$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer File: 6c6981fd-28f4-4238-8558-d3d7498f0af2.cer (raw, json) Hash identifier: xSa9WZ5RbqyBiGD6Gswg2DPA7o/QQ6cAM1tRuftW+d0= Subject key identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B13CF22A726660C59E8417880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 6364 AS: 11041 IP: 45.58.32.0/20 IP: 69.28.64.0/19 IP: 69.87.216.0/21 IP: 96.126.72.0 -- 96.126.95.255 IP: 104.219.52.0/22 IP: 104.245.32.0/21 IP: 199.198.214.0/23 IP: 208.117.80.0/21 IP: 208.117.93.0 -- 208.117.94.255 IP: 209.23.0.0/19 IP: 209.208.0.0/17 IP: 216.98.0.0/20 IP: 2607:f170::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:22:a7:26:66:0c:59:e8:41:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:43:2f:3c:6c:d4:df:90:42:65:08:95:96: 3c:4f:10:74:57:a6:f7:b2:88:36:16:8f:bc:72:c0: b4:34:06:a0:e7:ff:d1:68:ca:27:2a:36:9f:6a:e1: d6:80:3f:e7:d0:56:3b:0c:fe:07:92:3d:1d:59:42: 43:4d:84:0f:e7:72:65:dd:14:36:30:b8:4a:dd:8c: 6d:4b:91:03:f9:33:b6:32:f6:02:74:8c:36:5c:00: 45:53:6f:75:36:4a:13:b8:98:3f:21:21:2d:28:88: e5:3e:3f:b2:3e:89:c0:08:2b:8d:f6:c9:a5:a2:28: 3d:ab:36:b3:6d:fc:3b:a1:a5:36:77:fa:49:7f:44: e4:3f:58:65:29:5d:9a:6b:2b:cd:80:9f:82:e9:ee: 0d:58:59:bd:b5:a5:b7:11:2e:00:7a:eb:8e:8e:90: e3:79:b2:c3:0d:41:d2:16:56:68:ff:90:39:aa:52: bf:01:d4:82:a9:12:d3:3a:db:0f:1d:49:b0:b1:5e: 31:fb:be:4c:8c:5c:9b:2f:2b:c9:8f:31:0e:29:7e: 2a:7d:ae:8f:c2:45:a6:c0:77:0b:69:e5:f7:f7:eb: 7b:20:7b:40:b2:da:b0:2c:84:67:78:dd:80:7e:4d: 7d:48:4b:78:8e:17:84:08:cf:e5:68:af:f6:aa:20: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 45.58.32.0/20 69.28.64.0/19 69.87.216.0/21 96.126.72.0-96.126.95.255 104.219.52.0/22 104.245.32.0/21 199.198.214.0/23 208.117.80.0/21 208.117.93.0-208.117.94.255 209.23.0.0/19 209.208.0.0/17 216.98.0.0/20 IPv6: 2607:f170::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6364 11041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ca:4d:b7:e6:46:8c:e2:a0:fb:77:3c:71:3f:79:b7:b3:d2: a4:5e:a0:3c:21:f9:91:3f:e4:ab:93:9a:41:02:87:74:ac:cd: 47:c9:e4:12:6c:43:41:34:4a:ba:5b:ce:46:a6:c6:27:04:42: a1:f7:da:a2:82:5d:49:2f:dc:b9:1e:5a:10:ca:03:e7:d3:5c: 7f:4f:f9:44:09:87:93:a1:36:58:49:c7:e2:8a:f8:9f:08:2b: 6b:f1:cd:1f:67:c1:92:5b:4d:62:97:13:d1:08:d8:d9:7e:80: 5d:29:f5:75:d1:29:cd:d9:78:6f:4d:44:6e:eb:e5:d6:4f:8a: d4:84:cc:c6:3e:c6:58:36:db:52:a4:4f:9e:f1:b9:6c:20:a7: 7e:a0:47:fb:46:51:63:70:fa:63:3a:f9:9d:1d:4f:4f:a3:b5: 50:c4:71:8e:79:ab:9e:c8:4c:2b:ab:75:fb:0a:76:c6:7d:7a: e2:2b:9b:46:b7:da:6c:eb:e7:8e:b9:4a:65:35:f1:3a:d4:34: 8e:4e:21:17:29:5f:da:f6:ae:29:ee:39:81:8c:a2:90:ca:cb: c8:2a:8f:bd:0b:17:2f:83:64:bb:f6:e4:4e:9c:23:b7:67:f8: ae:78:a9:9e:c4:8a:e9:12:45:23:66:42:eb:56:c2:2a:fb:fa: b7:e5:99:c5 -----BEGIN CERTIFICATE----- MIIHbjCCBlagAwIBAgIUAQ0Mn0MoWEsTzyKnJmYMWehBeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk NmM2OTgxZmQtMjhmNC00MjM4LTg1NTgtZDNkNzQ5OGYwYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLJDLzxs1N+QQmUIlZY8TxB0V6b3sog2Fo+8 csC0NAag5//RaMonKjafauHWgD/n0FY7DP4Hkj0dWUJDTYQP53Jl3RQ2MLhK3Yxt S5ED+TO2MvYCdIw2XABFU291NkoTuJg/ISEtKIjlPj+yPonACCuN9smloig9qzaz bfw7oaU2d/pJf0TkP1hlKV2aayvNgJ+C6e4NWFm9taW3ES4AeuuOjpDjebLDDUHS FlZo/5A5qlK/AdSCqRLTOtsPHUmwsV4x+75MjFybLyvJjzEOKX4qfa6PwkWmwHcL aeX39+t7IHtAstqwLIRneN2Afk19SEt4jheECM/laK/2qiAXzwIDAQABo4IEgDCC BHwwHQYDVR0OBBYEFLl258wQs9ssypcqFdvtNGDqgeU0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4ZjBhZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzZjNjk4MWZkLTI4ZjQtNDIzOC04 NTU4LWQzZDc0OThmMGFmMi82YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4 ZjBhZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYAGCCsGAQUF BwEHAQH/BHEwbzBeBAIAATBYAwQELTogAwQFRRxAAwQDRVfYMAwDBANgfkgDBAVg fkADBAJo2zQDBANo9SADBAHHxtYDBAPQdVAwDAMEANB1XQMEANB1XgMEBdEXAAME B9HQAAMEBNhiADANBAIAAjAHAwUAJgfxcDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgIY3AICKyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAZspNt+ZGjOKg+3c8cT95t7PSpF6gPCH5kT/kq5Oa QQKHdKzNR8nkEmxDQTRKulvORqbGJwRCoffaooJdSS/cuR5aEMoD59Ncf0/5RAmH k6E2WEnH4or4nwgra/HNH2fBkltNYpcT0QjY2X6AXSn1ddEpzdl4b01Ebuvl1k+K 1ITMxj7GWDbbUqRPnvG5bCCnfqBH+0ZRY3D6Yzr5nR1PT6O1UMRxjnmrnshMK6t1 +wp2xn164iubRrfabOvnjrlKZTXxOtQ0jk4hFylf2vauKe45gYyikMrLyCqPvQsX L4Nku/bkTpwjt2f4rnipnsSK6RJFI2ZC61bCKvv6t+WZxQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:09 2025 by rpki-client