$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer File: e8b1c892-1844-46b1-8572-70740f2673f5.cer (raw, json) Hash identifier: lGVCB5anRICglMjIKRzbmi2Pe7qmmGlsxTXb9FKjC7s= Subject key identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AD0CEB9033B076E2C3452CA28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 00:45:25 +0000 Certificate not after: Sun 14 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 55243 IP: 198.148.6.0/23 IP: 199.119.164.0/22 IP: 2620:26:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:ce:b9:03:3b:07:6e:2c:34:52:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 11 00:45:25 2025 GMT Not After : Nov 14 01:45:25 2027 GMT Subject: CN=e8b1c892-1844-46b1-8572-70740f2673f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:1c:fc:9e:86:65:ac:7f:a9:3f:60:e8:51: 8f:68:12:7e:b0:17:04:ec:c4:db:16:c7:73:57:22: 03:8f:9a:3b:3c:c6:14:f2:13:01:0b:64:99:b7:b3: fb:0b:f5:f4:21:d5:6f:28:3b:8b:2e:e7:fe:a5:93: 3b:d0:71:87:11:04:c9:15:63:31:5d:a1:51:ed:8f: 1a:0e:cd:44:a1:e7:5e:12:a3:78:21:e1:15:79:ef: 6c:dc:b9:12:1a:ef:11:79:25:be:9a:59:0f:40:11: 0c:bc:9c:7a:6a:d3:9f:12:aa:00:8b:a4:78:bb:28: 27:6a:84:70:df:ef:b7:b2:6b:a8:a2:c2:a1:6d:5e: 58:0d:b4:8c:7c:67:20:6e:7c:d4:fd:50:96:96:fe: 82:1f:8c:d1:49:9e:dd:b0:db:35:e4:f4:89:d5:f0: bc:42:c4:fd:08:07:e4:cf:e7:57:0a:dc:96:07:b9: 30:d1:28:c7:99:79:2f:f8:74:4f:4c:73:09:46:e1: d4:39:24:dc:7f:dc:6c:9f:63:6d:f4:c4:de:b1:70: 9c:66:9c:32:6c:96:95:3b:b6:56:57:63:c7:95:11: cb:ca:d2:ea:07:60:ac:84:ee:8c:86:79:b5:69:bd: 97:b9:b5:43:66:b2:ed:f2:64:08:a2:bd:96:31:7a: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 198.148.6.0/23 199.119.164.0/22 IPv6: 2620:26:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55243 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:17:bc:85:67:20:cf:27:12:f6:b9:7f:1a:d0:8f:49:89:ec: 1f:11:60:76:8a:48:78:b5:dd:81:a8:d6:2f:58:f5:63:bf:40: 49:0f:d7:db:e8:5b:33:45:a0:9b:ca:23:b5:4c:22:b2:67:7f: dc:cf:a6:90:ba:e9:36:1f:dc:43:af:ce:0a:94:02:30:6d:ba: a4:02:5a:40:c1:2d:b0:59:b4:f5:f2:34:12:90:58:d3:6b:4d: b0:d4:dd:e7:63:63:f7:51:6d:b1:21:32:dd:a9:63:f9:b6:d4: 84:0f:d1:ee:cc:59:8d:79:70:9c:31:c5:87:29:d2:ed:e4:ad: 5e:0a:94:6b:d9:5a:6c:ca:b8:23:77:81:05:b8:46:5b:b0:bb: b2:51:18:7e:75:b7:ae:6c:fc:8f:11:98:07:76:7c:9f:0e:ab: 7d:1f:f8:f0:70:6d:bd:f8:8d:66:e2:db:65:64:91:a3:8e:f7: ac:30:a5:8d:0c:f7:e2:e5:5a:2b:27:22:ef:d3:3c:77:1d:ac: 55:8e:43:cc:62:6c:c9:fd:51:a7:f6:f4:25:c7:1c:80:27:b0: 2c:13:e4:4c:c9:68:20:9e:0e:43:3d:4d:b4:20:96:57:c6:5f: a0:5b:a9:22:6c:7f:10:66:29:2e:7c:78:3b:df:ae:73:6a:9d: 00:2d:2e:31 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWErQzrkDOwduLDRSyigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxMTAwNDUyNVoXDTI3MTExNDAxNDUyNVowLzEtMCsGA1UEAxMk ZThiMWM4OTItMTg0NC00NmIxLTg1NzItNzA3NDBmMjY3M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp58c/J6GZax/qT9g6FGPaBJ+sBcE7MTbFsdz VyIDj5o7PMYU8hMBC2SZt7P7C/X0IdVvKDuLLuf+pZM70HGHEQTJFWMxXaFR7Y8a Ds1EoedeEqN4IeEVee9s3LkSGu8ReSW+mlkPQBEMvJx6atOfEqoAi6R4uygnaoRw 3++3smuoosKhbV5YDbSMfGcgbnzU/VCWlv6CH4zRSZ7dsNs15PSJ1fC8QsT9CAfk z+dXCtyWB7kw0SjHmXkv+HRPTHMJRuHUOSTcf9xsn2Nt9MTesXCcZpwybJaVO7ZW V2PHlRHLytLqB2CshO6Mhnm1ab2XubVDZrLt8mQIor2WMXqJ7wIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFGgrUXJJVZj5hxTGnL+QOtvVQKWUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l OGIxYzg5Mi0xODQ0LTQ2YjEtODU3Mi03MDc0MGYyNjczZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U4YjFjODkyLTE4NDQtNDZiMS04 NTcyLTcwNzQwZjI2NzNmNS9lOGIxYzg5Mi0xODQ0LTQ2YjEtODU3Mi03MDc0MGYy NjczZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAHGlAYDBALHd6QwDwQCAAIwCQMHBCYgACbAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA18swVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVBe8hWcgzycS9rl/ GtCPSYnsHxFgdopIeLXdgajWL1j1Y79ASQ/X2+hbM0Wgm8ojtUwismd/3M+mkLrp Nh/cQ6/OCpQCMG26pAJaQMEtsFm09fI0EpBY02tNsNTd52Nj91FtsSEy3alj+bbU hA/R7sxZjXlwnDHFhynS7eStXgqUa9labMq4I3eBBbhGW7C7slEYfnW3rmz8jxGY B3Z8nw6rfR/48HBtvfiNZuLbZWSRo473rDCljQz34uVaKyci79M8dx2sVY5DzGJs yf1Rp/b0JcccgCewLBPkTMloIJ4OQz1NtCCWV8ZfoFupImx/EGYpLnx4O9+uc2qd AC0uMQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:38 2025 by rpki-client