$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413.cer File: cff891b4-da78-48f4-a781-5d562c139413.cer (raw, json) Hash identifier: f/NOaZtkqbiM/8ahTsn5xK0Y705kckv+v2sLe+SqPyk= Subject key identifier: 32:E8:C1:E8:90:08:A2:6C:54:74:60:E2:93:F3:9D:5D:C7:6F:79:6A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BBD9AC4D0A1B37876BADCBB70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/cff891b4-da78-48f4-a781-5d562c139413.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 20:27:19 +0000 Certificate not after: Sat 26 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 395148 IP: 192.243.64.0/21 IP: 208.81.56.0/24 IP: 2607:b280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:9a:c4:d0:a1:b3:78:76:ba:dc:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 3 20:27:19 2025 GMT Not After : Jun 26 00:45:33 2027 GMT Subject: CN=cff891b4-da78-48f4-a781-5d562c139413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:d2:a4:30:93:d4:93:0c:a3:76:60:3a:d5: d1:09:7a:f8:1b:d5:51:89:6e:71:1d:bb:bc:cc:d7: c6:67:ed:01:a9:e0:91:fe:a7:3b:f7:a1:da:fd:87: 48:20:8c:35:d7:de:39:47:19:b6:c7:b9:1c:45:b4: f3:68:c4:2c:01:88:a5:4b:61:4c:47:5f:3b:95:92: f8:1f:34:11:dc:bf:ea:94:25:21:66:dd:f2:e3:cc: a2:de:a2:25:fc:8b:df:cb:58:31:61:f0:2c:ab:48: 84:c2:7d:64:eb:dc:e3:b2:3e:31:23:68:67:b4:00: 42:80:4a:a9:99:bc:0a:78:4e:c2:43:59:1a:13:5d: cb:ba:7f:6e:68:e2:8a:6e:fc:cd:c5:91:7a:71:bd: a5:e1:c5:56:9d:51:f8:cf:bf:9d:8a:c0:67:a9:29: 47:90:37:a0:8d:df:63:dc:b5:96:7b:d4:19:f5:38: 15:15:88:4f:60:52:c2:8b:77:61:f6:c4:f8:7e:17: 78:99:b7:72:e5:9d:04:8b:56:57:0d:25:c6:d2:52: ff:e7:38:e6:4e:61:36:22:56:85:1d:16:58:e4:c4: a8:a4:7e:36:ed:8d:ea:90:46:11:9d:92:de:03:02: fc:e9:ca:00:75:c2:95:99:f0:7c:31:23:10:9c:e5: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:C1:E8:90:08:A2:6C:54:74:60:E2:93:F3:9D:5D:C7:6F:79:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/cff891b4-da78-48f4-a781-5d562c139413.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.243.64.0/21 208.81.56.0/24 IPv6: 2607:b280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395148 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:66:4e:05:67:f6:f6:63:17:65:b8:7c:73:7d:42:f2:9c:f4: bd:3a:54:c0:b2:a2:95:f1:61:62:5b:b4:25:b9:13:a0:3c:86: 1b:5a:34:b9:07:5a:72:da:3a:27:da:f1:55:03:6d:12:f7:71: 9e:07:2e:67:ef:f9:bf:9c:08:1f:b2:a7:55:6b:a5:8e:6c:86: b2:f4:9f:27:52:0b:b3:99:ab:4d:e0:8a:0e:a7:c5:5f:95:e5: 9f:64:4f:ec:68:b2:43:0d:5a:fc:20:dc:b3:b6:51:fc:d1:83: 28:a8:3c:ff:03:de:42:f1:df:83:34:5d:cd:4f:15:b2:81:72: 82:6d:34:3a:9b:d1:9a:7b:8d:02:bc:2c:f8:03:60:f2:ed:94: 75:49:4e:35:3c:36:45:e3:3d:1e:4e:d5:aa:1f:dc:cf:e2:50: cd:b3:7c:4a:b1:9a:2a:10:16:8a:91:22:46:a7:b9:be:be:51: 93:46:80:14:25:65:94:7a:cb:b7:7d:2e:8e:5d:9e:ed:bc:57: c0:5c:5c:cf:a6:40:59:d5:e8:4e:59:1b:08:ca:49:7c:0a:5b: e4:ae:60:50:fe:6c:08:28:09:8f:ae:6a:38:b7:ef:0d:79:6f: bd:d8:ff:6e:f7:94:4b:fb:5c:6f:c3:01:e1:38:f8:ea:c8:a2: 3a:84:50:1b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEu9msTQobN4drrcu3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEwMzIwMjcxOVoXDTI3MDYyNjAwNDUzM1owLzEtMCsGA1UEAxMk Y2ZmODkxYjQtZGE3OC00OGY0LWE3ODEtNWQ1NjJjMTM5NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfSpDCT1JMMo3ZgOtXRCXr4G9VRiW5xHbu8 zNfGZ+0BqeCR/qc796Ha/YdIIIw11945Rxm2x7kcRbTzaMQsAYilS2FMR187lZL4 HzQR3L/qlCUhZt3y48yi3qIl/Ivfy1gxYfAsq0iEwn1k69zjsj4xI2hntABCgEqp mbwKeE7CQ1kaE13Lun9uaOKKbvzNxZF6cb2l4cVWnVH4z7+disBnqSlHkDegjd9j 3LWWe9QZ9TgVFYhPYFLCi3dh9sT4fhd4mbdy5Z0Ei1ZXDSXG0lL/5zjmTmE2IlaF HRZY5MSopH427Y3qkEYRnZLeAwL86coAdcKVmfB8MSMQnOVBXQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDLoweiQCKJsVHRg4pPznV3Hb3lqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZmY4OTFiNC1kYTc4LTQ4ZjQtYTc4MS01ZDU2MmMxMzk0MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmZjg5MWI0LWRhNzgtNDhmNC1h NzgxLTVkNTYyYzEzOTQxMy9jZmY4OTFiNC1kYTc4LTQ4ZjQtYTc4MS01ZDU2MmMx Mzk0MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPA80ADBADQUTgwDQQCAAIwBwMFACYHsoAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgeMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJtmTgVn9vZjF2W4fHN9 QvKc9L06VMCyopXxYWJbtCW5E6A8hhtaNLkHWnLaOifa8VUDbRL3cZ4HLmfv+b+c CB+yp1VrpY5shrL0nydSC7OZq03gig6nxV+V5Z9kT+xoskMNWvwg3LO2UfzRgyio PP8D3kLx34M0Xc1PFbKBcoJtNDqb0Zp7jQK8LPgDYPLtlHVJTjU8NkXjPR5O1aof 3M/iUM2zfEqxmioQFoqRIkanub6+UZNGgBQlZZR6y7d9Lo5dnu28V8BcXM+mQFnV 6E5ZGwjKSXwKW+SuYFD+bAgoCY+uaji37w15b73Y/273lEv7XG/DAeE4+OrIojqE UBs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:27 2025 by rpki-client