$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer File: ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer (raw, json) Hash identifier: 77NKLM4vNpBvCfCphBA+rHVN4JCqor8FDq7Ro+QRwCc= Subject key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AE45982DF0F3AE117FA841580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 00:45:25 +0000 Certificate not after: Sun 21 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 398797 IP: 199.255.148.0/22 IP: 2602:fd1e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:59:82:df:0f:3a:e1:17:fa:84:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 18 00:45:25 2025 GMT Not After : Nov 21 01:45:25 2027 GMT Subject: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:e6:b7:33:0c:70:b1:d6:4c:fe:76:37:14: 71:8c:d5:5b:88:43:db:44:7e:b8:33:d4:42:da:f9: 88:be:9a:7f:6c:2d:f6:2f:28:12:06:40:5d:d2:37: cf:02:7c:79:7e:9f:de:c7:b5:ec:34:f8:ae:2d:ef: ec:40:d8:ca:24:d2:97:d4:93:2b:0e:21:e7:ff:84: 48:cb:73:b2:99:8f:fe:63:ba:10:56:fa:70:54:75: 08:cc:76:e0:60:fa:78:4c:d0:12:a7:03:fe:08:ce: ea:56:14:72:45:85:35:59:4a:36:b3:67:5c:72:76: 0e:c1:85:f6:88:ec:81:61:2e:cd:dd:f2:d6:e0:c0: 51:72:97:91:1b:39:7e:f0:bc:e9:6f:2a:7b:70:ad: f3:5e:38:51:13:b7:be:0e:2c:92:a8:6f:bb:dc:7d: 44:45:e6:f7:60:79:84:ca:4e:d7:a2:db:de:7f:0f: 67:49:7c:39:77:58:92:bc:8d:90:80:24:d9:19:be: 3e:5c:83:4f:bd:16:73:d9:cb:d1:8a:d1:09:e1:5e: 1a:84:25:f4:5e:65:1f:60:b4:d7:0b:a8:7f:d1:03: d6:80:96:a8:97:d9:b4:d8:4f:ba:e0:7c:86:27:8d: 59:96:30:1d:04:0e:27:53:91:05:65:2e:c9:84:84: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.255.148.0/22 IPv6: 2602:fd1e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398797 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:27:e3:2d:f3:dc:9f:32:82:32:06:52:d4:71:9a:2b:37:4f: 1d:ae:e4:7f:88:4c:ef:8f:5a:0d:e3:77:9a:a1:40:c0:3e:e6: 19:86:6a:dc:03:68:76:0f:c0:68:b6:38:8f:b1:9e:52:11:34: 91:78:38:39:2c:be:5a:75:0b:c0:b7:35:cb:70:c4:fa:b3:d0: 5f:10:5b:d0:2b:0d:e0:d8:cb:c8:2b:ae:f9:48:3d:76:56:4d: a4:de:25:24:79:b8:da:88:fb:05:bf:04:e0:e5:36:6c:b4:79: dd:cc:23:66:4c:66:87:6f:b4:65:bf:43:a7:c5:a6:57:5e:d6: 87:8e:13:fc:86:c8:86:31:93:7c:4a:8b:01:69:29:52:03:ea: 29:8e:17:a1:34:05:8f:1f:fc:6a:c7:48:04:2e:9c:30:bf:7d: a5:07:1d:42:7b:9c:29:11:33:57:e6:4c:06:bf:31:77:35:0a: 88:38:f4:3b:04:da:7b:f4:52:1c:14:ea:0f:4e:82:75:9d:83: 33:07:a0:29:ad:0c:93:56:5c:68:f3:a9:64:22:e7:77:60:9f: de:36:5b:9b:b4:df:85:df:35:5d:0b:f5:8e:5c:dd:4d:27:ab: 87:7f:b0:87:64:73:81:42:cc:4c:ad:53:8d:4c:10:35:1b:ff: cd:ff:9a:ef -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErkWYLfDzrhF/qEFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxODAwNDUyNVoXDTI3MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk Y2NiNmE5OGEtMDlmNC00ZTI5LTk0MDYtYmMwY2IxNjYxZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3mtzMMcLHWTP52NxRxjNVbiEPbRH64M9RC 2vmIvpp/bC32LygSBkBd0jfPAnx5fp/ex7XsNPiuLe/sQNjKJNKX1JMrDiHn/4RI y3OymY/+Y7oQVvpwVHUIzHbgYPp4TNASpwP+CM7qVhRyRYU1WUo2s2dccnYOwYX2 iOyBYS7N3fLW4MBRcpeRGzl+8Lzpbyp7cK3zXjhRE7e+DiySqG+73H1EReb3YHmE yk7Xotvefw9nSXw5d1iSvI2QgCTZGb4+XINPvRZz2cvRitEJ4V4ahCX0XmUfYLTX C6h/0QPWgJaol9m02E+64HyGJ41ZljAdBA4nU5EFZS7JhISoWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFjbi4rX0r9x2MIHXBKdhE7bkG3OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j Y2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2NjFkZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NjYjZhOThhLTA5ZjQtNGUyOS05 NDA2LWJjMGNiMTY2MWRmYy9jY2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2 NjFkZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALH/5QwDgQCAAIwCAMGBCYC/R4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYVzTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnJ+Mt89yfMoIyBlLUcZorN08d ruR/iEzvj1oN43eaoUDAPuYZhmrcA2h2D8BotjiPsZ5SETSReDg5LL5adQvAtzXL cMT6s9BfEFvQKw3g2MvIK675SD12Vk2k3iUkebjaiPsFvwTg5TZstHndzCNmTGaH b7Rlv0OnxaZXXtaHjhP8hsiGMZN8SosBaSlSA+opjhehNAWPH/xqx0gELpwwv32l Bx1Ce5wpETNX5kwGvzF3NQqIOPQ7BNp79FIcFOoPToJ1nYMzB6AprQyTVlxo86lk Iud3YJ/eNlubtN+F3zVdC/WOXN1NJ6uHf7CHZHOBQsxMrVONTBA1G//N/5rv -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:18 2025 by rpki-client