$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer File: d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer (raw, json) Hash identifier: UtMRmSBH1M3t7sOuLnOuCxhJaGl4nE9plNcVFNYFUYw= Subject key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848B8E93C42488D0DC6912D2E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jan 2025 01:45:33 +0000 Certificate not after: Thu 06 May 2027 00:45:33 +0000 Subordinate resources: AS: 25887 IP: 65.254.96.0/19 IP: 2606:fd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:e9:3c:42:48:8d:0d:c6:91:2d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 31 01:45:33 2025 GMT Not After : May 6 00:45:33 2027 GMT Subject: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:77:ef:b1:d6:34:ec:70:a6:cb:1b:6f:6b: cd:ae:b6:4a:d2:c8:dc:04:6b:a3:69:53:25:bc:6e: 78:bf:ac:77:3d:c7:a6:30:9a:d6:b0:bc:72:dc:2b: 49:1a:1c:47:fa:82:40:08:45:3b:18:89:35:14:6d: 88:95:f1:0c:4a:10:43:d9:16:ee:77:aa:9d:58:a3: 40:84:ef:10:b9:0a:9d:f2:8d:5f:9f:c8:7e:06:83: 52:28:3b:85:58:07:af:25:90:47:7e:a1:3d:f7:a3: f6:30:78:72:d2:07:71:22:d0:6e:b4:84:4f:81:48: e0:e6:4a:2b:d5:ea:d2:2e:b0:c2:51:71:0a:52:a6: 04:fa:91:59:20:38:8f:bb:39:37:f9:af:83:1a:26: 2f:ff:4c:4d:fd:27:0a:e3:31:ba:b8:51:09:3a:99: 68:59:2d:e4:d1:65:98:25:0c:e4:75:66:69:11:7d: ba:f5:17:2b:db:01:84:f4:ef:c4:82:27:ca:77:53: d9:68:9a:76:59:68:96:ef:c6:1d:c5:33:d4:1b:8f: 9d:56:66:be:70:9c:2d:8e:1d:42:16:16:af:bf:a4: 51:b8:a7:d1:1a:ec:74:69:05:dd:b0:83:8e:cd:86: fb:9a:9c:2f:14:97:a0:f2:7b:57:d3:b4:b1:15:3f: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 65.254.96.0/19 IPv6: 2606:fd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4f:60:76:1a:82:b1:83:e2:3d:b9:ea:06:c3:d7:7e:62:15: f4:a4:7a:71:a5:b7:6f:cd:c6:bd:0b:a8:48:04:d0:4e:86:d8: 6b:98:5c:48:72:42:9c:ae:06:71:6e:42:c2:87:d4:66:aa:04: b5:f3:3f:7e:7f:e1:57:b7:84:87:90:c6:9a:fb:ad:c5:73:45: 9b:15:d5:39:f2:6e:aa:1a:0e:72:34:f1:23:a0:96:2c:c4:5f: d6:1a:dc:7c:9f:cc:ba:6b:a2:13:d7:c8:09:b8:e3:e8:2c:b0: b3:c4:61:0b:0b:dc:00:43:4f:b3:1b:ea:6a:b3:a6:b9:be:cb: a6:fe:f8:ba:da:f3:49:41:83:d0:b7:2d:72:53:9a:b3:2f:fa: 92:23:98:76:b1:09:2a:f4:f8:26:1f:ab:37:49:e6:ac:23:14: 69:24:7d:9b:84:46:3b:8e:e2:dd:63:96:71:a6:c0:5b:71:59: 1b:4f:91:c5:79:eb:f9:a7:4f:05:fd:0f:6a:7a:f3:f5:65:80: 71:89:dd:9c:ec:7a:fb:25:3e:a5:c1:61:49:71:72:cf:ae:c7: 9a:d9:f2:2d:59:4b:78:8d:09:63:ca:83:9b:53:1f:36:af:fd: a4:74:db:b6:f4:74:85:5b:c1:bc:4a:c0:53:d6:dc:e1:e7:12: 97:d2:d6:82 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEi46TxCSI0NxpEtLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEzMTAxNDUzM1oXDTI3MDUwNjAwNDUzM1owLzEtMCsGA1UEAxMk ZDIyOTRlNjUtNGRhMS00YzA3LTliYzAtODIwY2RiMWUyYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxp377HWNOxwpssbb2vNrrZK0sjcBGujaVMl vG54v6x3PcemMJrWsLxy3CtJGhxH+oJACEU7GIk1FG2IlfEMShBD2Rbud6qdWKNA hO8QuQqd8o1fn8h+BoNSKDuFWAevJZBHfqE996P2MHhy0gdxItButIRPgUjg5kor 1erSLrDCUXEKUqYE+pFZIDiPuzk3+a+DGiYv/0xN/ScK4zG6uFEJOploWS3k0WWY JQzkdWZpEX269Rcr2wGE9O/EgifKd1PZaJp2WWiW78YdxTPUG4+dVma+cJwtjh1C Fhavv6RRuKfRGux0aQXdsIOOzYb7mpwvFJeg8ntX07SxFT8AjQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFKL6JpNu4tHw1k9EcZNmMw3zJ6H1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k MjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIxZTJjNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2QyMjk0ZTY1LTRkYTEtNGMwNy05 YmMwLTgyMGNkYjFlMmM0OC9kMjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIx ZTJjNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVB/mAwDQQCAAIwBwMFACYG/YAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZR8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApU9gdhqCsYPiPbnqBsPXfmIV9KR6 caW3b83GvQuoSATQTobYa5hcSHJCnK4GcW5CwofUZqoEtfM/fn/hV7eEh5DGmvut xXNFmxXVOfJuqhoOcjTxI6CWLMRf1hrcfJ/MumuiE9fICbjj6Cyws8RhCwvcAENP sxvqarOmub7Lpv74utrzSUGD0LctclOasy/6kiOYdrEJKvT4Jh+rN0nmrCMUaSR9 m4RGO47i3WOWcabAW3FZG0+RxXnr+adPBf0Panrz9WWAcYndnOx6+yU+pcFhSXFy z67HmtnyLVlLeI0JY8qDm1MfNq/9pHTbtvR0hVvBvErAU9bc4ecSl9LWgg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:43 2025 by rpki-client