$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer File: 1d639366-c044-456e-b8c8-0de04a543a0c.cer (raw, json) Hash identifier: RQtyM134ZfNuptMMlL3m6px6pNO/wvkWeweUwoRW8ss= Subject key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A76A56AB9EE536BDF3CD67A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Jul 2025 17:39:27 +0000 Certificate not after: Mon 25 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 6164 AS: 6571 AS: 7431 AS: 11069 AS: 11689 AS: 395273 IP: 45.59.32.0/20 IP: 50.5.0.0/16 IP: 63.250.64.0/19 IP: 64.151.128.0/18 IP: 66.42.128.0/17 IP: 66.117.192.0/18 IP: 66.158.160.0/20 IP: 66.161.128.0/17 IP: 66.170.160.0/20 IP: 69.5.32.0/20 IP: 69.61.128.0/17 IP: 72.49.0.0/16 IP: 74.83.0.0/16 IP: 74.215.0.0/16 IP: 131.241.0.0/16 IP: 163.182.0.0/17 IP: 192.24.128.0/17 IP: 206.221.224.0/20 IP: 208.102.0.0/16 IP: 209.131.192.0/19 IP: 216.9.128.0/19 IP: 216.68.0.0/16 IP: 216.196.128.0/17 IP: 2600:2b00::/28 IP: 2607:f500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:a5:6a:b9:ee:53:6b:df:3c:d6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 9 17:39:27 2025 GMT Not After : Jan 25 01:45:26 2027 GMT Subject: CN=1d639366-c044-456e-b8c8-0de04a543a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:74:48:7b:9f:3c:2e:2a:2d:e3:db:e1:6b: 99:d1:d2:f5:10:74:b7:c5:c1:a6:dc:6b:d3:71:04: 44:b7:ed:13:6f:2c:7c:ff:83:95:b8:b6:01:5a:8e: 24:99:6f:e3:cc:38:a6:ba:71:c6:62:5d:9e:7c:b5: 8f:62:6f:09:35:ce:c8:30:65:3d:8f:00:2b:7a:bf: e3:55:57:8e:d1:fc:07:64:1d:d0:79:66:2e:2d:c4: 9c:a5:6a:2c:cd:c3:ef:80:23:21:a0:3a:d2:12:bc: 0a:0d:3c:ef:b9:1a:a5:99:f4:57:6f:af:c1:c2:87: 1a:8c:36:7f:ad:36:7d:8f:05:bd:d6:c1:25:7b:52: 31:0a:c7:10:df:ac:e1:c1:bf:93:a0:72:3d:2a:ef: 94:c4:08:d2:ce:8c:50:f4:fa:8f:cb:e3:1f:95:05: 2b:cd:fe:af:90:ef:c4:74:03:aa:aa:10:11:6e:4a: 4c:e2:42:fd:17:0f:36:45:10:c4:84:bd:61:3a:9d: c1:f6:d9:9a:bd:0e:56:20:92:5a:c9:78:fa:ed:20: 8c:ad:ea:d0:94:0c:38:55:1a:59:2c:4a:43:9e:c9: 4e:97:80:fc:80:c0:39:03:0a:82:a4:33:d1:51:94: 00:43:86:4a:23:cb:55:bd:5b:95:c2:59:86:c9:b6: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.59.32.0/20 50.5.0.0/16 63.250.64.0/19 64.151.128.0/18 66.42.128.0/17 66.117.192.0/18 66.158.160.0/20 66.161.128.0/17 66.170.160.0/20 69.5.32.0/20 69.61.128.0/17 72.49.0.0/16 74.83.0.0/16 74.215.0.0/16 131.241.0.0/16 163.182.0.0/17 192.24.128.0/17 206.221.224.0/20 208.102.0.0/16 209.131.192.0/19 216.9.128.0/19 216.68.0.0/16 216.196.128.0/17 IPv6: 2600:2b00::/28 2607:f500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6164 6571 