$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer File: c487dbf3-3b16-4d19-9025-e64b6f47a247.cer (raw, json) Hash identifier: l5izGkySZP9NYsAP4AQUVisPVkLJxtlkw0QJYS4lVZI= Subject key identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B97054680573E647B4CB74580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 00:45:23 +0000 Certificate not after: Mon 24 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 807 AS: 942 AS: 25682 IP: 23.147.64.0/24 IP: 2620:39:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:05:46:80:57:3e:64:7b:4c:b7:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 21 00:45:23 2025 GMT Not After : Jan 24 01:45:23 2028 GMT Subject: CN=c487dbf3-3b16-4d19-9025-e64b6f47a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:67:f4:65:73:e7:05:ac:cf:2b:e7:1c:e2: c7:be:31:66:af:ef:41:88:6b:2d:83:ab:e8:0a:6b: 8f:6b:a8:28:24:d9:19:3d:7d:7a:f3:8c:c0:dc:2e: 7f:8e:a7:49:a8:7d:6b:ad:f1:91:af:0e:f1:5e:68: fd:23:0d:8c:2f:20:60:33:a4:39:7a:14:e0:94:1f: 6d:f4:1e:a1:c9:30:04:aa:ec:4b:79:eb:6a:cf:24: ef:4d:82:a0:fb:a7:26:a9:4e:76:f6:a5:2d:c6:fc: be:37:d2:5b:70:80:1a:69:2b:67:5d:b4:99:25:b9: dc:4a:c0:5e:36:f8:cd:76:a8:8a:ba:b9:71:54:54: 8b:b3:19:04:08:d4:61:b8:7d:9e:3f:42:71:ea:92: 4a:e6:89:61:ab:59:c2:31:73:0c:7c:c8:79:04:55: 3b:b4:19:82:15:9d:03:42:91:b5:12:d7:40:93:4d: 42:a2:01:28:04:ec:1d:09:4a:f9:b0:6e:94:38:c9: 52:f5:3c:1d:15:88:5b:f0:09:a7:ec:c1:7e:d7:c9: 1f:3d:0c:d9:ed:a4:cc:3a:03:36:4a:98:8d:1d:49: 85:49:ee:0f:0f:15:fd:37:61:1a:10:5e:b1:da:0e: d1:f1:f3:72:0c:dc:6a:d6:0e:f0:7d:69:53:8c:2a: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.64.0/24 IPv6: 2620:39:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 807 942 25682 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e5:b9:b7:6b:18:5e:e7:f6:55:02:8d:0d:93:04:11:8a:1d: 4e:22:66:8f:cc:4f:7d:34:ae:42:75:d2:21:ca:4e:29:d4:99: 05:58:6b:77:60:bc:73:97:af:40:0a:e1:21:52:1f:aa:ec:e8: 5b:e5:0b:50:e4:c3:3d:6f:aa:96:e4:a5:af:dd:d1:6e:bd:d7: ae:98:49:db:f2:17:70:58:97:74:06:3b:a1:34:1d:f0:cb:b3: 5f:7f:39:c9:6d:43:6d:b5:7b:a7:41:7a:ae:05:52:02:7d:66: f4:12:9d:55:a5:3b:00:cd:bf:1a:e3:4d:6a:8d:96:14:8d:35: 77:b9:81:eb:dd:ab:d3:66:19:9e:a9:c9:38:4c:3b:4c:2b:ef: de:38:f5:18:23:f8:28:27:12:1c:7c:60:7d:f8:43:b6:c8:6e: ed:23:9a:ff:1f:6d:0e:46:d5:62:9e:fb:87:15:1e:09:fc:e7: 30:58:1e:4d:6b:56:a8:d4:14:27:54:0d:8e:a8:4e:b9:20:57: 98:0b:49:40:9b:37:83:bb:dc:29:3a:d1:b2:a1:73:96:90:f5: 23:74:6f:af:0c:d5:37:81:b8:64:95:dc:6b:4b:7e:f8:61:a9: b1:cb:1a:be:c9:4b:83:9c:6b:06:c9:46:50:1c:b7:04:46:94: 4b:1f:fd:5f -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEuXBUaAVz5ke0y3RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyMTAwNDUyM1oXDTI4MDEyNDAxNDUyM1owLzEtMCsGA1UEAxMk YzQ4N2RiZjMtM2IxNi00ZDE5LTkwMjUtZTY0YjZmNDdhMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsihn9GVz5wWszyvnHOLHvjFmr+9BiGstg6vo CmuPa6goJNkZPX1684zA3C5/jqdJqH1rrfGRrw7xXmj9Iw2MLyBgM6Q5ehTglB9t 9B6hyTAEquxLeetqzyTvTYKg+6cmqU529qUtxvy+N9JbcIAaaStnXbSZJbncSsBe NvjNdqiKurlxVFSLsxkECNRhuH2eP0Jx6pJK5olhq1nCMXMMfMh5BFU7tBmCFZ0D QpG1EtdAk01CogEoBOwdCUr5sG6UOMlS9TwdFYhb8Amn7MF+18kfPQzZ7aTMOgM2 SpiNHUmFSe4PDxX9N2EaEF6x2g7R8fNyDNxq1g7wfWlTjCojLwIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFIUVmULDcrJ3/NKBbEZyw2Utt4FyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j NDg3ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRiNmY0N2EyNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2M0ODdkYmYzLTNiMTYtNGQxOS05 MDI1LWU2NGI2ZjQ3YTI0Ny9jNDg3ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRiNmY0 N2EyNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXk0AwDwQCAAIwCQMHACYgADlgADAhBggrBgEF BQcBCAEB/wQSMBCgDjAMAgIDJwICA64CAmRSMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABDlubdrGF7n9lUC jQ2TBBGKHU4iZo/MT300rkJ10iHKTinUmQVYa3dgvHOXr0AK4SFSH6rs6FvlC1Dk wz1vqpbkpa/d0W69166YSdvyF3BYl3QGO6E0HfDLs19/OcltQ221e6dBeq4FUgJ9 ZvQSnVWlOwDNvxrjTWqNlhSNNXe5gevdq9NmGZ6pyThMO0wr79449Rgj+CgnEhx8 YH34Q7bIbu0jmv8fbQ5G1WKe+4cVHgn85zBYHk1rVqjUFCdUDY6oTrkgV5gLSUCb N4O73Ck60bKhc5aQ9SN0b68M1TeBuGSV3GtLfvhhqbHLGr7JS4OcawbJRlActwRG lEsf/V8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:55 2025 by rpki-client