$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer File: 88842878-1050-4df7-822b-ea8ec25db83d.cer (raw, json) Hash identifier: b963Itq4NUdWFqZCSCqevt/0CQQjuXSme/g+NQyRppY= Subject key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858499AECDD49797A90649CDDD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 00:45:33 +0000 Certificate not after: Mon 26 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 2495 IP: 164.113.0.0/16 IP: 198.248.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:ec:dd:49:79:7a:90:64:9c:dd:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 22 00:45:33 2025 GMT Not After : Jul 26 00:45:33 2027 GMT Subject: CN=88842878-1050-4df7-822b-ea8ec25db83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:d4:3b:88:65:8e:c3:01:6a:8c:db:d7:37: f5:d0:e0:a8:ab:48:96:04:fd:e3:6d:61:89:ef:b6: 0f:c4:60:18:e8:7a:39:f8:e5:6b:ed:08:93:3b:61: 8e:d6:6b:9c:fa:e5:2f:f7:e9:6a:34:74:1d:af:29: c0:84:2c:0c:1a:90:de:05:28:1f:77:b9:16:ae:03: ae:a1:59:62:ba:00:16:69:a3:0c:93:79:c6:c4:2d: 91:1a:39:72:7a:18:4a:89:f5:c5:ab:b5:e2:8d:fc: ec:4c:d6:5e:8f:67:1e:55:07:89:13:67:34:d3:6e: 7f:8d:0d:27:e6:23:da:60:c2:55:40:cb:1e:7f:7f: 42:85:f8:64:b9:d0:72:94:ab:7e:62:5a:4d:af:25: 0a:2e:54:8a:e4:33:c5:93:0a:22:d4:30:e1:e9:a6: 41:9f:0d:01:93:47:6e:39:0a:7a:0e:d9:9e:ff:a6: aa:10:e0:97:10:de:19:0c:5d:90:9a:d1:52:da:9c: 70:15:e4:5b:6e:43:89:72:61:39:f7:aa:ef:46:a7: 06:5a:15:d3:c8:e5:07:ee:a7:3e:5a:26:0a:c4:2f: f7:37:c4:79:b0:e0:3d:f1:7e:55:dc:e2:d0:f6:52: 57:d0:e8:cd:0c:98:c2:95:49:b0:4d:12:cd:c8:58: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 164.113.0.0/16 198.248.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2495 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:20:f8:37:0c:92:67:b7:ba:1d:21:cd:f0:75:00:f0:e3:25: 99:4c:49:f9:1f:c2:a6:ec:f2:1c:bb:ec:9a:2b:34:5d:16:7a: 16:9c:55:1f:6e:12:8b:68:1e:e0:d9:cc:e0:1d:bd:b5:83:d9: 67:e8:2c:e2:73:11:e1:2b:99:30:01:d0:12:75:05:e8:af:1c: 4e:8f:44:c0:24:f1:3c:4a:57:bb:c7:61:a9:4e:21:3f:82:12: f6:2c:e1:28:35:35:8b:f6:7c:a2:13:70:5c:79:89:60:69:17: 98:61:de:eb:1c:84:24:e9:a7:36:01:4e:a0:1f:07:47:e8:8a: 3c:c3:c4:ef:b3:88:d5:6b:8a:f8:5b:c4:bf:21:02:2e:21:6c: 7a:4d:61:62:cb:d3:3b:31:6c:8a:80:8a:42:47:ef:c6:ef:04: 25:98:b9:42:c6:37:fc:10:44:18:b2:98:21:1c:24:23:33:1e: e0:b2:a4:26:6a:bb:2e:47:99:3f:c1:b6:85:16:8b:5e:a3:d2: fb:07:18:34:58:d7:3a:3d:77:7d:5a:47:91:7a:fe:d1:bf:d0: e2:38:05:d5:64:db:08:2f:ef:03:00:48:bd:d2:fc:24:99:30: a0:ed:ad:88:0c:89:75:cf:d7:d5:d6:c1:e9:c4:d5:dc:df:72: bc:e6:56:ad -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEma7N1JeXqQZJzd0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQyMjAwNDUzM1oXDTI3MDcyNjAwNDUzM1owLzEtMCsGA1UEAxMk ODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRiODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXzUO4hljsMBaozb1zf10OCoq0iWBP3jbWGJ 77YPxGAY6Ho5+OVr7QiTO2GO1muc+uUv9+lqNHQdrynAhCwMGpDeBSgfd7kWrgOu oVliugAWaaMMk3nGxC2RGjlyehhKifXFq7XijfzsTNZej2ceVQeJE2c0025/jQ0n 5iPaYMJVQMsef39ChfhkudBylKt+YlpNryUKLlSK5DPFkwoi1DDh6aZBnw0Bk0du OQp6Dtme/6aqEOCXEN4ZDF2QmtFS2pxwFeRbbkOJcmE596rvRqcGWhXTyOUH7qc+ WiYKxC/3N8R5sOA98X5V3OLQ9lJX0OjNDJjClUmwTRLNyFhihQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFAr0L2kg8arXbWc8hpoEyIAerX2ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg4ODQyODc4LTEwNTAtNGRmNy04 MjJiLWVhOGVjMjVkYjgzZC84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1 ZGI4M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCkcQMDAMb4MBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAgm/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAIkg+DcMkme3uh0hzfB1APDjJZlMSfkfwqbs8hy77Jor NF0WehacVR9uEotoHuDZzOAdvbWD2WfoLOJzEeErmTAB0BJ1BeivHE6PRMAk8TxK V7vHYalOIT+CEvYs4Sg1NYv2fKITcFx5iWBpF5hh3uschCTppzYBTqAfB0foijzD xO+ziNVrivhbxL8hAi4hbHpNYWLL0zsxbIqAikJH78bvBCWYuULGN/wQRBiymCEc JCMzHuCypCZquy5HmT/BtoUWi16j0vsHGDRY1zo9d31aR5F6/tG/0OI4BdVk2wgv 7wMASL3S/CSZMKDtrYgMiXXP19XWwenE1dzfcrzmVq0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:44 2025 by rpki-client