7431 11069 11689 395273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:15:1a:5a:84:88:21:49:2b:fe:26:c3:12:85:9e:f9:b1:6f: 29:cd:b7:76:3f:20:f6:4e:f4:e0:2b:e3:47:16:bf:1b:c9:10: a0:99:fe:8d:e6:27:5b:cb:d1:4a:8c:ce:5b:d3:fe:7f:08:7f: eb:6f:c8:22:2a:92:57:da:13:9a:1f:8e:2f:c8:9d:17:ea:2c: 3c:43:b2:70:7e:1d:63:1e:8f:cb:55:1b:9f:68:ce:91:68:52: af:20:60:db:89:c7:61:cf:fa:cf:36:fc:dd:79:dc:9b:5f:2f: 1a:25:5d:78:2f:24:02:22:1d:4d:97:5e:5c:db:d6:c5:51:b3: 6b:46:56:50:ba:f9:4e:72:3f:fd:6d:27:67:6e:e2:3e:12:0b: 1c:bd:5a:f9:e6:be:0b:40:98:e5:9f:89:e3:10:95:08:53:50: 4e:16:ce:d6:e5:2e:ae:a6:0e:a4:97:79:62:0a:27:b2:1d:82: ec:a2:bb:2b:ca:60:d7:a8:a1:8b:d5:b1:7b:34:8d:47:7a:f1: a8:9b:3a:95:dc:5d:65:7a:23:b1:d4:88:31:8b:95:45:a4:15: 0a:4e:d3:b9:15:86:e0:1c:8c:39:16:a6:1e:fd:2d:44:2f:6a: 36:70:bd:bc:6a:87:06:6a:8c:80:10:69:62:be:1f:fe:e7:95: bc:c4:16:46 -----BEGIN CERTIFICATE----- MIIHtTCCBp2gAwIBAgIUAQ0Mn0MoWEp2pWq57lNr3zzWeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcwOTE3MzkyN1oXDTI3MDEyNTAxNDUyNlowLzEtMCsGA1UEAxMk MWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5J0SHufPC4qLePb4WuZ0dL1EHS3xcGm3GvT cQREt+0Tbyx8/4OVuLYBWo4kmW/jzDimunHGYl2efLWPYm8JNc7IMGU9jwArer/j VVeO0fwHZB3QeWYuLcScpWoszcPvgCMhoDrSErwKDTzvuRqlmfRXb6/BwocajDZ/ rTZ9jwW91sEle1IxCscQ36zhwb+ToHI9Ku+UxAjSzoxQ9PqPy+MflQUrzf6vkO/E dAOqqhARbkpM4kL9Fw82RRDEhL1hOp3B9tmavQ5WIJJayXj67SCMrerQlAw4VRpZ LEpDnslOl4D8gMA5AwqCpDPRUZQAQ4ZKI8tVvVuVwlmGybZpUQIDAQABo4IExzCC BMMwHQYDVR0OBBYEFPw1V8kOPbUZBYWkp+cQ6WVqBGeHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFkNjM5MzY2LWMwNDQtNDU2ZS1i OGM4LTBkZTA0YTU0M2EwYy8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1 NDNhMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgbYGCCsGAQUF BwEHAQH/BIGmMIGjMIGKBAIAATCBgwMEBC07IAMDADIFAwQFP/pAAwQGQJeAAwQH QiqAAwQGQnXAAwQEQp6gAwQHQqGAAwQEQqqgAwQERQUgAwQHRT2AAwMASDEDAwBK UwMDAErXAwMAg/EDBAejtgADBAfAGIADBATO3eADAwDQZgMEBdGDwAMEBdgJgAMD ANhEAwQH2MSAMBQEAgACMA4DBQQmACsAAwUAJgf1ADAuBggrBgEFBQcBCAEB/wQf MB2gGzAZAgIYFAICGasCAh0HAgIrPQICLakCAwYICTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnFRpahIgh SSv+JsMShZ75sW8pzbd2PyD2TvTgK+NHFr8byRCgmf6N5idby9FKjM5b0/5/CH/r b8giKpJX2hOaH44vyJ0X6iw8Q7Jwfh1jHo/LVRufaM6RaFKvIGDbicdhz/rPNvzd edybXy8aJV14LyQCIh1Nl15c29bFUbNrRlZQuvlOcj/9bSdnbuI+EgscvVr55r4L QJjln4njEJUIU1BOFs7W5S6upg6kl3liCieyHYLsorsrymDXqKGL1bF7NI1HevGo mzqV3F1leiOx1Igxi5VFpBUKTtO5FYbgHIw5FqYe/S1EL2o2cL28aocGaoyAEGli vh/+55W8xBZG -----END CERTIFICATE-----Generated at Wed Nov 5 04:51:31 2025 by rpki-client