$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer File: 11f590b6-eb6e-4969-824b-0df247220283.cer (raw, json) Hash identifier: 23kPNaMwrGXkXKNRWvJW5hS04y6WpX9dp54DX4DQj80= Subject key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285849C3D46A1C6CACB44C654B0000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 16:24:27 +0000 Certificate not after: Wed 20 Jan 2027 18:00:53 +0000 Subordinate resources: AS: 46165 AS: 395208 AS: 395301 AS: 396139 IP: 23.227.216.0/22 IP: 27.121.114.0/23 IP: 64.190.89.0/24 IP: 64.190.102.0/24 IP: 69.48.208.0/24 IP: 103.135.128.0/23 IP: 139.60.76.0/22 IP: 148.59.143.0/24 IP: 162.120.64.0/22 IP: 205.201.28.0/23 IP: 207.22.48.0/21 IP: 208.74.66.0/24 IP: 209.172.4.0/24 IP: 209.251.28.0/22 IP: 2604:4440::/32 IP: 2607:6380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:d4:6a:1c:6c:ac:b4:4c:65:4b:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: May 6 16:24:27 2025 GMT Not After : Jan 20 18:00:53 2027 GMT Subject: CN=11f590b6-eb6e-4969-824b-0df247220283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:61:52:ba:75:bf:e6:51:ab:62:a7:87:b3: db:ae:6f:6c:ab:b6:e4:8e:40:c7:1b:29:54:d5:d2: 98:be:36:c2:bf:95:05:99:fe:d3:71:6b:e6:40:c5: 39:a7:0a:3e:de:62:ca:4c:8f:48:f8:a1:2d:2a:a6: c7:56:83:8d:d4:f8:21:65:2c:b0:7a:bb:3e:8b:68: a8:51:ae:98:a1:bb:f0:91:10:e9:44:2d:34:f3:d7: a9:a9:2e:5f:00:c6:ee:58:c5:0b:2a:82:b0:8f:2d: bc:9a:fe:8d:62:d0:48:58:1a:86:f4:0e:17:d1:d6: 7f:25:79:da:96:ac:d3:3e:c5:67:95:76:d2:43:e9: ae:a4:e8:b7:1e:c6:6a:18:90:86:d7:65:cd:83:13: 64:58:d9:0d:fb:d5:ce:96:72:91:1a:a2:86:f9:b2: f4:d7:36:2c:e9:61:fb:ab:eb:99:e3:db:0e:bb:0b: 4b:f2:19:9c:05:8f:c4:7f:d7:eb:3b:01:b2:88:86: 8d:c8:04:13:37:e4:cc:b8:49:5e:89:5c:93:a3:b5: 8c:58:8d:54:89:91:81:23:87:07:9b:2e:e7:6d:0d: 66:dc:62:1f:12:5b:10:12:75:83:8d:1f:76:01:bc: 64:aa:f8:a0:8c:76:dd:73:23:23:79:17:0c:1e:94: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.227.216.0/22 27.121.114.0/23 64.190.89.0/24 64.190.102.0/24 69.48.208.0/24 103.135.128.0/23 139.60.76.0/22 148.59.143.0/24 162.120.64.0/22 205.201.28.0/23 207.22.48.0/21 208.74.66.0/24 209.172.4.0/24 209.251.28.0/22 IPv6: 2604:4440::/32 2607:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46165 395208 395301 396139 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:40:62:23:49:62:e0:dc:12:3f:05:71:43:07:59:74:38:53: 2a:71:28:02:df:70:46:a8:e5:e4:46:6f:15:ed:f6:df:20:81: