$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer File: 811bd2ac-c53d-40a6-bfa4-275c2241af63.cer (raw, json) Hash identifier: /cL2n84UJwKaD1t8+KvANt9gJ8oTi8F4htRgaOu8N+g= Subject key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849C2027379B5C1B558C804AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 400597 IP: 23.141.8.0/24 IP: 217.149.96.0/21 IP: 2602:fb1b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:73:79:b5:c1:b5:58:c8:04:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:cc:9e:f1:79:85:e0:37:28:9a:a8:07:70: 40:19:7d:ae:da:3b:03:b4:b8:95:c8:16:bb:c2:7e: 60:d9:7d:20:7f:ef:f4:3b:e7:82:5d:6e:3f:10:bc: ca:95:d8:f9:67:df:ac:e7:23:cd:dd:72:dd:01:5b: 30:90:e4:26:b1:53:d8:35:d7:51:e2:c3:de:9b:eb: d6:22:ff:61:d2:08:82:75:11:0f:2e:56:53:f6:3b: 66:0e:f7:7c:7c:1b:0c:dc:20:87:0a:6d:93:49:b5: 2f:15:d6:7c:01:85:0f:f8:cd:48:b6:42:1f:f5:08: 70:e8:c4:59:ba:43:37:b7:bc:a5:b6:bc:9b:69:04: 3f:d2:0f:dc:a3:85:48:e7:b9:24:b5:bd:50:01:16: 7c:30:5a:a7:23:45:75:84:d9:18:99:b6:fb:14:96: f2:65:f4:3a:c8:d5:48:53:3e:84:25:23:31:1e:85: e9:b4:4a:8f:17:9a:0b:e6:d8:9c:19:14:86:15:91: 83:17:ce:fb:72:ff:a4:db:a8:56:86:79:b9:0e:77: 31:89:60:03:bc:af:c9:81:f4:90:87:03:83:61:2b: 86:c7:d3:33:7f:65:1f:50:f8:37:6c:eb:0f:d1:b6: 52:cd:a2:70:47:1d:3f:3e:a6:cd:6c:10:2c:a3:ca: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.141.8.0/24 217.149.96.0/21 IPv6: 2602:fb1b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c6:0f:05:27:39:9b:98:ff:60:9b:a4:1d:8a:cd:e3:b8:3c: 1e:27:28:50:b4:68:b6:db:9f:2d:d1:19:bf:af:15:7a:37:12: 7c:d9:50:e4:39:fe:19:f4:49:d9:c6:17:a7:43:76:b3:7d:9d: 9d:be:a3:ad:bc:da:31:60:b3:47:38:16:e4:40:a0:72:45:1b: bc:b8:1a:06:f9:ce:b6:2b:62:46:d3:8f:7b:05:e6:fa:5c:e6: d5:c9:4f:e9:f9:57:b6:a5:a8:d7:76:8e:05:40:79:46:4e:02: fe:4b:96:6c:20:04:90:c2:81:27:f7:e9:26:1d:e3:d6:c8:be: 93:1f:f9:cb:50:c2:f0:c7:f6:cf:bb:40:42:85:47:79:b3:3e: 6b:34:e1:70:0f:43:7c:75:56:42:c1:52:ac:ac:da:bf:38:6c: ff:c6:81:d9:2c:e0:33:f6:6b:fb:27:24:ad:4d:40:24:cc:4d: e2:15:e5:5d:bd:c6:3e:87:23:3c:a0:57:93:0f:39:08:d9:a8: f9:35:e9:d4:30:d7:f4:b3:0f:52:ca:7a:89:41:e6:5e:f1:1c: f3:bc:50:e1:82:78:e5:11:89:4e:99:bd:2e:6d:4f:9b:46:ae: 27:4a:7b:e8:b7:b6:f2:50:bb:31:2b:07:63:52:78:ec:08:27: 9c:c3:8a:2c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEnCAnN5tcG1WMgEroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk ODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFhZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnarMnvF5heA3KJqoB3BAGX2u2jsDtLiVyBa7 wn5g2X0gf+/0O+eCXW4/ELzKldj5Z9+s5yPN3XLdAVswkOQmsVPYNddR4sPem+vW Iv9h0giCdREPLlZT9jtmDvd8fBsM3CCHCm2TSbUvFdZ8AYUP+M1ItkIf9Qhw6MRZ ukM3t7yltrybaQQ/0g/co4VI57kktb1QARZ8MFqnI0V1hNkYmbb7FJbyZfQ6yNVI Uz6EJSMxHoXptEqPF5oL5ticGRSGFZGDF877cv+k26hWhnm5DncxiWADvK/JgfSQ hwODYSuGx9Mzf2UfUPg3bOsP0bZSzaJwRx0/PqbNbBAso8pHuwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFC+lcmjDd4h5j9tV3tG7x8aohl2HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgxMWJkMmFjLWM1M2QtNDBhNi1i ZmE0LTI3NWMyMjQxYWY2My84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0 MWFmNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjQgDBAPZlWAwDgQCAAIwCAMGACYC+xsAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYc1TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7xg8FJzmbmP9gm6Qd is3juDweJyhQtGi2258t0Rm/rxV6NxJ82VDkOf4Z9EnZxhenQ3azfZ2dvqOtvNox YLNHOBbkQKByRRu8uBoG+c62K2JG0497Beb6XObVyU/p+Ve2pajXdo4FQHlGTgL+ S5ZsIASQwoEn9+kmHePWyL6TH/nLUMLwx/bPu0BChUd5sz5rNOFwD0N8dVZCwVKs rNq/OGz/xoHZLOAz9mv7JyStTUAkzE3iFeVdvcY+hyM8oFeTDzkI2aj5NenUMNf0 sw9SynqJQeZe8RzzvFDhgnjlEYlOmb0ubU+bRq4nSnvot7byULsxKwdjUnjsCCec w4os -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:10 2025 by rpki-client