$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer File: 4e81a256-41ff-4f51-8092-c7fffa4d9221.cer (raw, json) Hash identifier: yAMD5cbBHZZHSEiCZdFEUcprpT3TaAW1p+N9gbBNVuY= Subject key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A612375AB1AE0ADD8DD1E6080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 00:45:37 +0000 Certificate not after: Tue 05 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 3354 AS: 10550 AS: 10812 IP: 129.114.0.0/16 IP: 129.117.0.0/16 IP: 192.12.10.0/24 IP: 192.12.22.0/24 IP: 192.16.72.0/24 IP: 192.16.74.0/24 IP: 192.26.49.0/24 IP: 192.67.11.0/24 IP: 192.88.12.0/23 IP: 192.124.220.0/22 IP: 192.124.225.0 -- 192.124.234.255 IP: 192.138.168.0/24 IP: 192.195.222.0/24 IP: 198.213.0.0 -- 198.216.255.255 IP: 204.158.0.0/16 IP: 205.165.0.0/16 IP: 206.76.0.0/15 IP: 206.254.0.0/16 IP: 207.64.0.0/16 IP: 207.80.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:23:75:ab:1a:e0:ad:d8:dd:1e:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 2 00:45:37 2025 GMT Not After : Oct 5 00:45:37 2027 GMT Subject: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:56:f6:1c:ab:c7:6d:9e:35:ef:1d:ef:74: 21:72:d2:5c:15:df:0f:2b:4c:08:6a:c5:ea:aa:f8: af:30:a6:db:7e:f0:a2:81:09:16:38:85:ba:88:0e: 65:5f:39:25:13:bd:d9:21:0e:76:57:58:c4:2f:b1: 34:08:e7:ae:01:d7:dd:c6:ac:bf:5a:9f:07:4e:a1: f9:3d:6f:1f:bb:51:c3:8f:e6:41:bc:c3:f6:b2:65: f9:12:3b:0f:66:dd:6c:d0:34:5a:57:91:df:75:f9: 62:1e:c4:0c:2d:44:cf:fc:8f:a9:ef:18:e6:f3:cf: 8b:b9:75:f8:53:7a:75:ad:3c:42:73:eb:fc:4a:67: 09:b8:1e:9c:d0:8e:26:98:7e:cf:58:ca:59:07:12: 64:9d:d7:7d:03:60:e4:e7:d8:6c:f3:cd:ea:e1:38: c6:77:1e:c4:c8:36:30:87:49:21:6f:0e:3f:ca:c7: 55:1f:4c:3d:14:64:28:b6:81:9a:0d:ad:49:de:5a: 9e:55:c4:f5:0e:26:d1:c9:bb:ff:fb:e0:7e:6e:54: 27:4b:4f:b4:b9:e6:fb:72:30:fb:3b:c5:a5:7b:ae: 97:52:b2:6a:39:7b:fd:07:e5:99:ed:a0:57:eb:85: 1e:9f:f5:87:de:78:70:15:78:65:1d:42:28:ff:68: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 129.114.0.0/16 129.117.0.0/16 192.12.10.0/24 192.12.22.0/24 192.16.72.0/24 192.16.74.0/24 192.26.49.0/24 192.67.11.0/24 192.88.12.0/23 192.124.220.0/22 192.124.225.0-192.124.234.255 192.138.168.0/24 192.195.222.0/24 198.213.0.0-198.216.255.255 204.158.0.0/16 205.165.0.0/16 206.76.0.0/15 206.254.0.0/16 207.64.0.0/16 207.80.