:ef:6a:d0:fb:de:6d:30:18:4b: f1:8d:5f:a0:a0:97:4e:40:a7:56:4a:d9:ad:e7:47: bb:40:60:e2:1b:0b:48:67:f0:d9:f7:92:de:d2:33: 9c:88:8f:2d:cc:92:e7:0b:99:e8:5c:68:2a:53:86: 00:08:78:b6:46:86:37:46:ff:49:ec:e6:e6:f1:b5: d7:ef:8e:14:c9:e6:fc:e4:6c:41:2d:09:d8:5b:29: 0c:af:58:28:b8:9e:a2:20:a6:11:2f:36:5a:aa:62: de:03:04:49:ea:a3:3d:7a:84:68:d6:0b:ba:f5:ef: 61:4d:b4:ff:78:cc:ee:30:95:5c:42:fb:50:9e:17: fc:bc:fb:11:15:5f:e6:c9:85:11:d9:3c:be:0f:01: ba:c2:2e:9c:51:58:77:d9:88:72:c6:af:8f:a3:22: 74:f6:e8:76:e3:75:d6:4d:f3:f5:d8:42:96:8d:ca: ce:75:07:4f:ac:ef:5c:03:53:47:26:2c:7e:da:0e: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.128.128.0/23 149.112.56.0/23 149.112.64.0/22 IPv6: 2607:df80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395734 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:61:7d:6d:5d:5c:bd:8b:6f:65:b3:11:fb:d3:7b:02:1b:4c: 67:a8:df:dc:7d:2d:ab:e2:36:18:31:d3:d7:db:76:6b:06:8a: 74:e4:d6:9d:3a:eb:1d:6e:11:52:c7:30:e9:47:e0:6b:fb:11: bf:10:30:5e:d9:76:6e:17:1f:06:17:ee:c9:55:cf:c0:a8:fc: 6a:79:98:f2:42:50:3e:19:37:e4:7b:76:b9:69:ea:f2:c9:48: 09:60:89:50:af:35:48:2a:1e:b6:fd:15:8e:8d:bb:0c:4c:4e: 44:be:04:7b:e0:f3:46:f8:a9:0c:4a:0f:a9:27:35:ff:eb:70: 43:f5:01:52:d9:8f:67:32:07:3d:d1:99:a0:33:cc:ef:dc:4d: d3:f7:40:fe:a8:ae:bf:bb:00:5a:d0:77:9e:4c:a8:ed:17:ca: 86:b1:a3:ce:6a:9b:6e:aa:4e:fe:06:b1:0a:2b:df:ee:46:15: 3e:4c:28:24:4c:0f:ee:ef:33:68:92:13:1c:f9:56:e3:19:be: c2:35:4b:0e:bf:3d:71:76:6f:2c:12:ee:a3:a0:8e:aa:1a:88: 2b:2d:db:40:39:15:84:18:f3:f2:48:84:6b:98:93:9f:ae:00: 94:a1:33:e7:d4:d4:cc:f2:bf:8b:ae:04:67:c6:b7:b8:03:ed: 7f:6c:86:d8 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEjt9Dpv0WyIJyYVKt0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk NGIzNmZhM2UtMDZlYy00MDVjLWFjZjctNzI1ODllOTUxMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgm3HmuHNmFySyTR0STWIllVx4Wdq0N6OUNT q4k37knTfxhfCvl2w9flbWXZz06VD9tsNILOdAt++hsYpA9MDQ/vatD73m0wGEvx jV+goJdOQKdWStmt50e7QGDiGwtIZ/DZ95Le0jOciI8tzJLnC5noXGgqU4YACHi2 RoY3Rv9J7Obm8bXX744Uyeb85GxBLQnYWykMr1gouJ6iIKYRLzZaqmLeAwRJ6qM9 eoRo1gu69e9hTbT/eMzuMJVcQvtQnhf8vPsRFV/myYUR2Ty+DwG6wi6cUVh32Yhy xq+PoyJ09uh243XWTfP12EKWjcrOdQdPrO9cA1NHJix+2g4KGQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJiy1GMXLhGxZZVQXMwiLeNLWZWnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 YjM2ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4OWU5NTExZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRiMzZmYTNlLTA2ZWMtNDA1Yy1h Y2Y3LTcyNTg5ZTk1MTFkMy80YjM2ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4OWU5 NTExZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXgIADBAGVcDgDBAKVcEAwDQQCAAIwBwMFACYH 34AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgnWMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGZhfW1dXL2L b2WzEfvTewIbTGeo39x9LaviNhgx09fbdmsGinTk1p066x1uEVLHMOlH4Gv7Eb8Q MF7Zdm4XHwYX7slVz8Co/Gp5mPJCUD4ZN+R7drlp6vLJSAlgiVCvNUgqHrb9FY6N uwxMTkS+BHvg80b4qQxKD6knNf/rcEP1AVLZj2cyBz3RmaAzzO/cTdP3QP6orr+7 AFrQd55MqO0Xyoaxo85qm26qTv4GsQor3+5GFT5MKCRMD+7vM2iSExz5VuMZvsI1 Sw6/PXF2bywS7qOgjqoaiCst20A5FYQY8/JIhGuYk5+uAJShM+fU1Mzyv4uuBGfG t7gD7X9shtg= -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:41 2025 by rpki-client