$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer File: 8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer (raw, json) Hash identifier: yQJ8mnj4sXRKjFA50xDQIonubVX1cVpkZYgJKAGCGwc= Subject key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BBB6DF0FBE72650357F3B4180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 01:45:22 +0000 Certificate not after: Sun 06 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 4540 AS: 25827 IP: 66.187.112.0/20 IP: 69.51.192.0/18 IP: 74.50.160.0/19 IP: 74.116.112.0/21 IP: 74.126.96.0/19 IP: 74.221.16.0/20 IP: 104.151.128.0/21 IP: 170.89.192.0/18 IP: 204.8.0.0/22 IP: 205.233.212.0/24 IP: 205.236.148.0/24 IP: 205.236.172.0/24 IP: 2604:6c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:6d:f0:fb:e7:26:50:35:7f:3b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 3 01:45:22 2025 GMT Not After : Feb 6 01:45:22 2028 GMT Subject: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:17:ea:1e:29:05:16:fd:67:1d:cd:07:d8: 2a:e3:d1:5d:13:f4:48:97:b3:09:9a:43:ca:cd:12: cf:08:b5:e6:d5:f2:61:a6:48:51:38:40:16:e5:fd: 84:0a:7f:7b:eb:2c:fa:06:41:f1:ad:fe:a1:6f:0c: f1:67:8d:99:b7:75:6e:3a:b6:1c:0a:10:44:0e:1d: 42:68:72:ae:f1:04:67:71:e9:dd:2e:24:fe:53:1e: 82:c8:f5:32:51:30:ce:95:99:68:c0:52:91:86:51: 3e:97:5f:a3:06:40:0c:cf:cd:43:56:a5:45:59:94: 82:18:3d:38:dc:15:cf:5b:ea:a8:01:df:c2:2e:b0: 66:23:73:7f:cb:82:36:20:56:a7:75:16:5c:a6:87: 29:21:76:f1:bc:34:d9:49:33:68:75:f9:0d:01:80: 55:59:60:e1:31:b3:bc:6c:e6:0f:21:dd:72:94:ac: fc:8b:65:ed:8b:71:83:f8:1a:09:27:d4:86:2f:13: e6:b0:25:d0:60:9a:fd:77:ed:54:3d:fa:6c:4a:9d: f8:77:09:50:ee:a4:4a:8c:de:78:4c:f3:90:f9:b8: c8:7b:9d:db:de:76:c1:63:f8:8e:7d:20:ba:f7:37: 62:ca:8b:30:d4:d9:c4:61:17:2c:2d:28:1a:3e:8b: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.187.112.0/20 69.51.192.0/18 74.50.160.0/19 74.116.112.0/21 74.126.96.0/19 74.221.16.0/20 104.151.128.0/21 170.89.192.0/18 204.8.0.0/22 205.233.212.0/24 205.236.148.0/24 205.236.172.0/24 IPv6: 2604:6c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4540 25827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:37:81:ae:b6:78:30:dc:02:0c:8f:43:d3:e9:12:52:fe:3d: 37:23:8d:15:6b:52:5b:5e:ca:1f:5d:3b:d5:92:14:0e:c1:6c: d7:9a:61:34:a7:8d:bb:48:c3:fc:a6:dd:49:23:0d:d4:ec:19: 22:c3:26:83:f9:f9:60:31:5e:3e:aa:ae:c1:27:97:40:4c:88: 31:48:14:82:23:ee:8a:67:3e:8b:be:6a:c7:ae:dd:9f:4a:77: a6:39:28:cc:c2:b1:09:94:f1:75:54:d1:e6:fb:ce:cd:72:c2: 63:3f:54:55:50:c1:5d:d7:9d:1c:10:a4:f7:96:52:5f:9c:47: 0d:35:34:0e:5a:d2:d0:3b:4b:2f:08:2d:ec:6d:0a:f1:12:8c: 52:82:e5:4d:2d:06:2c:57:ce:29:9b:c5:89:6a:a7:1f:0a:19: 0a:9a:f3:7b:4d:70:4c:10:4c:22:e1:f9:ae:61:c2:d6:aa:dd: 01:c8:8e:6e:b4:67:b6:65:12:ce:1a:9c:b6:63:7e:c1:33:c6: c1:19:c0:d2:75:64:ff:d9:52:f6:bc:a6:f1:78:9e:e2:8e:73: c3:13:90:4c:d0:95:29:f2:80:55:27:04:c9:fb:2e:a5:9d:8b: 5b:79:ae:46:74:79:15:86:4a:1e:1c:8d:4e:ba:e1:76:0a:cf: 8c:ab:83:48 -----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIUAQ0Mn0MoWEu7bfD75yZQNX87QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwMzAxNDUyMloXDTI4MDIwNjAxNDUyMlowLzEtMCsGA1UEAxMk ODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oX6h4pBRb9Zx3NB9gq49FdE/RIl7MJmkPK zRLPCLXm1fJhpkhROEAW5f2ECn976yz6BkHxrf6hbwzxZ42Zt3VuOrYcChBEDh1C aHKu8QRncendLiT+Ux6CyPUyUTDOlZlowFKRhlE+l1+jBkAMz81DVqVFWZSCGD04 3BXPW+qoAd/CLrBmI3N/y4I2IFandRZcpocpIXbxvDTZSTNodfkNAYBVWWDhMbO8 bOYPId1ylKz8i2Xti3GD+BoJJ9SGLxPmsCXQYJr9d+1UPfpsSp34dwlQ7qRKjN54 TPOQ+bjIe53b3nbBY/iOfSC69zdiyosw1NnEYRcsLSgaPouPTwIDAQABo4IEbzCC BGswHQYDVR0OBBYEFNfz36n3QPArUdhCJ/LcwuHfYHUOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg1MTFiOGRjLTc0YmEtNDdlNS1h ZjRhLTdjNGU2Yjc3N2Q5Mi84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3 NzdkOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBARCu3ADBAZFM8ADBAVKMqADBANKdHADBAVKfmAD BARK3RADBANol4ADBAaqWcADBALMCAADBADN6dQDBADN7JQDBADN7KwwDQQCAAIw BwMFACYEbIAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICEbwCAmTjMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AH43ga62eDDcAgyPQ9PpElL+PTcjjRVrUlteyh9dO9WSFA7BbNeaYTSnjbtIw/ym 3UkjDdTsGSLDJoP5+WAxXj6qrsEnl0BMiDFIFIIj7opnPou+aseu3Z9Kd6Y5KMzC sQmU8XVU0eb7zs1ywmM/VFVQwV3XnRwQpPeWUl+cRw01NA5a0tA7Sy8ILextCvES jFKC5U0tBixXzimbxYlqpx8KGQqa83tNcEwQTCLh+a5hwtaq3QHIjm60Z7ZlEs4a nLZjfsEzxsEZwNJ1ZP/ZUva8pvF4nuKOc8MTkEzQlSnygFUnBMn7LqWdi1t5rkZ0 eRWGSh4cjU664XYKz4yrg0g= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:13 2025 by rpki-client