$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer File: a95fce7e-65c2-466f-ae34-eadb8c72156b.cer (raw, json) Hash identifier: uymiBL/EDzQv+LqeSMKoQN33C2SZbckXYmm8Uc/pLTs= Subject key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A9099173752B0E9CA981B3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Jul 2025 00:45:37 +0000 Certificate not after: Fri 22 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 87 AS: 10680 IP: 129.79.0.0/16 IP: 134.68.0.0/16 IP: 140.182.0.0/16 IP: 149.159.0.0 -- 149.163.255.255 IP: 149.165.0.0 -- 149.166.255.255 IP: 156.56.0.0/16 IP: 192.12.206.0/24 IP: 192.68.133.0/24 IP: 192.203.115.0 -- 192.203.116.255 IP: 198.49.177.0/24 IP: 198.49.214.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:99:17:37:52:b0:e9:ca:98:1b:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 19 00:45:37 2025 GMT Not After : Oct 22 00:45:37 2027 GMT Subject: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:98:a8:09:fa:64:5b:87:05:c8:d9:61:c8: 30:d8:9b:66:bf:14:b2:7c:00:3f:4a:51:46:8e:fb: ca:21:f5:62:4d:a1:22:e5:2e:c7:35:98:9e:14:2d: 3e:69:54:23:77:01:c7:1c:1c:70:1a:b2:a3:e7:39: 25:b6:db:66:82:bd:d5:8b:58:9b:3e:06:cf:a0:c5: 04:14:5a:fc:33:83:54:ad:c4:52:f8:e6:98:fa:8c: d6:a4:1d:58:ec:bb:5a:f1:8a:04:84:3b:9c:cc:f3: 21:c6:f9:7c:7a:b1:79:86:98:5f:fd:4d:98:f6:4b: 17:5a:db:da:0c:0d:5f:35:d0:58:31:31:da:71:35: 96:9d:53:cf:46:c3:46:fa:b1:a1:7e:a7:dd:d1:72: 50:56:11:6c:44:85:fe:3b:f5:e6:a7:79:92:5b:75: ff:e6:6e:c3:68:e8:a4:46:8a:37:b6:f0:c8:10:74: 12:0d:b9:5e:5c:18:ea:29:6e:f8:fd:a4:79:6e:b8: 0b:6a:17:d8:b3:89:32:8d:ab:4c:d6:b8:09:9e:68: 39:4e:e1:de:89:f3:fc:e9:dd:7c:bd:29:58:c2:b0: 64:04:b3:e2:b4:ee:7a:e9:c4:9e:29:24:99:68:33: 21:4a:89:2a:42:12:0e:7a:c8:f4:96:5b:89:b4:cf: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 129.79.0.0/16 134.68.0.0/16 140.182.0.0/16 149.159.0.0-149.163.255.255 149.165.0.0-149.166.255.255 156.56.0.0/16 192.12.206.0/24 192.68.133.0/24 192.203.115.0-192.203.116.255 198.49.177.0/24 198.49.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 87 10680 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5f:fc:da:37:67:4b:c1:cd:08:fc:15:33:46:6c:9a:04:d5: 26:61:db:de:e7:60:65:dc:be:38:d7:0d:73:72:c6:40:3c:f3: 8a:8f:70:da:b3:61:5a:f1:4e:a5:bc:61:ca:bc:eb:46:a8:7e: 0b:25:d9:03:91:51:de:ad:ee:ed:18:79:8e:5a:c1:01:45:64: 2f:aa:e0:40:cf:b1:a8:46:2b:0b:5d:06:9b:1c:94:95:7d:b7: 8a:7a:62:1b:53:d8:6a:14:33:55:0b:1d:a9:4c:80:05:9a:8f: 2d:af:db:a3:79:35:b3:a9:06:50:c8:71:f3:e9:7a:a3:ef:34: 7e:28:42:4d:e4:29:b1:22:4a:22:a4:f7:db:b0:3b:12:7e:ab: 7e:09:04:5f:92:27:b6:12:cb:82:03:07:1b:3a:5b:5f:5f:b3: c7:79:0c:b1:8c:43:a2:2e:0a:23:00:7c:3c:0a:20:be:67:ca: 44:ba:69:f0:c2:a3:5f:3b:95:fc:fe:b6:c3:72:32:20:3a:6f: ec:b3:54:3b:03:60:e6:c7:e3:5f:06:1b:6b:aa:29:a5:10:15: c1:a2:0e:84:72:2a:2c:e9:fd:4f:8d:9a:9f:d3:76:80:ec:83: 83:b9:3b:b8:54:cf:c9:09:42:66:6a:e3:f1:3e:cf:74:49:e4: 78:f7:c3:29 -----BEGIN CERTIFICATE----- MIIHVzCCBj+gAwIBAgIUAQ0Mn0MoWEqQmRc3UrDpypgbOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcxOTAwNDUzN1oXDTI3MTAyMjAwNDUzN1owLzEtMCsGA1UEAxMk YTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgiYqAn6ZFuHBcjZYcgw2JtmvxSyfAA/SlFG jvvKIfViTaEi5S7HNZieFC0+aVQjdwHHHBxwGrKj5zkltttmgr3Vi1ibPgbPoMUE FFr8M4NUrcRS+OaY+ozWpB1Y7Lta8YoEhDuczPMhxvl8erF5hphf/U2Y9ksXWtva DA1fNdBYMTHacTWWnVPPRsNG+rGhfqfd0XJQVhFsRIX+O/Xmp3mSW3X/5m7DaOik Roo3tvDIEHQSDbleXBjqKW74/aR5brgLahfYs4kyjatM1rgJnmg5TuHeifP86d18 vSlYwrBkBLPitO566cSeKSSZaDMhSokqQhIOesj0lluJtM8a5wIDAQABo4IEaTCC BGUwHQYDVR0OBBYEFF+MpuGED6L+vY3ag5iBId/L4GXOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h OTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E5NWZjZTdlLTY1YzItNDY2Zi1h ZTM0LWVhZGI4YzcyMTU2Yi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3 MjE1NmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwawYIKwYBBQUH AQcBAf8EXDBaMFgEAgABMFIDAwCBTwMDAIZEAwMAjLYwCgMDAJWfAwMClaAwCgMD AJWlAwMAlaYDAwCcOAMEAMAMzgMEAMBEhTAMAwQAwMtzAwQAwMt0AwQAxjGxAwQA xjHWMBwGCCsGAQUFBwEIAQH/BA0wC6AJMAcCAVcCAim4MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC1f/No3 Z0vBzQj8FTNGbJoE1SZh297nYGXcvjjXDXNyxkA884qPcNqzYVrxTqW8Ycq860ao fgsl2QORUd6t7u0YeY5awQFFZC+q4EDPsahGKwtdBpsclJV9t4p6YhtT2GoUM1UL HalMgAWajy2v26N5NbOpBlDIcfPpeqPvNH4oQk3kKbEiSiKk99uwOxJ+q34JBF+S J7YSy4IDBxs6W19fs8d5DLGMQ6IuCiMAfDwKIL5nykS6afDCo187lfz+tsNyMiA6 b+yzVDsDYObH418GG2uqKaUQFcGiDoRyKizp/U+Nmp/TdoDsg4O5O7hUz8kJQmZq 4/E+z3RJ5Hj3wyk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:56 2025 by rpki-client