$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer File: cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer (raw, json) Hash identifier: RR2NGcv/EQzwrbaH4X1gFrMatwL0KRro8Z91iv2Gv2s= Subject key identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849CD2D308D35E171DD5CC5B3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 May 2025 00:45:35 +0000 Certificate not after: Fri 13 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 19750 IP: 74.119.116.0/22 IP: 199.204.168.0/22 IP: 2607:d7c0::/32 IP: 2620:100:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:2d:30:8d:35:e1:71:dd:5c:c5:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 10 00:45:35 2025 GMT Not After : Aug 13 00:45:35 2027 GMT Subject: CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:d8:47:b6:93:21:9a:62:42:a9:73:bf:8b: 81:02:b3:32:01:d8:5e:d6:dd:de:39:35:07:21:63: be:a9:29:1d:ef:e4:4b:25:04:5d:a4:f5:4b:b6:3a: 94:f2:ab:f9:bc:6d:28:33:15:6e:f2:78:b0:63:60: f4:4e:64:3e:83:98:e2:6d:42:36:f3:5a:7b:fd:91: 4b:34:a6:02:e0:0b:42:98:48:95:47:d6:70:de:65: 9d:b9:78:84:d7:99:b7:33:d9:18:32:60:90:29:44: 60:6e:3a:51:0e:71:0b:33:a1:d5:68:d0:c0:9c:a2: fc:69:99:c7:56:c4:2b:e7:d9:77:c1:0b:d8:0f:8c: 9e:c0:95:e2:1b:7e:9a:b3:d1:81:4f:89:6c:69:c6: 42:cc:21:7a:35:3b:b7:df:f9:60:a7:b4:49:01:59: be:c7:64:ae:71:41:98:3e:0f:c1:92:fc:5f:ac:bf: dd:a5:ca:53:99:01:9a:c9:44:91:4b:e4:07:da:6e: 7b:a6:00:14:16:01:29:29:0c:56:41:90:f0:b7:d0: 2f:08:94:6d:c3:ca:cd:c5:88:86:9f:21:76:36:b9: 5e:4f:00:f6:21:9e:cf:f9:51:2c:12:e9:70:48:8f: d1:6a:dd:7e:95:5a:7c:01:12:dc:59:74:9f:51:27: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.119.116.0/22 199.204.168.0/22 IPv6: 2607:d7c0::/32 2620:100:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19750 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fb:1d:0f:fa:7d:6d:24:e4:a2:76:cb:43:3e:86:f6:67:5c: e1:60:f2:98:1e:21:8b:a4:7f:ef:7c:8e:f1:17:eb:7e:d8:e6: 58:2d:81:55:cb:b3:f4:50:23:e7:95:c6:c9:84:d0:0e:45:a7: 32:30:7a:6b:57:ed:25:58:31:f2:f2:4e:17:7c:ab:65:94:07: 44:12:0c:83:3c:37:c8:ea:ce:61:18:92:bf:01:80:0b:81:41: 16:a9:59:9e:d9:94:fa:e1:3d:06:b9:62:e3:1e:fa:50:c6:0a: fa:c1:05:f6:86:2e:74:2f:74:e1:d1:50:a1:b4:14:c2:8e:d7: 0f:87:99:ad:06:7f:19:8d:31:65:c2:92:c7:9c:2f:44:c9:dd: e1:55:3d:79:3a:2b:c2:5e:c6:e8:ea:a2:3a:86:74:05:cf:7d: 96:6f:15:79:da:55:c6:fd:f8:54:c7:67:0a:22:ca:fc:63:6d: 4a:6b:69:04:a0:59:36:16:fe:1d:1a:e0:75:1b:a1:dc:23:1c: 9b:f3:2e:55:04:17:49:4c:fe:7e:b8:cc:0e:24:a4:60:4d:17: 53:da:ec:f4:c1:fc:53:3c:f9:a6:69:9e:cc:68:ae:f9:28:75: 7a:00:38:a9:dc:46:4d:4b:5c:89:e2:a6:7d:a5:cd:14:01:a5: 47:60:fa:3f -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEnNLTCNNeFx3VzFs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUxMDAwNDUzNVoXDTI3MDgxMzAwNDUzNVowLzEtMCsGA1UEAxMk Y2VhMDZjOTAtNGNjZC00NDc0LWI0ZmEtODgyZWVkNGY0Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5unYR7aTIZpiQqlzv4uBArMyAdhe1t3eOTUH IWO+qSkd7+RLJQRdpPVLtjqU8qv5vG0oMxVu8niwY2D0TmQ+g5jibUI281p7/ZFL NKYC4AtCmEiVR9Zw3mWduXiE15m3M9kYMmCQKURgbjpRDnELM6HVaNDAnKL8aZnH VsQr59l3wQvYD4yewJXiG36as9GBT4lsacZCzCF6NTu33/lgp7RJAVm+x2SucUGY Pg/BkvxfrL/dpcpTmQGayUSRS+QH2m57pgAUFgEpKQxWQZDwt9AvCJRtw8rNxYiG nyF2NrleTwD2IZ7P+VEsEulwSI/Rat1+lVp8ARLcWXSfUSdUDwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFMCUdhtvDgDWO1gcV1xA05g3nv2iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZWEwNmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJlZWQ0ZjRjZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NlYTA2YzkwLTRjY2QtNDQ3NC1i NGZhLTg4MmVlZDRmNGNkNS9jZWEwNmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJlZWQ0 ZjRjZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBIEAgABMAwDBAJKd3QDBALHzKgwFgQCAAIwEAMFACYH18ADBwQm IAEAoAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTSYwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJvsdD/p9 bSTkonbLQz6G9mdc4WDymB4hi6R/73yO8RfrftjmWC2BVcuz9FAj55XGyYTQDkWn MjB6a1ftJVgx8vJOF3yrZZQHRBIMgzw3yOrOYRiSvwGAC4FBFqlZntmU+uE9Brli 4x76UMYK+sEF9oYudC904dFQobQUwo7XD4eZrQZ/GY0xZcKSx5wvRMnd4VU9eTor wl7G6OqiOoZ0Bc99lm8VedpVxv34VMdnCiLK/GNtSmtpBKBZNhb+HRrgdRuh3CMc m/MuVQQXSUz+frjMDiSkYE0XU9rs9MH8Uzz5pmmezGiu+Sh1egA4qdxGTUtcieKm faXNFAGlR2D6Pw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:12 2025 by rpki-client