$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer File: e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer (raw, json) Hash identifier: 4AAeMasG8kWUEOWnvIibgFDbuFw40NDnRHxhp5Ym0fY= Subject key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B8EA539D43F4C5E66D907C3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 00:45:23 +0000 Certificate not after: Fri 21 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 17216 AS: 63292 IP: 67.212.0.0/20 IP: 142.147.79.0/24 IP: 162.254.28.0/22 IP: 192.151.136.0/21 IP: 198.24.12.0/22 IP: 199.47.224.0/21 IP: 2604:9980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:a5:39:d4:3f:4c:5e:66:d9:07:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 18 00:45:23 2025 GMT Not After : Jan 21 01:45:23 2028 GMT Subject: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:44:8c:d7:14:7c:14:ce:2f:0e:1b:d7:0c: 82:ef:85:a1:ea:b2:fa:73:2a:9d:7e:cc:c3:70:9a: d5:5e:a1:0e:2f:5f:25:1b:4f:35:07:57:d1:5d:c0: 8d:77:24:97:92:2f:80:fa:22:62:8c:09:dd:bc:b3: d4:fd:2d:57:92:61:c0:c4:d7:35:f8:6e:69:35:09: ec:0d:96:b2:f5:05:6e:be:af:77:bf:fe:e9:46:a5: 11:f7:93:7e:1c:7b:00:73:a3:7f:76:db:79:c2:85: 66:bf:49:43:2b:ed:79:34:09:91:7a:f5:36:4d:5f: fd:0c:2e:25:80:67:26:33:b4:e9:d5:c7:c5:de:ec: d7:92:d6:7c:8a:e4:2a:60:ce:7f:df:81:ba:0f:38: ff:4a:20:28:96:3d:7d:df:8b:45:cc:30:23:0b:0b: 92:bc:c8:7e:cd:18:63:71:26:37:68:4e:63:ab:c3: 7d:24:08:7b:89:e8:0c:19:1d:e8:c3:2b:05:6e:ea: c5:2e:83:27:20:a7:28:76:98:11:e6:c3:1e:b0:a0: 24:91:d6:7c:e2:9f:3f:6a:c1:15:fc:01:7c:d0:60: 47:11:2c:86:0c:ad:7c:d0:3f:c2:12:8a:14:6f:d9: 53:98:f9:cc:c0:de:a0:40:a2:48:55:d5:b9:ec:2d: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 67.212.0.0/20 142.147.79.0/24 162.254.28.0/22 192.151.136.0/21 198.24.12.0/22 199.47.224.0/21 IPv6: 2604:9980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17216 63292 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:82:a8:e6:26:86:a2:38:81:6e:c2:63:28:9d:06:98:0e:5d: d6:45:e9:60:ef:c2:54:5c:96:9c:cf:f0:c3:98:18:db:3a:68: 60:06:a3:ff:51:60:de:69:02:fb:b1:0c:a6:4e:02:79:a3:10: 67:db:8d:31:a2:7b:57:7f:ae:12:05:00:47:3e:fc:4e:6a:64: d7:91:01:93:d7:5c:20:1f:ec:aa:1a:9e:89:7a:f1:dc:f4:5c: 9f:0f:3c:f3:92:24:e0:ec:59:0b:b9:42:06:b4:fd:15:28:0c: b7:b3:c0:49:0d:1f:5e:b2:ff:66:0f:91:a0:f4:e0:05:12:72: b7:e7:94:be:6e:7a:db:a0:33:33:07:7d:5d:8e:87:ba:e0:cc: c9:bf:26:fc:72:21:cc:d5:b3:80:83:60:10:75:bd:e1:c2:f7: 08:6a:9a:75:cc:a2:77:a8:d6:c4:cb:b7:34:2f:86:51:85:0c: ad:ac:30:9a:56:c2:56:29:22:a8:06:16:31:45:e4:53:41:1e: 04:9f:72:3a:73:96:0b:3e:32:28:9e:c6:63:c4:5e:ed:75:89: 52:b2:54:5c:c4:df:b4:5e:f8:9c:bc:9b:8a:19:2f:71:7a:5f: 43:f5:33:84:02:15:d3:e1:43:bf:12:c9:5f:14:b1:f7:5a:ac: 1f:c2:ef:d5 -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEuOpTnUP0xeZtkHw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAxODAwNDUyM1oXDTI4MDEyMTAxNDUyM1owLzEtMCsGA1UEAxMk ZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb5EjNcUfBTOLw4b1wyC74Wh6rL6cyqdfszD cJrVXqEOL18lG081B1fRXcCNdySXki+A+iJijAndvLPU/S1XkmHAxNc1+G5pNQns DZay9QVuvq93v/7pRqUR95N+HHsAc6N/dtt5woVmv0lDK+15NAmRevU2TV/9DC4l gGcmM7Tp1cfF3uzXktZ8iuQqYM5/34G6Dzj/SiAolj1934tFzDAjCwuSvMh+zRhj cSY3aE5jq8N9JAh7iegMGR3owysFburFLoMnIKcodpgR5sMesKAkkdZ84p8/asEV /AF80GBHESyGDK180D/CEooUb9lTmPnMwN6gQKJIVdW57C3qiQIDAQABo4IETDCC BEgwHQYDVR0OBBYEFELOwmZ1HvOB8CU1gUCDsATXaOuZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l N2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U3YmI5Nzc1LTk2MzEtNGJlNC1h OWM2LTExYjhkZGZlNjI0Ny9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRm ZTYyNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARD1AADBACOk08DBAKi/hwDBAPAl4gDBALGGAwD BAPHL+AwDQQCAAIwBwMFACYEmYAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICQ0AC AwD3PDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAggqjmJoaiOIFuwmMonQaYDl3WRelg78JUXJacz/DDmBjb OmhgBqP/UWDeaQL7sQymTgJ5oxBn240xontXf64SBQBHPvxOamTXkQGT11wgH+yq Gp6JevHc9FyfDzzzkiTg7FkLuUIGtP0VKAy3s8BJDR9esv9mD5Gg9OAFEnK355S+ bnrboDMzB31djoe64MzJvyb8ciHM1bOAg2AQdb3hwvcIapp1zKJ3qNbEy7c0L4ZR hQytrDCaVsJWKSKoBhYxReRTQR4En3I6c5YLPjIonsZjxF7tdYlSslRcxN+0Xvic vJuKGS9xel9D9TOEAhXT4UO/EslfFLH3Wqwfwu/V -----END CERTIFICATE-----Generated at Wed Nov 5 03:16:11 2025 by rpki-client