$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer File: df247d2f-5f6f-414c-b8c9-181359f105bf.cer (raw, json) Hash identifier: /+O7jPogAZ8pdH1tlhyannApcOR6dK1M5pjEln5N4Hs= Subject key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AECB9907E062F48D8E502BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 00:45:25 +0000 Certificate not after: Wed 24 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 13855 IP: 24.149.0.0/19 IP: 64.191.8.0/22 IP: 67.212.96.0/19 IP: 69.57.192.0/20 IP: 142.147.101.0/24 IP: 168.203.8.0/22 IP: 192.101.160.0/24 IP: 192.111.20.0/22 IP: 199.168.104.0/22 IP: 209.40.80.0/22 IP: 2607:f070::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b9:90:7e:06:2f:48:d8:e5:02:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 21 00:45:25 2025 GMT Not After : Nov 24 01:45:25 2027 GMT Subject: CN=df247d2f-5f6f-414c-b8c9-181359f105bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:e2:53:e2:dd:2c:f6:02:87:d7:ec:ea:1e: 81:bf:65:88:83:34:7b:59:bf:cb:cf:db:94:ed:00: 00:b1:7b:fa:26:36:de:ad:3f:4a:63:b1:e4:07:23: 7e:ff:18:67:64:89:b3:68:25:5f:84:b7:ce:83:49: e8:ee:f3:36:ef:3f:65:95:26:41:e7:15:07:a2:bf: 9d:9b:b5:b1:74:c6:4f:e1:a3:26:f0:a4:23:37:f0: a0:3d:ab:31:14:ca:3c:65:57:fe:8f:14:c4:06:04: 01:77:0e:29:77:e8:18:23:e0:ae:e2:f2:af:82:36: e8:e0:a6:62:45:bb:26:a0:26:b6:84:e8:f4:77:9f: d3:15:9a:8c:ca:e2:03:97:ea:0b:14:d5:3f:e2:f2: d0:af:64:81:e6:83:d8:dc:72:d0:6d:8f:79:f3:d5: b4:a3:e3:e8:45:11:82:80:ee:f8:c1:9f:3f:96:71: 8b:da:03:d4:07:30:24:30:fd:7a:60:13:51:b9:09: 23:c8:ea:63:4d:bc:52:44:3a:53:56:92:ce:ac:5a: 48:6b:50:d9:06:fb:ea:8e:8a:e2:52:51:c3:05:26: 3e:b1:17:11:96:93:3a:47:9f:72:c6:25:8c:fd:82: 37:38:29:7a:05:59:24:0a:5d:e1:85:25:a3:37:7e: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 24.149.0.0/19 64.191.8.0/22 67.212.96.0/19 69.57.192.0/20 142.147.101.0/24 168.203.8.0/22 192.101.160.0/24 192.111.20.0/22 199.168.104.0/22 209.40.80.0/22 IPv6: 2607:f070::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13855 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:45:c1:da:36:33:c3:74:cf:2d:e1:a1:22:11:3c:aa:2b:53: ba:58:95:c2:ab:36:c7:51:23:47:63:ec:c9:89:06:95:d2:1b: 89:ce:70:fe:c1:a4:b6:19:4e:47:ce:d2:16:c3:a8:9d:9d:28: 57:fb:bf:fa:b2:c7:a7:af:5a:db:40:23:72:18:29:12:8a:99: c1:f3:09:8b:e1:13:a7:02:e6:96:93:fd:ee:c2:57:9f:5b:c3: 0c:e9:64:c7:c5:aa:65:aa:a2:49:58:1b:d1:f0:2d:08:ea:95: 5a:2e:f6:9b:23:6b:41:b2:62:d0:ab:91:3f:02:ef:3d:fd:ba: 57:d4:6b:b7:82:4d:d9:a3:1e:63:14:c7:61:73:69:e7:5e:42: 4a:a6:d2:3f:14:2e:a4:45:bb:2e:a8:9b:7a:01:96:ff:17:a0: 87:30:0d:4b:ba:b3:af:76:fb:c7:f2:7b:6d:96:d8:64:7d:17: 82:76:12:7c:c7:22:1f:e3:00:76:9c:a7:45:e1:4a:52:58:0b: 53:b4:71:ef:56:62:f7:b1:2c:f7:f5:c9:d0:4c:e1:ab:d8:4c: cc:97:32:31:a7:95:72:13:a6:5c:64:d4:f1:ac:95:9b:c9:74: 50:f4:50:07:3f:cc:71:09:75:85:a4:02:bb:8e:5c:f8:b5:41: e0:eb:9d:5e -----BEGIN CERTIFICATE----- MIIHTTCCBjWgAwIBAgIUAQ0Mn0MoWErsuZB+Bi9I2OUCuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMTAwNDUyNVoXDTI3MTEyNDAxNDUyNVowLzEtMCsGA1UEAxMk ZGYyNDdkMmYtNWY2Zi00MTRjLWI4YzktMTgxMzU5ZjEwNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfziU+LdLPYCh9fs6h6Bv2WIgzR7Wb/Lz9uU 7QAAsXv6JjberT9KY7HkByN+/xhnZImzaCVfhLfOg0no7vM27z9llSZB5xUHor+d m7WxdMZP4aMm8KQjN/CgPasxFMo8ZVf+jxTEBgQBdw4pd+gYI+Cu4vKvgjbo4KZi RbsmoCa2hOj0d5/TFZqMyuIDl+oLFNU/4vLQr2SB5oPY3HLQbY9589W0o+PoRRGC gO74wZ8/lnGL2gPUBzAkMP16YBNRuQkjyOpjTbxSRDpTVpLOrFpIa1DZBvvqjori UlHDBSY+sRcRlpM6R59yxiWM/YI3OCl6BVkkCl3hhSWjN35GOQIDAQABo4IEXzCC BFswHQYDVR0OBBYEFAO7oQ8UssTHXsi12S6BLxVIDUeqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k ZjI0N2QyZi01ZjZmLTQxNGMtYjhjOS0xODEzNTlmMTA1YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2RmMjQ3ZDJmLTVmNmYtNDE0Yy1i OGM5LTE4MTM1OWYxMDViZi9kZjI0N2QyZi01ZjZmLTQxNGMtYjhjOS0xODEzNTlm MTA1YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMEIEAgABMDwDBAUYlQADBAJAvwgDBAVD1GADBARFOcADBACOk2UD BAKoywgDBADAZaADBALAbxQDBALHqGgDBALRKFAwDQQCAAIwBwMFACYH8HAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICNh8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV0XB2jYzw3TPLeGhIhE8 qitTuliVwqs2x1EjR2PsyYkGldIbic5w/sGkthlOR87SFsOonZ0oV/u/+rLHp69a 20AjchgpEoqZwfMJi+ETpwLmlpP97sJXn1vDDOlkx8WqZaqiSVgb0fAtCOqVWi72 myNrQbJi0KuRPwLvPf26V9Rrt4JN2aMeYxTHYXNp515CSqbSPxQupEW7LqibegGW /xeghzANS7qzr3b7x/J7bZbYZH0XgnYSfMciH+MAdpynReFKUlgLU7Rx71Zi97Es 9/XJ0Ezhq9hMzJcyMaeVchOmXGTU8ayVm8l0UPRQBz/McQl1haQCu45c+LVB4Oud Xg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:52 2025 by rpki-client