$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.cer File: ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.cer (raw, json) Hash identifier: sy79URicNOMBagtreVCIjneBRZd6As0rB6a2noN8BCE= Subject key identifier: CC:E6:51:B2:C0:7E:8A:7D:AF:D7:FD:2E:AD:A0:38:90:09:2A:C0:05 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858476C9400408B5D47F98FA9BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Oct 2024 00:45:27 +0000 Certificate not after: Thu 07 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 16719 IP: 150.123.0.0/16 IP: 198.202.240.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:94:00:40:8b:5d:47:f9:8f:a9:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 4 00:45:27 2024 GMT Not After : Jan 7 01:45:27 2027 GMT Subject: CN=ec44fac2-5f0d-4ebb-8425-6d4a3e12047f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:c4:6a:69:2d:4b:b7:3d:67:63:d2:b2:c8: 90:b0:2d:b6:fb:f0:3e:12:d9:72:dd:b5:2d:91:0e: 9a:5b:ca:f8:a6:f1:51:14:7d:eb:06:0d:1a:ab:cc: b2:9d:94:94:84:3f:af:6c:75:b7:44:e6:d5:84:38: 14:75:fe:44:66:4f:52:8f:d3:35:33:ed:58:dc:91: ea:6c:e4:25:83:c7:a5:82:52:14:e9:c9:e9:49:5c: 6c:a0:79:eb:cc:9c:dd:76:0c:c2:76:2b:5b:7a:ac: db:ba:8e:35:a5:1d:36:7d:35:b0:8b:92:54:f4:61: 6c:b0:21:27:5e:e3:6a:29:1a:db:9e:02:33:d0:c7: 6f:26:ce:7e:5d:ff:98:0d:77:34:2c:45:e1:96:c8: 67:40:bd:06:bc:7e:22:da:6c:11:07:77:5e:5d:0c: 30:d7:8c:08:a8:54:9d:35:bf:8d:d9:94:5b:e5:db: 9d:8a:9b:f5:77:4d:05:d4:90:ed:a7:05:cc:a3:53: 11:14:6e:e3:3f:1f:0f:3b:2b:29:2a:0a:b2:46:bd: 6b:91:bb:ca:a2:8f:4c:22:61:a8:e0:73:9d:df:4c: 04:9e:2a:05:cf:3f:26:58:b8:fe:6e:a8:5e:cc:1a: 37:64:6e:e6:c8:e9:7d:92:f8:39:ad:db:5e:38:95: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:51:B2:C0:7E:8A:7D:AF:D7:FD:2E:AD:A0:38:90:09:2A:C0:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 150.123.0.0/16 198.202.240.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16719 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:42:04:08:dc:a3:52:24:b8:f3:ae:b3:4b:cf:e5:6f:4f:c5: 01:0c:35:9a:62:f9:c6:99:09:59:f6:34:e6:e0:7b:13:40:b4: 01:b3:c4:de:44:14:52:5f:5b:bf:52:b3:04:f0:42:fe:c3:b8: 04:bb:ba:0f:2d:5a:60:04:44:83:06:e9:dd:be:08:b3:4a:9c: 06:cf:cc:3d:e5:c3:39:4f:2f:99:39:d1:ee:ef:08:d0:74:b5: ed:80:83:d6:16:4f:12:30:22:de:e2:c3:c9:c5:66:02:65:7f: 16:f2:eb:a7:de:b5:a8:a9:bb:5b:4f:38:a2:7b:de:51:ed:f7: a4:72:a1:24:93:37:a4:59:8f:f5:49:90:02:bd:95:e6:6c:00: a1:21:6d:df:25:1e:0d:67:dd:3d:3b:7d:59:c3:aa:60:cc:8b: cf:18:5a:55:7b:d9:d8:e4:9c:0e:28:9a:e7:f8:87:86:87:1f: af:b7:b6:ec:64:3e:06:74:9f:75:f4:e3:dd:c8:a2:9a:75:f3: f4:82:9e:d6:f8:76:83:dd:90:84:d8:15:c2:c6:36:5d:df:f7: 41:42:6e:87:6c:d2:c9:01:30:63:f2:76:03:c9:d7:b0:57:15: 7b:42:30:b9:a7:6a:e6:c7:92:7a:d0:b8:dd:1b:f8:f5:4c:c6: 8f:7e:be:77 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEdslABAi11H+Y+pvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAwNDAwNDUyN1oXDTI3MDEwNzAxNDUyN1owLzEtMCsGA1UEAxMk ZWM0NGZhYzItNWYwZC00ZWJiLTg0MjUtNmQ0YTNlMTIwNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E/EamktS7c9Z2PSssiQsC22+/A+Etly3bUt kQ6aW8r4pvFRFH3rBg0aq8yynZSUhD+vbHW3RObVhDgUdf5EZk9Sj9M1M+1Y3JHq bOQlg8elglIU6cnpSVxsoHnrzJzddgzCditbeqzbuo41pR02fTWwi5JU9GFssCEn XuNqKRrbngIz0MdvJs5+Xf+YDXc0LEXhlshnQL0GvH4i2mwRB3deXQww14wIqFSd Nb+N2ZRb5dudipv1d00F1JDtpwXMo1MRFG7jPx8POyspKgqyRr1rkbvKoo9MImGo 4HOd30wEnioFzz8mWLj+bqhezBo3ZG7myOl9kvg5rdteOJXa/wIDAQABo4IEHzCC BBswHQYDVR0OBBYEFMzmUbLAfop9r9f9Lq2gOJAJKsAFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YzQ0ZmFjMi01ZjBkLTRlYmItODQyNS02ZDRhM2UxMjA0N2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2VjNDRmYWMyLTVmMGQtNGViYi04 NDI1LTZkNGEzZTEyMDQ3Zi9lYzQ0ZmFjMi01ZjBkLTRlYmItODQyNS02ZDRhM2Ux MjA0N2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCWewMEAcbK8DAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJBTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBfQgQI3KNSJLjzrrNLz+VvT8UBDDWaYvnGmQlZ9jTm 4HsTQLQBs8TeRBRSX1u/UrME8EL+w7gEu7oPLVpgBESDBundvgizSpwGz8w95cM5 Ty+ZOdHu7wjQdLXtgIPWFk8SMCLe4sPJxWYCZX8W8uun3rWoqbtbTziie95R7fek cqEkkzekWY/1SZACvZXmbAChIW3fJR4NZ909O31Zw6pgzIvPGFpVe9nY5JwOKJrn +IeGhx+vt7bsZD4GdJ919OPdyKKadfP0gp7W+HaD3ZCE2BXCxjZd3/dBQm6HbNLJ ATBj8nYDydewVxV7QjC5p2rmx5J60LjdG/j1TMaPfr53 -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:46 2025 by rpki-client