$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer File: 1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer (raw, json) Hash identifier: GxJ8IeHxSzdsO/+QIVBbwRC2ZupEfeCiqjMAP03JsqE= Subject key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority key identifier: 55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 Certificate issuer: /CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Certificate serial: 010D0C9F4328584B13CF22D1FB7077F1C79CF340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 15.189.0.0/16 IP: 15.201.0.0/16 IP: 15.203.0.0/16 IP: 161.188.200.0/22 IP: 161.188.206.0 -- 161.188.209.255 IP: 161.188.213.0 -- 161.188.215.255 IP: 161.188.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:22:d1:fb:70:77:f1:c7:9c:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:15:8b:f1:ff:ea:2c:57:66:37:19:2c:44: 72:de:25:21:cb:6d:61:1a:47:00:67:ee:29:50:77: ac:ab:37:38:94:66:63:8d:86:1a:2e:fb:39:29:83: c6:e1:5e:ab:0e:89:78:aa:5e:d6:df:c4:6c:26:27: cb:5b:e9:f1:84:27:4f:e8:63:3b:0e:32:7e:5d:b5: b0:18:5e:31:8f:25:e5:03:84:d5:ce:15:c9:1e:5d: a6:70:02:7a:6d:58:18:9e:3f:b7:e5:59:98:5a:fe: 4e:12:1e:78:41:dc:87:ca:9c:45:18:4a:6e:f6:02: 2d:52:d6:86:b4:8f:c6:8a:8a:0c:93:24:c1:1c:c7: b8:8f:e7:80:c1:1f:fb:d3:96:a5:fa:45:2e:a5:0e: 14:0c:0d:4a:99:89:81:d3:2f:e2:6d:a5:4b:ea:b8: 15:34:eb:6f:d9:da:aa:d9:47:49:59:40:78:25:df: 80:6f:16:0a:84:73:66:c2:80:d0:15:73:2a:07:92: d4:7c:7a:b0:65:ad:ce:80:1b:0a:6a:32:10:48:06: ee:74:85:e4:2e:48:86:a5:a5:62:8c:c0:c5:29:f1: e7:20:fa:ca:57:aa:56:03:55:b4:9d:ee:28:b1:d6: e7:dd:0d:c3:55:70:d5:34:05:cf:a1:c4:0e:5f:26: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl X509v3 Authority Key Identifier: keyid:55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer sbgp-ipAddrBlock: critical IPv4: 15.189.0.0/16 15.201.0.0/16 15.203.0.0/16 161.188.200.0/22 161.188.206.0-161.188.209.255 161.188.213.0-161.188.215.255 161.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:07:1a:ff:29:3f:98:e7:d7:27:f1:30:f7:0a:1d:f5:e9:67: 98:bd:89:f4:1b:23:b4:14:c9:ac:fa:86:8d:f5:29:b8:0a:21: 04:ba:1f:b9:bb:cf:62:10:35:03:7c:e8:64:68:f1:0d:ab:ee: 0f:fb:12:08:36:a8:30:e8:7a:69:15:62:ae:3e:22:78:dc:a9: 3e:74:32:cd:8b:b7:a2:3c:ae:4d:a2:33:24:a1:b2:8a:14:1a: db:21:29:2e:90:1e:d6:ce:1e:f5:54:74:49:1d:5a:a2:11:be: 38:5a:b1:d9:63:ea:58:28:ac:34:26:ab:09:fd:c1:5b:ed:42: 3e:6a:ff:e8:96:e4:f0:94:e7:ba:ec:60:97:b3:3a:ea:c5:df: dd:09:11:88:2b:39:3d:d1:38:9d:3a:14:1f:bf:24:cb:7a:e3: c9:69:f9:3f:0b:8e:0b:2e:e8:08:64:a0:c3:7e:32:2d:ff:ed: 1d:e7:6d:fa:70:d9:35:69:06:a8:fb:b5:c9:d5:f8:8d:bb:54: b4:34:f5:95:08:74:51:50:54:dd:e9:90:f5:1a:3e:13:42:c0: b1:94:a0:d8:78:6d:dc:d5:f1:b3:3d:5e:2a:5b:30:04:a6:c2: 15:ed:a5:aa:03:f3:2e:c4:62:da:75:2e:5e:32:7d:1d:fa:33: 58:d7:8d:14 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEsTzyLR+3B38cec80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFhNzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3 NThmMB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowPTE7MDkGA1UEAxMy MWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAx MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptRWL8f/qLFdmNxks RHLeJSHLbWEaRwBn7ilQd6yrNziUZmONhhou+zkpg8bhXqsOiXiqXtbfxGwmJ8tb 6fGEJ0/oYzsOMn5dtbAYXjGPJeUDhNXOFckeXaZwAnptWBieP7flWZha/k4SHnhB 3IfKnEUYSm72Ai1S1oa0j8aKigyTJMEcx7iP54DBH/vTlqX6RS6lDhQMDUqZiYHT L+JtpUvquBU062/Z2qrZR0lZQHgl34BvFgqEc2bCgNAVcyoHktR8erBlrc6AGwpq MhBIBu50heQuSIalpWKMwMUp8ecg+spXqlYDVbSd7iix1ufdDcNVcNU0Bc+hxA5f JsgZAgMBAAGjggQhMIIEHTAdBgNVHQ4EFgQUFfTvBPWvI5bJXxZC43kHi0iMFgsw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3 ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZh ODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9N Rmp4WXNkUXRBUWMubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2ZmOWZhODRlLTk3ODMtNGEwYi1h NThkLTZkYzhlMjQzM2QzMy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiL2FhYTc2Mzk0LTQ4ZmMtNGZmMy1iNmFhLTA2OTNjNTVkNzU4Zi9hYWE3NjM5 NC00OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYuY3JsMB8GA1UdIwQYMBaAFFXs SqswF0uTQHTib6ibzsfA41XXMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy81YjdmYjEyMi1kZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFh NzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3NThmLmNlcjBQBggrBgEFBQcB BwEB/wRBMD8wPQQCAAEwNwMDAA+9AwMAD8kDAwAPywMEAqG8yDAMAwQBobzOAwQB obzQMAwDBAChvNUDBAOhvNADBAShvOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWQca/yk/mOfXJ/Ew9wod 9elnmL2J9BsjtBTJrPqGjfUpuAohBLofubvPYhA1A3zoZGjxDavuD/sSCDaoMOh6 aRVirj4ieNypPnQyzYu3ojyuTaIzJKGyihQa2yEpLpAe1s4e9VR0SR1aohG+OFqx 2WPqWCisNCarCf3BW+1CPmr/6Jbk8JTnuuxgl7M66sXf3QkRiCs5PdE4nToUH78k y3rjyWn5PwuOCy7oCGSgw34yLf/tHedt+nDZNWkGqPu1ydX4jbtUtDT1lQh0UVBU 3emQ9Ro+E0LAsZSg2Hht3NXxsz1eKlswBKbCFe2lqgPzLsRi2nUuXjJ9HfozWNeN FA== -----END CERTIFICATE-----Generated at Thu Nov 6 09:19:10 2025 by rpki-client