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3354 10550 10812 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ec:f4:14:8d:1b:5a:66:85:9d:20:50:7f:37:0a:b4:66:fc: 71:91:e1:2b:7f:b1:a8:c9:7d:2c:d3:fa:97:f3:45:f2:c3:6e: 63:03:02:1f:57:31:4f:29:0e:c5:0f:c0:0b:0a:2f:69:9f:61: 25:d9:56:d1:32:6a:20:85:5f:52:6a:4b:d4:f3:4a:89:2d:bc: f6:b6:67:5e:2d:87:0c:d7:d0:c9:f3:18:c8:f3:ac:c4:5b:0e: 9f:d7:21:02:c4:13:f4:50:f4:86:32:b6:10:ec:e0:1e:13:de: 08:53:9c:5f:f8:8d:d7:ca:7a:b5:83:7f:01:b9:97:de:85:39: 37:4b:a1:72:e9:01:85:36:45:fe:d2:68:aa:e2:58:4a:06:77: 6a:6a:e7:4d:3c:6d:41:3b:60:8d:37:2a:97:5a:20:7f:df:39: 2a:ae:ff:b3:14:e3:7a:ec:d7:ba:e9:f1:7c:a3:ca:3d:f6:b6: 11:09:bc:f9:2a:4c:de:aa:60:3c:cf:16:e6:4c:a3:67:bc:71: 4a:99:db:b7:10:44:9d:d6:65:78:9c:93:78:a5:e8:78:a8:d5: 08:27:4b:e2:b3:1b:12:53:a8:cd:e3:eb:13:5f:21:50:3b:32: bf:34:9d:7e:55:2a:99:9d:21:dd:76:a8:22:93:9a:46:7f:fa: 36:98:36:1b -----BEGIN CERTIFICATE----- MIIHjDCCBnSgAwIBAgIUAQ0Mn0MoWEphI3WrGuCt2N0eYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcwMjAwNDUzN1oXDTI3MTAwNTAwNDUzN1owLzEtMCsGA1UEAxMk NGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEdW9hyrx22eNe8d73QhctJcFd8PK0wIasXq qvivMKbbfvCigQkWOIW6iA5lXzklE73ZIQ52V1jEL7E0COeuAdfdxqy/Wp8HTqH5 PW8fu1HDj+ZBvMP2smX5EjsPZt1s0DRaV5HfdfliHsQMLUTP/I+p7xjm88+LuXX4 U3p1rTxCc+v8SmcJuB6c0I4mmH7PWMpZBxJkndd9A2Dk59hs883q4TjGdx7EyDYw h0khbw4/ysdVH0w9FGQotoGaDa1J3lqeVcT1DibRybv/++B+blQnS0+0ueb7cjD7 O8Wle66XUrJqOXv9B+WZ7aBX64Uen/WH3nhwFXhlHUIo/2i4pQIDAQABo4IEnjCC BJowHQYDVR0OBBYEFMIrZ2HRHqzlEyZPEEbS+sx8RYsqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlODFhMjU2LTQxZmYtNGY1MS04 MDkyLWM3ZmZmYTRkOTIyMS80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0 ZDkyMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgZoGCCsGAQUF BwEHAQH/BIGKMIGHMIGEBAIAATB+AwMAgXIDAwCBdQMEAMAMCgMEAMAMFgMEAMAQ SAMEAMAQSgMEAMAaMQMEAMBDCwMEAcBYDAMEAsB83DAMAwQAwHzhAwQAwHzqAwQA wIqoAwQAwMPeMAoDAwDG1QMDAMbYAwMAzJ4DAwDNpQMDAc5MAwMAzv4DAwDPQAMD AM9QMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAg0aAgIpNgICKjwwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA kuz0FI0bWmaFnSBQfzcKtGb8cZHhK3+xqMl9LNP6l/NF8sNuYwMCH1cxTykOxQ/A CwovaZ9hJdlW0TJqIIVfUmpL1PNKiS289rZnXi2HDNfQyfMYyPOsxFsOn9chAsQT 9FD0hjK2EOzgHhPeCFOcX/iN18p6tYN/AbmX3oU5N0uhcukBhTZF/tJoquJYSgZ3 amrnTTxtQTtgjTcql1ogf985Kq7/sxTjeuzXuunxfKPKPfa2EQm8+SpM3qpgPM8W 5kyjZ7xxSpnbtxBEndZleJyTeKXoeKjVCCdL4rMbElOozePrE18hUDsyvzSdflUq mZ0h3XaoIpOaRn/6Npg2Gw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:23 2025 by rpki-client