$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer File: 66dea2a5-837d-46d8-8f8e-9447ece20c09.cer (raw, json) Hash identifier: XVpMjximf25zDabg2jrHZliWi70eSyimqVCUPzg5HoI= Subject key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BAD5ABF97C987033FC9DB3DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 00:45:23 +0000 Certificate not after: Tue 01 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 11798 IP: 23.26.0.0/16 IP: 50.114.0.0/16 IP: 69.27.160.0/20 IP: 108.165.0.0/16 IP: 166.0.0.0/15 IP: 199.58.196.0/22 IP: 199.115.192.0/22 IP: 2604:3140::/32 IP: 2604:ba00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:5a:bf:97:c9:87:03:3f:c9:db:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 29 00:45:23 2025 GMT Not After : Feb 1 01:45:23 2028 GMT Subject: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:3d:d4:5f:a3:93:26:6d:0d:8c:b1:24:17: dd:a5:d2:ac:a7:91:7b:be:92:98:af:25:e0:f4:de: 4a:21:36:93:41:17:b2:df:0f:99:fd:c1:74:93:94: 5a:e1:85:50:24:b2:f2:47:e7:52:d1:0b:63:67:78: 18:18:36:9e:12:e4:63:9c:03:02:99:d0:d9:6a:32: 43:f7:4c:d2:df:2b:54:79:90:04:f3:c1:7a:1a:91: 0f:3d:df:82:7c:c1:22:90:1f:91:7a:da:a7:32:0a: 16:71:62:8f:2d:82:aa:5c:18:df:02:a8:89:71:ed: e5:5a:01:c7:aa:59:50:fc:22:15:7d:63:3c:f9:52: 22:71:e9:b3:96:cf:53:6b:c7:da:8a:2f:0b:2f:43: db:c2:c9:ad:65:6c:84:92:f6:ad:78:9c:9e:3d:bc: a8:2f:ef:b1:ef:6b:25:d8:f5:43:3c:1a:2c:f0:67: d2:a7:6f:81:7f:0a:10:ca:74:41:06:cd:02:a7:e5: 9f:14:f7:2f:c2:bb:2b:c3:12:c3:73:67:7e:af:5f: bd:25:16:1a:47:85:a1:e0:ac:c7:db:7e:46:98:c0: f5:a4:3f:a2:41:99:15:55:9d:4c:83:87:bd:55:83: 7b:ce:1f:32:86:49:ad:54:6e:5d:6a:90:f9:7c:3d: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.26.0.0/16 50.114.0.0/16 69.27.160.0/20 108.165.0.0/16 166.0.0.0/15 199.58.196.0/22 199.115.192.0/22 IPv6: 2604:3140::/32 2604:ba00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11798 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:25:4b:22:01:90:fb:85:19:78:b7:70:a8:96:0b:ca:20:5e: 74:10:34:4c:f8:0b:53:39:f3:85:ed:e8:a1:38:2e:01:d8:31: 83:73:27:fe:0d:c8:ad:3f:61:ee:8c:6a:74:01:3a:a6:9c:1c: 54:86:41:f4:1b:c4:be:88:12:e7:be:99:93:c7:3e:0b:4b:47: 4a:89:66:32:02:72:d6:ba:18:88:d0:5f:b5:42:9d:73:e1:6a: ee:c1:64:16:ca:65:83:5b:73:f0:e4:23:da:3c:58:3c:a2:81: 37:6f:33:f3:84:b9:05:cd:48:a8:fd:2f:46:95:6e:fd:c1:45: a5:9d:84:f4:4f:27:8c:8b:e2:13:e7:d5:e7:1f:72:34:c4:2f: 3e:eb:93:18:a5:1e:2c:51:6a:97:62:b5:57:07:33:bd:4e:ca: 5c:cb:6d:89:29:d4:ae:46:67:37:e4:45:c7:b8:70:56:e4:40: 9a:65:93:9d:b6:39:ab:a5:fc:df:d9:0d:3f:7c:26:07:cd:34: 37:1f:82:55:d4:5a:f4:c0:7b:3a:a5:99:52:40:16:1b:19:8d: e0:35:2d:b4:77:6f:f8:44:dd:2d:53:f8:b3:03:41:4b:4d:3d: 0b:8d:f0:41:5c:19:40:72:c2:dc:0d:d7:bb:91:79:62:71:15: ee:73:bf:af -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWEutWr+XyYcDP8nbPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyOTAwNDUyM1oXDTI4MDIwMTAxNDUyM1owLzEtMCsGA1UEAxMk NjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdQ91F+jkyZtDYyxJBfdpdKsp5F7vpKYryXg 9N5KITaTQRey3w+Z/cF0k5Ra4YVQJLLyR+dS0QtjZ3gYGDaeEuRjnAMCmdDZajJD 90zS3ytUeZAE88F6GpEPPd+CfMEikB+RetqnMgoWcWKPLYKqXBjfAqiJce3lWgHH qllQ/CIVfWM8+VIicemzls9Ta8faii8LL0PbwsmtZWyEkvateJyePbyoL++x72sl 2PVDPBos8GfSp2+BfwoQynRBBs0Cp+WfFPcvwrsrwxLDc2d+r1+9JRYaR4Wh4KzH 235GmMD1pD+iQZkVVZ1Mg4e9VYN7zh8yhkmtVG5dapD5fD39vQIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFMOGrYv0GUs1lCSbkLqdgBHCCHHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY2ZGVhMmE1LTgzN2QtNDZkOC04 ZjhlLTk0NDdlY2UyMGMwOS82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNl MjBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCwEAgABMCYDAwAXGgMDADJyAwQERRugAwMAbKUDAwGmAAMEAsc6 xAMEAsdzwDAUBAIAAjAOAwUAJgQxQAMFACYEugAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLhYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAOCVLIgGQ+4UZeLdwqJYLyiBedBA0TPgLUznzhe3o oTguAdgxg3Mn/g3IrT9h7oxqdAE6ppwcVIZB9BvEvogS576Zk8c+C0tHSolmMgJy 1roYiNBftUKdc+Fq7sFkFsplg1tz8OQj2jxYPKKBN28z84S5Bc1IqP0vRpVu/cFF pZ2E9E8njIviE+fV5x9yNMQvPuuTGKUeLFFql2K1VwczvU7KXMttiSnUrkZnN+RF x7hwVuRAmmWTnbY5q6X839kNP3wmB800Nx+CVdRa9MB7OqWZUkAWGxmN4DUttHdv +ETdLVP4swNBS009C43wQVwZQHLC3A3Xu5F5YnEV7nO/rw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:19 2025 by rpki-client