$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer File: cef8d320-c2b4-4718-be9c-ec3f801c0818.cer (raw, json) Hash identifier: h7GN4N9DGlehRZNmWsxJpUpd0YywLG9l4zkMRRdLn9Y= Subject key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B6EE5265998BE7E39CC2C4D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 15:48:20 +0000 Certificate not after: Mon 23 Aug 2027 00:45:38 +0000 Subordinate resources: AS: 63452 IP: 66.187.244.0/22 IP: 173.243.238.0/23 IP: 192.171.18.0/23 IP: 192.189.171.0/24 IP: 2602:ff50::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:e5:26:59:98:be:7e:39:cc:2c:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 6 15:48:20 2025 GMT Not After : Aug 23 00:45:38 2027 GMT Subject: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:8e:83:93:91:a4:bc:89:fc:7f:3b:69:7b: 0c:62:f2:e7:27:d4:5e:a7:99:e8:4e:72:cf:77:7e: 85:1f:2c:d7:29:32:cf:41:d5:28:8e:5f:e5:0c:a4: 0b:27:a7:19:4e:b5:22:90:32:b3:84:f0:c9:18:ec: d9:e1:d3:42:16:65:3c:cb:b2:63:a3:06:cb:b0:82: 5d:69:68:76:86:59:53:c8:9c:25:ae:f0:d6:60:10: 60:0b:44:a5:34:b3:fe:7a:74:63:00:95:03:b1:df: 2a:11:cd:2c:e8:fc:05:ce:31:e0:4f:bc:51:e8:5c: 50:60:e3:e3:c9:9b:14:a9:32:bb:ee:48:02:a8:f2: f7:d2:50:b7:70:1f:d5:04:41:89:eb:53:4f:e0:91: aa:27:fd:83:8f:f3:f8:dc:b6:a3:6b:96:85:55:f4: 26:8f:f7:7c:b4:d4:a6:db:ff:e9:54:46:0f:54:3a: 4c:66:33:32:43:ed:5e:15:b5:ac:94:c6:b6:a5:7d: de:bb:3d:57:4c:58:0f:48:47:b9:51:0b:8c:c2:7b: 32:a1:b9:eb:32:97:44:8f:3e:40:5f:4a:ed:f8:05: ab:eb:ad:27:9d:a8:13:d1:1e:8d:ae:ab:f0:87:a6: aa:0a:67:cc:d5:0c:89:5c:09:ba:f6:9e:eb:fc:0e: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.187.244.0/22 173.243.238.0/23 192.171.18.0/23 192.189.171.0/24 IPv6: 2602:ff50::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3d:21:4c:73:df:2e:c7:71:ac:14:1f:cd:4a:6e:7c:e7:d3: 64:2e:1e:4e:24:a5:d0:c7:dd:f2:da:01:82:5a:00:8f:e2:ba: 7c:e5:14:f6:14:58:3d:a2:fa:70:69:66:34:8f:84:5f:e7:d8: 09:97:84:2a:bc:72:67:85:a8:f3:b2:c9:b0:8a:40:1c:13:42: 3d:7f:b8:8c:69:62:db:f1:81:57:38:b2:18:0b:55:fa:fa:af: 4d:33:01:7e:24:1b:40:26:59:ac:66:51:3b:fe:48:77:60:7e: 7b:18:4a:f8:22:b3:6b:83:ed:65:eb:19:b3:68:17:ac:b3:4e: 5b:a9:21:bd:3b:be:b0:74:74:d6:db:11:58:5c:ff:0d:e5:64: d8:76:ef:83:44:bd:6d:da:2c:c1:63:e8:f8:4a:ab:8d:be:2d: 96:5c:cc:2d:d1:31:aa:22:93:60:a4:f5:e6:7f:07:fa:37:92: 79:d7:00:5b:41:29:a3:da:b8:68:2f:73:32:91:d0:b9:8a:bf: b4:d4:0b:3f:a2:a5:b4:d7:7f:a0:a2:a0:1d:36:a3:ec:8f:fe: 0f:b7:78:d9:2e:51:a6:e6:0c:68:00:a8:c8:b4:0c:e0:94:10: 36:b3:7c:ad:b5:42:5c:d9:bc:12:79:cc:d6:00:7d:72:25:72: ba:6e:7c:ff -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEtu5SZZmL5+OcwsTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAwNjE1NDgyMFoXDTI3MDgyMzAwNDUzOFowLzEtMCsGA1UEAxMk Y2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMwODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayOg5ORpLyJ/H87aXsMYvLnJ9Rep5noTnLP d36FHyzXKTLPQdUojl/lDKQLJ6cZTrUikDKzhPDJGOzZ4dNCFmU8y7JjowbLsIJd aWh2hllTyJwlrvDWYBBgC0SlNLP+enRjAJUDsd8qEc0s6PwFzjHgT7xR6FxQYOPj yZsUqTK77kgCqPL30lC3cB/VBEGJ61NP4JGqJ/2Dj/P43Laja5aFVfQmj/d8tNSm 2//pVEYPVDpMZjMyQ+1eFbWslMa2pX3euz1XTFgPSEe5UQuMwnsyobnrMpdEjz5A X0rt+AWr660nnagT0R6Nrqvwh6aqCmfM1QyJXAm69p7r/A71rwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFE4l24axLxKmGdSkAdVf8pKWUkPnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NlZjhkMzIwLWMyYjQtNDcxOC1i ZTljLWVjM2Y4MDFjMDgxOC9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAx YzA4MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAJCu/QDBAGt8+4DBAHAqxIDBADAvaswDgQCAAIw CAMGBCYC/1AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD33DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo PSFMc98ux3GsFB/NSm5859NkLh5OJKXQx93y2gGCWgCP4rp85RT2FFg9ovpwaWY0 j4Rf59gJl4QqvHJnhajzssmwikAcE0I9f7iMaWLb8YFXOLIYC1X6+q9NMwF+JBtA JlmsZlE7/kh3YH57GEr4IrNrg+1l6xmzaBess05bqSG9O76wdHTW2xFYXP8N5WTY du+DRL1t2izBY+j4SquNvi2WXMwt0TGqIpNgpPXmfwf6N5J51wBbQSmj2rhoL3My kdC5ir+01As/oqW013+goqAdNqPsj/4Pt3jZLlGm5gxoAKjItAzglBA2s3yttUJc 2bwSeczWAH1yJXK6bnz/ -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:25 2025 by rpki-client