$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer File: 1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer (raw, json) Hash identifier: qUxaqB/xgiAN+xhrtO/hgbvElIZSXLO9jrue2JTqdlc= Subject key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B157C131CD71AB669C0FE6338 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 15:09:40 +0000 Certificate not after: Wed 08 Dec 2027 16:09:40 +0000 Subordinate resources: AS: 12021 AS: 14472 AS: 19835 AS: 26230 AS: 26788 AS: 30147 IP: 24.114.128.0/17 IP: 24.137.192.0/19 IP: 64.119.96.0/19 IP: 64.201.32.0/19 IP: 66.146.128.0/19 IP: 66.207.96.0/19 IP: 66.209.48.0/20 IP: 66.252.144.0/20 IP: 67.210.160.0/20 IP: 69.17.128.0/18 IP: 69.164.176.0/20 IP: 72.1.192.0/19 IP: 72.14.160.0/20 IP: 162.212.232.0/21 IP: 173.46.0.0/19 IP: 173.195.48.0/20 IP: 209.104.160.0/19 IP: 216.16.224.0/19 IP: 216.171.96.0/20 IP: 216.183.80.0/20 IP: 216.185.64.0/19 IP: 2604:3b00::/32 IP: 2606:f900::/32 IP: 2607:f090::/32 IP: 2607:fcf8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:7c:13:1c:d7:1a:b6:69:c0:fe:63:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 4 15:09:40 2025 GMT Not After : Dec 8 16:09:40 2027 GMT Subject: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:b3:b6:71:38:82:61:5b:74:ae:9f:13:16: 21:14:69:dc:93:8b:01:21:c6:a0:08:62:d0:45:23: 17:7d:78:66:31:0e:d8:58:33:14:9e:60:42:a4:ec: 70:e9:bf:ee:a6:26:c8:05:1b:ee:76:71:28:c0:13: 99:ca:36:7b:ea:74:d7:6c:13:94:ae:89:69:42:c8: ef:7b:11:c7:5b:31:f4:f2:06:d9:8d:b0:74:89:0b: fb:9f:3a:a2:d7:2b:32:ed:0f:a0:a6:52:37:81:18: d6:12:99:ed:cd:96:0f:b9:72:34:d3:c3:77:35:3c: 61:38:a2:1b:08:60:3e:3c:e8:3c:fc:f4:ee:0f:8a: 51:12:66:00:99:d9:e1:5a:99:07:41:5d:7f:c1:ba: 6e:6b:37:87:77:81:dd:92:16:b5:01:d0:00:58:19: 5c:a2:64:d3:f5:76:58:4b:bc:fe:8a:df:a8:12:5a: 9f:c8:c6:b4:4f:24:46:cb:b3:11:5c:f4:f5:ee:9c: 6b:7a:8a:09:ef:cf:d8:a9:06:0d:e7:8a:0a:47:2c: 68:68:05:44:ee:94:1c:b3:e8:8c:67:2d:ae:b2:b9: 2f:82:2b:f1:b9:57:be:fd:29:d3:f6:ad:98:c1:de: e1:e6:38:fb:43:b3:53:06:81:6d:d1:a0:50:7d:27: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 24.114.128.0/17 24.137.192.0/19 64.119.96.0/19 64.201.32.0/19 66.146.128.0/19 66.207.96.0/19 66.209.48.0/20 66.252.144.0/20 67.210.160.0/20 69.17.128.0/18 69.164.176.0/20 72.1.192.0/19 72.14.160.0/20 162.212.232.0/21 173.46.0.0/19 173.195.48.0/20 209.104.160.0/19 216.16.224.0/19 216.171.96.0/20 216.183.80.0/20 216.185.64.0/19 IPv6: 2604:3b00::/32 2606:f900::/32 2607:f090::/32 2607:fcf8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12021 14472 19835 