$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer File: 5e580e37-3db1-41d1-ae09-7e84348caffd.cer (raw, json) Hash identifier: ojHcCptvXKeKEylIHPk1pEC0UuNbivxuZ97KabUa62c= Subject key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B80AFCCF8A9745884331D0500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 192.207.133.0 -- 192.207.137.255 IP: 198.59.3.0 -- 198.59.6.255 IP: 198.59.61.0/24 IP: 204.228.65.0 -- 204.228.67.255 IP: 204.228.72.0/21 IP: 204.228.82.0 -- 204.228.88.255 IP: 204.228.171.0 -- 204.228.174.255 IP: 204.229.32.0 -- 204.229.95.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cc:f8:a9:74:58:84:33:1d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:68:59:7c:82:0a:7f:bb:fc:de:b5:76:17: 16:14:b9:e3:bd:0b:91:20:ae:5d:4d:ae:1a:54:e7: 30:39:ce:65:c8:17:99:ee:d7:f7:47:2f:fb:6b:43: 56:05:f1:e5:0d:bb:03:a3:5e:2c:6b:16:c5:b4:ed: 7a:b6:8c:f4:e1:b3:7d:c9:14:93:68:b9:94:88:c8: 06:a0:42:d1:e3:c4:bd:51:80:b4:82:2c:a5:d4:cf: e7:6b:9a:17:64:2a:48:49:66:88:37:a3:dd:1e:91: 20:c3:7f:92:fd:b1:b6:e4:1e:22:fe:86:ec:f7:7d: 15:36:06:84:9b:48:10:1e:d7:81:e4:37:63:1d:0d: 80:15:6b:03:40:54:f7:d5:32:16:ae:da:ea:ac:42: c5:69:05:f3:57:4e:fe:72:20:53:01:01:55:52:84: 13:23:f3:4b:3f:ce:49:76:8c:29:74:7f:9d:15:90: 71:8a:10:2e:0a:38:32:8a:12:e2:fb:35:76:9d:72: bc:ad:b9:a3:90:46:b4:b5:53:c7:37:03:c7:30:97: 03:86:ed:85:f1:f8:86:76:53:35:45:07:6e:e0:d3: 0d:6f:37:c3:ca:d9:ba:a8:f4:f1:3e:1a:eb:cc:95: c8:fe:47:e5:68:4d:56:73:0b:58:61:d7:fb:4c:85: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.207.133.0-192.207.137.255 198.59.3.0-198.59.6.255 198.59.61.0/24 204.228.65.0-204.228.67.255 204.228.72.0/21 204.228.82.0-204.228.88.255 204.228.171.0-204.228.174.255 204.229.32.0-204.229.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:16:d9:60:b9:9a:c9:2a:bf:b8:0f:0b:74:67:38:88:72:ad: af:d7:b8:4c:cd:44:b1:a5:bf:f4:b3:16:41:cd:3e:93:c3:a0: 20:97:de:42:67:22:d4:6c:e7:e1:15:2e:18:ad:23:40:80:6b: 63:13:80:5f:69:65:5a:75:36:2e:33:7a:67:68:be:81:30:34: cc:8d:d1:12:4f:fa:0c:91:b0:2d:8a:a5:07:14:d4:7d:93:be: c6:b0:12:b6:da:cb:2d:df:a8:fa:3d:fa:b1:73:13:5e:34:10: fb:a0:47:f0:ef:17:52:52:77:87:ae:4e:32:b6:14:71:90:38: 4b:ab:f1:f7:2b:1e:9e:ae:5c:24:f4:f6:de:83:74:85:15:65: 67:3a:96:02:a1:68:43:56:a4:9b:45:fc:9c:09:18:48:ab:a1: 9e:b8:fc:7b:13:d3:dd:f2:9f:e6:13:f6:cb:e3:a6:9e:80:d4: ae:15:bd:de:d9:4e:46:79:2d:2a:99:9d:f6:19:15:81:76:0d: 67:33:68:de:6f:76:08:06:5a:a0:8a:f5:e9:c2:c7:71:bc:a9: 57:39:fa:53:55:69:06:a2:4c:7a:ad:61:a3:55:20:3c:21:02: 95:02:86:51:2b:25:92:44:25:09:39:88:1c:c5:b4:e0:3d:c3: 08:af:98:82 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEuAr8z4qXRYhDMdBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk NWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNhZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulFoWXyCCn+7/N61dhcWFLnjvQuRIK5dTa4a VOcwOc5lyBeZ7tf3Ry/7a0NWBfHlDbsDo14saxbFtO16toz04bN9yRSTaLmUiMgG oELR48S9UYC0giyl1M/na5oXZCpISWaIN6PdHpEgw3+S/bG25B4i/obs930VNgaE m0gQHteB5DdjHQ2AFWsDQFT31TIWrtrqrELFaQXzV07+ciBTAQFVUoQTI/NLP85J dowpdH+dFZBxihAuCjgyihLi+zV2nXK8rbmjkEa0tVPHNwPHMJcDhu2F8fiGdlM1 RQdu4NMNbzfDytm6qPTxPhrrzJXI/kflaE1WcwtYYdf7TIUvqwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFP2+x0fTzRst5/dkYJ8DQZRqS5hPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVlNTgwZTM3LTNkYjEtNDFkMS1h ZTA5LTdlODQzNDhjYWZmZC81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4 Y2FmZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIweQYIKwYBBQUH AQcBAf8EajBoMGYEAgABMGAwDAMEAMDPhQMEAcDPiDAMAwQAxjsDAwQAxjsGAwQA xjs9MAwDBADM5EEDBALM5EADBAPM5EgwDAMEAczkUgMEAMzkWDAMAwQAzOSrAwQA zOSuMAwDBAXM5SADBAXM5UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqhbZYLmaySq/uA8LdGc4iHKtr9e4 TM1EsaW/9LMWQc0+k8OgIJfeQmci1Gzn4RUuGK0jQIBrYxOAX2llWnU2LjN6Z2i+ gTA0zI3REk/6DJGwLYqlBxTUfZO+xrASttrLLd+o+j36sXMTXjQQ+6BH8O8XUlJ3 h65OMrYUcZA4S6vx9ysenq5cJPT23oN0hRVlZzqWAqFoQ1akm0X8nAkYSKuhnrj8 exPT3fKf5hP2y+OmnoDUrhW93tlORnktKpmd9hkVgXYNZzNo3m92CAZaoIr16cLH cbypVzn6U1VpBqJMeq1ho1UgPCEClQKGUSslkkQlCTmIHMW04D3DCK+Ygg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:37 2025 by rpki-client