$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer File: f375140c-52cc-401f-b3a0-476ffa367076.cer (raw, json) Hash identifier: A3Jbtbozt0bu2RAr7X9avKds8ovpU8kExeBzZQMANkQ= Subject key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B56CF8DDD4843433078FBF000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Sep 2025 00:45:24 +0000 Certificate not after: Sat 01 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 399976 IP: 23.131.200.0/23 IP: 167.253.68.0/22 IP: 2602:80c:2000::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:cf:8d:dd:48:43:43:30:78:fb:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 28 00:45:24 2025 GMT Not After : Jan 1 01:45:24 2028 GMT Subject: CN=f375140c-52cc-401f-b3a0-476ffa367076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:39:fe:06:32:50:25:cd:52:65:28:15:22: 97:ac:49:94:8b:e1:99:e8:b2:be:56:42:e6:61:79: 5f:5e:43:1c:d5:f0:66:13:e0:a9:64:9e:5e:23:4f: b7:f2:64:9f:64:05:d1:02:a3:b1:82:dc:2a:c4:41: c3:d0:3d:98:55:ec:9f:b5:7c:cd:59:7f:bb:fb:08: e1:38:83:b6:01:f6:05:c9:e5:bd:df:ef:d2:aa:8f: c3:89:df:27:08:7a:85:69:73:b2:62:cf:e2:96:79: 09:27:49:5d:83:58:0a:23:0c:51:e5:f2:e6:2a:19: c8:54:62:44:ca:d9:b1:f0:d1:51:0e:d3:67:4e:f8: 2c:f9:75:80:48:86:3c:7a:7c:9d:be:58:b8:83:cf: 0c:87:92:3b:5c:89:2c:f6:7b:5a:85:27:53:c2:11: 50:d1:0f:da:1d:cd:af:cf:6b:f1:a5:e2:77:f1:10: b2:24:15:f2:d8:10:92:94:ec:69:ec:c0:ed:39:40: 9e:30:a0:52:aa:8c:0b:a0:0f:ae:23:04:00:ba:4a: 31:68:91:b3:0b:f5:ea:87:1c:a2:5b:18:10:90:fa: 45:17:a2:46:92:b9:07:58:55:9d:a5:e9:47:65:f8: 3b:c2:d1:ff:fc:ee:6a:58:ab:50:c6:78:6d:b7:e6: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.131.200.0/23 167.253.68.0/22 IPv6: 2602:80c:2000::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399976 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2e:ad:68:9c:e7:e2:e8:24:29:82:c1:34:0b:ef:f8:df:d7: a7:48:7b:ee:6f:56:75:a1:2e:b0:31:d2:7e:ee:c7:c2:59:fe: 27:c3:db:31:db:1e:30:a8:85:0c:ed:11:7f:6a:d3:83:91:7b: d6:94:d2:8a:dc:d6:26:8f:e1:57:1c:8a:1b:55:ea:8c:85:1a: f7:0e:84:46:6b:03:72:86:1e:95:c9:76:75:75:ec:55:6c:1c: d0:bd:e0:9e:af:22:cd:f1:3b:61:e1:14:87:c6:0e:f8:9e:62: ed:3e:75:f5:01:d3:9d:23:47:29:77:ff:41:47:1a:7b:ab:a1: 45:e1:39:e5:6e:72:dd:d8:3c:6d:6a:d2:dd:f6:3f:ad:4a:69: a5:0b:fe:3c:93:a0:f7:1b:9f:94:1a:da:50:c7:5b:07:b5:21: 43:8c:ca:38:d5:de:69:d8:b8:68:90:73:05:1d:65:f0:3e:59: 3a:63:c1:1f:d9:98:fc:6c:2e:9e:70:ad:fe:17:3d:e0:fe:c4: ad:1c:cf:12:e3:3b:d5:16:36:e6:ea:02:85:4b:ca:fc:19:1e: 47:97:e9:17:e5:f1:03:ff:81:36:04:71:5d:a5:5d:a2:5e:e3: d9:65:0a:1c:ab:53:0b:b4:a4:a6:84:ff:9a:d4:9e:7d:9e:de: af:b2:82:b4 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtWz43dSENDMHj78AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkyODAwNDUyNFoXDTI4MDEwMTAxNDUyNFowLzEtMCsGA1UEAxMk ZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVk5/gYyUCXNUmUoFSKXrEmUi+GZ6LK+VkLm YXlfXkMc1fBmE+CpZJ5eI0+38mSfZAXRAqOxgtwqxEHD0D2YVeyftXzNWX+7+wjh OIO2AfYFyeW93+/Sqo/Did8nCHqFaXOyYs/ilnkJJ0ldg1gKIwxR5fLmKhnIVGJE ytmx8NFRDtNnTvgs+XWASIY8enydvli4g88Mh5I7XIks9ntahSdTwhFQ0Q/aHc2v z2vxpeJ38RCyJBXy2BCSlOxp7MDtOUCeMKBSqowLoA+uIwQAukoxaJGzC/Xqhxyi WxgQkPpFF6JGkrkHWFWdpelHZfg7wtH//O5qWKtQxnhtt+ZIGQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFETqAKesDYOO7KUQ7rFC/wuYXgbzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m Mzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YzNzUxNDBjLTUyY2MtNDAxZi1i M2EwLTQ3NmZmYTM2NzA3Ni9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEz NjcwNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXg8gDBAKn/UQwDgQCAAIwCAMGBCYCCAwgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYaaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxLq1onOfi6CQpgsE0 C+/439enSHvub1Z1oS6wMdJ+7sfCWf4nw9sx2x4wqIUM7RF/atODkXvWlNKK3NYm j+FXHIobVeqMhRr3DoRGawNyhh6VyXZ1dexVbBzQveCeryLN8Tth4RSHxg74nmLt PnX1AdOdI0cpd/9BRxp7q6FF4TnlbnLd2DxtatLd9j+tSmmlC/48k6D3G5+UGtpQ x1sHtSFDjMo41d5p2LhokHMFHWXwPlk6Y8Ef2Zj8bC6ecK3+Fz3g/sStHM8S4zvV Fjbm6gKFS8r8GR5Hl+kX5fED/4E2BHFdpV2iXuPZZQocq1MLtKSmhP+a1J59nt6v soK0 -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:14 2025 by rpki-client