26230 26788 30147 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6d:1d:eb:62:9f:e0:9b:e3:74:6a:90:fa:5c:43:35:34:18: cc:a4:77:9b:6b:6b:51:0f:65:50:ba:b3:ea:d0:a2:f8:eb:76: 7e:bb:62:4a:68:9c:11:d3:22:f8:c6:b3:ec:5b:7b:de:30:85: 0c:da:fa:06:d7:4b:e1:df:86:08:c4:0f:84:85:96:a5:15:6b: b9:da:12:c3:ab:b4:16:b1:96:39:ed:36:71:56:36:fe:9c:b2: 20:67:b9:82:e4:fd:81:71:38:6b:2c:b9:40:f9:f8:bc:2f:0a: 86:c4:20:b2:f6:56:e6:9b:eb:28:b7:e0:4d:c1:29:29:ec:93: f1:2a:69:f7:fe:e1:43:47:4e:d2:d1:0c:be:35:f0:7f:66:b8: 01:95:b4:95:38:ab:1a:e8:62:7f:da:2f:7e:e9:95:72:70:de: 65:56:eb:c9:6d:d9:be:c2:05:06:81:5c:ce:3f:31:c1:13:50: cc:ac:fb:8b:27:75:7e:5a:d7:2f:af:2f:73:8b:54:8c:45:a9: 04:a7:f4:21:3e:15:78:b6:08:8e:81:d9:2c:ab:34:c9:07:9b: d1:54:d5:c0:c8:6e:c6:24:4f:8c:ef:28:8f:70:09:05:93:af: bc:1e:a2:3e:85:cd:d3:1f:e2:69:53:32:62:e7:ad:71:b9:da: ec:10:f0:72 -----BEGIN CERTIFICATE----- MIIHvDCCBqSgAwIBAgIUAQ0Mn0MoWEsVfBMc1xq2acD+YzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDkwNDE1MDk0MFoXDTI3MTIwODE2MDk0MFowLzEtMCsGA1UEAxMk MWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfyztnE4gmFbdK6fExYhFGnck4sBIcagCGLQ RSMXfXhmMQ7YWDMUnmBCpOxw6b/upibIBRvudnEowBOZyjZ76nTXbBOUrolpQsjv exHHWzH08gbZjbB0iQv7nzqi1ysy7Q+gplI3gRjWEpntzZYPuXI008N3NTxhOKIb CGA+POg8/PTuD4pREmYAmdnhWpkHQV1/wbpuazeHd4Hdkha1AdAAWBlcomTT9XZY S7z+it+oElqfyMa0TyRGy7MRXPT17pxreooJ78/YqQYN54oKRyxoaAVE7pQcs+iM Zy2usrkvgivxuVe+/SnT9q2Ywd7h5jj7Q7NTBoFt0aBQfSeiaQIDAQABo4IEzjCC BMowHQYDVR0OBBYEFLYxINwwSxsm9B/kWyuSfWJSfhPLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmN2M5MWFlLTAyNmMtNDc5ZC05 Y2I1LWQzODM3ZTNkNDc1MS8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2Uz ZDQ3NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgb4GCCsGAQUF BwEHAQH/BIGuMIGrMIGEBAIAATB+AwQHGHKAAwQFGInAAwQFQHdgAwQFQMkgAwQF QpKAAwQFQs9gAwQEQtEwAwQEQvyQAwQEQ9KgAwQGRRGAAwQERaSwAwQFSAHAAwQE SA6gAwQDotToAwQFrS4AAwQErcMwAwQF0WigAwQF2BDgAwQE2KtgAwQE2LdQAwQF 2LlAMCIEAgACMBwDBQAmBDsAAwUAJgb5AAMFACYH8JADBQAmB/z4MC0GCCsGAQUF BwEIAQH/BB4wHKAaMBgCAi71AgI4iAICTXsCAmZ2AgJopAICdcMwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA h20d62Kf4JvjdGqQ+lxDNTQYzKR3m2trUQ9lULqz6tCi+Ot2frtiSmicEdMi+Maz 7Ft73jCFDNr6BtdL4d+GCMQPhIWWpRVrudoSw6u0FrGWOe02cVY2/pyyIGe5guT9 gXE4ayy5QPn4vC8KhsQgsvZW5pvrKLfgTcEpKeyT8Spp9/7hQ0dO0tEMvjXwf2a4 AZW0lTirGuhif9ovfumVcnDeZVbryW3ZvsIFBoFczj8xwRNQzKz7iyd1flrXL68v c4tUjEWpBKf0IT4VeLYIjoHZLKs0yQeb0VTVwMhuxiRPjO8oj3AJBZOvvB6iPoXN 0x/iaVMyYuetcbna7BDwcg== -----END CERTIFICATE-----Generated at Thu Nov 6 05:47:17 2025 by rpki-client