$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer File: 4e08a47f-8ddd-473c-bb7b-011963e78626.cer (raw, json) Hash identifier: 5aXnYC15wc6e9NgMf/4DTOnYwlf+zdje1kiqE+eRIe8= Subject key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B2CEF4D8FA9E354F75E7DFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 00:45:26 +0000 Certificate not after: Fri 17 Dec 2027 01:45:26 +0000 Subordinate resources: IP: 207.66.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:ef:4d:8f:a9:e3:54:f7:5e:7d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 13 00:45:26 2025 GMT Not After : Dec 17 01:45:26 2027 GMT Subject: CN=4e08a47f-8ddd-473c-bb7b-011963e78626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:65:08:7a:d3:78:a5:a8:c5:a5:17:0e:e9: 6a:a1:da:2f:f7:ab:34:f9:c4:82:45:d3:fe:e2:e1: ca:b2:ee:61:78:f8:21:6c:8d:df:18:3f:23:f8:56: 5e:ac:22:ac:69:e5:1b:4c:09:8e:59:60:bb:28:2f: f1:b0:aa:a4:39:c7:25:9c:d6:e4:11:d0:04:27:b8: ed:4b:1a:6c:1b:9e:90:2d:65:ab:ac:fb:ad:16:02: c7:95:67:9a:b0:b3:5c:a2:d2:9b:9c:bc:63:b1:05: a3:2e:43:cb:ab:82:61:37:c4:a2:25:46:40:ad:63: 52:b1:2a:e2:06:f8:aa:b9:0e:bf:f0:03:75:bc:8b: 73:df:cb:0f:6c:1c:1f:f4:b8:62:c6:33:f7:cd:6b: eb:f5:65:ab:3e:68:78:0e:56:d9:f7:b7:83:5f:9f: eb:ac:f2:d8:c0:3c:67:05:81:96:54:9f:9e:8a:61: 80:11:7b:aa:11:4a:ba:ad:53:8d:b9:15:09:a3:b7: a6:02:38:ce:60:fd:52:54:1f:ba:07:ae:15:af:5f: f7:d8:23:78:f8:15:95:f5:b3:54:5e:0b:06:d4:5c: fb:01:04:d3:08:33:89:71:2a:db:de:d4:e4:ae:b9: a2:41:8b:37:4a:23:c4:6a:a5:1b:e6:ad:42:39:7b: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 207.66.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:05:75:2d:17:36:35:7f:ba:10:11:64:18:a5:1f:5a:dd:62: 51:02:74:7d:d6:9f:74:00:e4:8f:45:98:86:f4:c4:f9:4c:a5: d7:f1:6f:e9:3d:94:05:d1:38:63:c2:0e:2f:67:85:64:1d:ac: 09:91:17:c0:11:54:6b:6b:d6:00:38:88:85:53:24:6b:ab:39: b8:fb:41:e5:5b:03:07:da:29:01:c3:28:a8:09:45:28:85:41: 0f:b3:b1:af:c0:41:f7:7e:c7:f3:66:9f:bc:83:1e:30:ac:5e: 37:e9:ee:1e:28:83:bc:1b:f2:59:f4:97:71:c2:7b:64:ff:d9: 36:90:3f:bf:2d:20:4c:e4:ee:87:a5:2c:92:6c:d1:17:a5:ee: 21:b9:f7:80:11:02:21:fb:41:91:15:07:93:59:28:d4:50:ce: c6:71:4d:37:aa:1b:34:e1:49:4a:73:f2:8a:99:3f:5c:78:d0: 5c:9e:23:11:66:d6:ba:bc:cf:b8:70:fc:ba:3c:32:8b:b2:f7: a3:0d:4a:79:32:dd:5f:73:eb:a8:48:36:da:7a:37:d5:2d:46: ff:ab:14:8c:1a:05:c4:e4:70:7c:22:81:fe:c0:fe:fd:ca:4c: 92:80:98:50:cf:3f:c0:12:e6:07:a0:63:81:a4:27:34:bc:a6: ce:fb:2e:e0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEss702PqeNU9159+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxMzAwNDUyNloXDTI3MTIxNzAxNDUyNlowLzEtMCsGA1UEAxMk NGUwOGE0N2YtOGRkZC00NzNjLWJiN2ItMDExOTYzZTc4NjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZRlCHrTeKWoxaUXDulqodov96s0+cSCRdP+ 4uHKsu5hePghbI3fGD8j+FZerCKsaeUbTAmOWWC7KC/xsKqkOcclnNbkEdAEJ7jt SxpsG56QLWWrrPutFgLHlWeasLNcotKbnLxjsQWjLkPLq4JhN8SiJUZArWNSsSri BviquQ6/8AN1vItz38sPbBwf9LhixjP3zWvr9WWrPmh4DlbZ97eDX5/rrPLYwDxn BYGWVJ+eimGAEXuqEUq6rVONuRUJo7emAjjOYP1SVB+6B64Vr1/32CN4+BWV9bNU XgsG1Fz7AQTTCDOJcSrb3tTkrrmiQYs3SiPEaqUb5q1COXvctwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFsrkh8KkRiTVHny+O5qrMzr5vZjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNlNzg2MjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlMDhhNDdmLThkZGQtNDczYy1i YjdiLTAxMTk2M2U3ODYyNi80ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNl Nzg2MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPPQmgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAagV1LRc2NX+6EBFkGKUf Wt1iUQJ0fdafdADkj0WYhvTE+Uyl1/Fv6T2UBdE4Y8IOL2eFZB2sCZEXwBFUa2vW ADiIhVMka6s5uPtB5VsDB9opAcMoqAlFKIVBD7Oxr8BB937H82afvIMeMKxeN+nu HiiDvBvyWfSXccJ7ZP/ZNpA/vy0gTOTuh6UskmzRF6XuIbn3gBECIftBkRUHk1ko 1FDOxnFNN6obNOFJSnPyipk/XHjQXJ4jEWbWurzPuHD8ujwyi7L3ow1KeTLdX3Pr qEg22no31S1G/6sUjBoFxORwfCKB/sD+/cpMkoCYUM8/wBLmB6BjgaQnNLymzvsu 4A== -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:42 2025 by rpki-client