$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer File: cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer (raw, json) Hash identifier: oMeI3+thRW56FkHmQbY+xzwHwgXQP+hC9I3Aj3a7/l4= Subject key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B05D9B8ACD5A2B8D68A302D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 Aug 2025 00:45:25 +0000 Certificate not after: Fri 03 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 35960 IP: 192.5.3.0/24 IP: 198.245.187.0 -- 198.245.189.255 IP: 2620:a1:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:d9:b8:ac:d5:a2:b8:d6:8a:30:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 30 00:45:25 2025 GMT Not After : Dec 3 01:45:25 2027 GMT Subject: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:50:69:03:a2:f1:ea:c8:1e:cd:ab:26:16: 91:65:c1:0b:50:f8:63:02:9e:98:f6:d5:6b:f2:2c: 45:bf:ec:45:b8:cb:94:e0:59:c2:5f:b4:68:8e:0f: 36:45:6c:b4:05:29:01:93:64:91:e1:20:ec:b5:06: fd:3e:61:28:a2:61:65:4c:f0:f9:98:7d:0f:46:dd: 5e:f2:5b:43:3e:65:21:b7:05:05:2e:3e:07:b5:3e: 24:a2:af:8c:f7:bd:29:b9:ca:f0:91:83:2f:94:83: a5:21:ff:4e:95:8f:89:8b:0c:f8:cf:47:78:49:11: b6:4f:e2:07:8b:4c:77:be:e7:20:6f:51:d2:bd:24: ab:f1:78:29:7f:7f:00:3e:87:65:f6:59:5d:45:8c: 7a:6a:62:bc:bf:ff:51:c4:ec:de:b2:4b:78:81:6c: df:25:aa:22:3c:fc:fe:dd:49:00:27:b0:5d:ac:25: 27:e0:18:5b:17:36:54:fc:fe:b6:d6:ee:c0:08:64: 15:0d:28:3b:28:56:18:97:a7:17:03:8d:2a:33:e5: e9:74:fa:7c:8b:f1:8a:11:bb:3d:e0:b1:4e:e5:f2: 96:a1:c7:c9:64:a4:73:ce:a3:61:8f:b4:bd:8d:df: f8:4a:08:8b:35:05:19:46:f2:3b:b0:5c:74:21:79: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.5.3.0/24 198.245.187.0-198.245.189.255 IPv6: 2620:a1:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d5:36:7f:b0:f9:f8:73:1d:2e:b6:9e:4a:f8:fa:9a:6b:ea: 59:de:43:b3:88:23:07:26:42:68:2d:47:1a:b2:6b:ac:40:84: 2a:f7:f4:3d:00:95:54:f0:79:50:dd:08:82:07:f5:04:8c:fb: ed:9c:75:76:a0:1b:60:bc:24:4f:ee:c5:8a:92:38:20:39:01: 3b:6a:6c:9b:0f:72:2d:c6:55:21:9f:07:c9:db:a9:6e:61:f3: a7:9c:1d:56:9e:6b:b6:0c:f2:5e:9a:b2:12:ab:a4:51:d5:0f: b6:0c:1a:71:31:05:71:72:0a:bc:cc:06:a7:c7:a3:b9:b9:23: 8b:52:5a:e5:2b:ac:36:d0:96:5d:c7:7d:2b:da:64:58:79:19: 95:44:d5:01:31:14:a6:dd:7c:38:c5:df:9b:35:f8:ef:71:c5: b8:a6:f1:aa:1a:39:a9:b8:80:bd:07:fe:af:b9:64:ba:eb:3e: bf:ed:00:98:e1:33:9c:fa:6c:b1:b6:95:3e:8b:01:b5:1d:de: 81:2c:2b:36:43:85:21:5c:c2:79:48:3d:9f:fe:f7:2f:fa:25: 84:43:41:7c:89:f6:08:41:43:56:e1:56:d9:f1:0b:fb:36:ee: 7b:8c:c9:f9:66:39:9f:5d:59:0c:a0:73:e0:fd:10:59:b8:80: 6e:71:e8:43 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEsF2bis1aK41oowLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgzMDAwNDUyNVoXDTI3MTIwMzAxNDUyNVowLzEtMCsGA1UEAxMk Y2ZkZDQwZWItNGMxYS00YmE1LTg0NDYtNjc2ZjgzMjU4YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvZQaQOi8erIHs2rJhaRZcELUPhjAp6Y9tVr 8ixFv+xFuMuU4FnCX7Rojg82RWy0BSkBk2SR4SDstQb9PmEoomFlTPD5mH0PRt1e 8ltDPmUhtwUFLj4HtT4koq+M970pucrwkYMvlIOlIf9OlY+Jiwz4z0d4SRG2T+IH i0x3vucgb1HSvSSr8Xgpf38APodl9lldRYx6amK8v/9RxOzeskt4gWzfJaoiPPz+ 3UkAJ7BdrCUn4BhbFzZU/P621u7ACGQVDSg7KFYYl6cXA40qM+XpdPp8i/GKEbs9 4LFO5fKWocfJZKRzzqNhj7S9jd/4SgiLNQUZRvI7sFx0IXn0hQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFG1VAl8oDnPIvVI6u+n2DuZoIl5/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMyNThhNjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmZGQ0MGViLTRjMWEtNGJhNS04 NDQ2LTY3NmY4MzI1OGE2Ny9jZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMy NThhNjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBoEAgABMBQDBADABQMwDAMEAMb1uwMEAcb1vDAPBAIAAjAJAwcA JiAAocAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCMeDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf1TZ/ sPn4cx0utp5K+Pqaa+pZ3kOziCMHJkJoLUcasmusQIQq9/Q9AJVU8HlQ3QiCB/UE jPvtnHV2oBtgvCRP7sWKkjggOQE7amybD3ItxlUhnwfJ26luYfOnnB1Wnmu2DPJe mrISq6RR1Q+2DBpxMQVxcgq8zAanx6O5uSOLUlrlK6w20JZdx30r2mRYeRmVRNUB MRSm3Xw4xd+bNfjvccW4pvGqGjmpuIC9B/6vuWS66z6/7QCY4TOc+myxtpU+iwG1 Hd6BLCs2Q4UhXMJ5SD2f/vcv+iWEQ0F8ifYIQUNW4VbZ8Qv7Nu57jMn5ZjmfXVkM oHPg/RBZuIBucehD -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:02 2025 by rpki-client