c1:46:80:2f:82:b0:c9:88:1b:e1:9c:a3:1c:93:c9:26:93:bc: b8:0c:05:b2:6d:c7:93:5e:3a:71:08:e0:ad:15:c7:b6:1a:15: c2:ba:17:8d:a1:1f:22:56:5b:b9:39:d6:57:0e:ff:c0:22:e1: 00:20:30:bd:ec:19:e6:ee:73:71:ec:74:7b:95:af:27:94:d8: 89:fa:c5:75:cf:30:9e:ba:b1:0b:b4:cb:54:95:e6:cb:45:88: b7:a2:4f:3e:f9:fc:38:4f:7f:7b:05:ca:a8:db:6d:0e:32:55: cd:18:33:9b:db:cf:57:73:32:08:14:47:43:48:d2:a2:54:3a: 26:29:4b:52:b8:a0:e0:ed:44:6b:cd:98:96:3a:db:a7:b7:91: 75:df:9f:2a:fd:e9:62:66:d0:f2:b0:61:dd:9f:cc:a8:5f:9f: 47:cf:20:2c:7e:10:87:06:ca:94:81:d0:6a:92:a5:e2:d4:27: 35:90:59:34:73:b9:02:b0:db:71:a3:36:ce:89:65:5f:6a:cb: ce:ba:f6:d3:f4:43:56:0f:2d:82:1c:53:58:09:6c:06:fe:95: ed:58:53:67 -----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIUAQ0Mn0MoWEnD1GocbKy0TGVLAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDUwNjE2MjQyN1oXDTI3MDEyMDE4MDA1M1owLzEtMCsGA1UEAxMk MTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIwMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5hUrp1v+ZRq2Knh7Pbrm9sq7bkjkDHGylU 1dKYvjbCv5UFmf7TcWvmQMU5pwo+3mLKTI9I+KEtKqbHVoON1PghZSywers+i2io Ua6YobvwkRDpRC0089epqS5fAMbuWMULKoKwjy28mv6NYtBIWBqG9A4X0dZ/JXna lqzTPsVnlXbSQ+mupOi3HsZqGJCG12XNgxNkWNkN+9XOlnKRGqKG+bL01zYs6WH7 q+uZ49sOuwtL8hmcBY/Ef9frOwGyiIaNyAQTN+TMuEleiVyTo7WMWI1UiZGBI4cH my7nbQ1m3GIfElsQEnWDjR92AbxkqvigjHbdcyMjeRcMHpRgmQIDAQABo4IEjzCC BIswHQYDVR0OBBYEFILjJNi+xoXdT2rVJpNsvgpIMRhTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x MWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzExZjU5MGI2LWViNmUtNDk2OS04 MjRiLTBkZjI0NzIyMDI4My8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcy MjAyODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwgYMGCCsGAQUF BwEHAQH/BHQwcjBaBAIAATBUAwQCF+PYAwQBG3lyAwQAQL5ZAwQAQL5mAwQARTDQ AwQBZ4eAAwQCizxMAwQAlDuPAwQConhAAwQBzckcAwQDzxYwAwQA0EpCAwQA0awE AwQC0fscMBQEAgACMA4DBQAmBERAAwUAJgdjgDApBggrBgEFBQcBCAEB/wQaMBig FjAUAgMAtFUCAwYHyAIDBgglAgMGC2swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANEBiI0li4NwSPwVxQwdZ dDhTKnEoAt9wRqjl5EZvFe323yCBwUaAL4KwyYgb4ZyjHJPJJpO8uAwFsm3Hk146 cQjgrRXHthoVwroXjaEfIlZbuTnWVw7/wCLhACAwvewZ5u5zcex0e5WvJ5TYifrF dc8wnrqxC7TLVJXmy0WIt6JPPvn8OE9/ewXKqNttDjJVzRgzm9vPV3MyCBRHQ0jS olQ6JilLUrig4O1Ea82Yljrbp7eRdd+fKv3pYmbQ8rBh3Z/MqF+fR88gLH4QhwbK lIHQapKl4tQnNZBZNHO5ArDbcaM2zollX2rLzrr20/RDVg8tghxTWAlsBv6V7VhT Zw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:14 2025 by rpki-client