$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer File: e9f20d36-05ed-4189-8230-12eaed2b41c6.cer (raw, json) Hash identifier: 6qXegnihqukA53iN1w3EMOP6UMmbUrOkTWrn1yVeUnc= Subject key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AAC83EE825F9E0028F8D27F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Jul 2025 00:45:37 +0000 Certificate not after: Mon 01 Nov 2027 00:45:37 +0000 Subordinate resources: AS: 2567 IP: 136.249.0.0 -- 136.254.255.255 IP: 137.144.0.0/16 IP: 163.183.0.0 -- 163.188.255.255 IP: 192.12.34.0 -- 192.12.40.255 IP: 192.23.0.0/16 IP: 192.31.32.0 -- 192.31.36.255 IP: 192.52.229.0/24 IP: 192.58.37.0 -- 192.58.40.255 IP: 199.6.128.0/17 IP: 204.17.157.0 -- 204.17.162.255 IP: 2620:0:1700::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:83:ee:82:5f:9e:00:28:f8:d2:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 29 00:45:37 2025 GMT Not After : Nov 1 00:45:37 2027 GMT Subject: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:08:d7:e9:6c:81:2a:6d:5c:4c:23:88:f3: 5a:56:4d:3c:a0:c1:22:49:75:d4:e0:d3:18:bb:eb: 28:12:63:32:f0:10:bd:7d:59:64:02:7a:0e:88:85: f7:54:bd:b9:16:a3:78:76:18:8c:0f:9f:ee:93:4b: 8a:42:2b:87:f0:c1:06:04:31:fb:58:2a:05:c2:8e: 00:73:98:f8:22:73:33:66:96:23:b2:91:e0:08:48: 5c:8a:c5:31:7d:50:ed:f1:eb:cf:21:d9:76:3f:d5: d3:1d:97:c7:0e:28:2b:bf:06:86:38:11:9b:2d:5b: 2e:7f:f3:09:85:22:2e:8d:21:c5:ab:03:de:5b:5f: 77:9d:e0:9d:31:7f:0d:1e:7e:5f:cd:78:4b:d6:4b: 30:5d:62:9f:9e:f3:f7:a9:6a:58:51:b9:e9:39:e9: aa:72:6f:0f:24:aa:c4:e0:91:54:08:5c:88:28:28: 39:5b:4d:52:65:86:64:c4:22:68:3a:68:4d:e5:e0: b0:d1:32:7d:fe:f3:9f:02:3f:a1:45:12:40:02:62: d9:03:b2:dd:09:9c:58:8e:11:a1:9b:22:31:25:eb: 3f:ed:cb:d3:33:19:bf:15:f7:f1:3c:a2:b8:25:ed: e8:b6:63:a1:29:0a:d0:1b:47:5b:c7:9c:da:7f:22: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 136.249.0.0-136.254.255.255 137.144.0.0/16 163.183.0.0-163.188.255.255 192.12.34.0-192.12.40.255 192.23.0.0/16 192.31.32.0-192.31.36.255 192.52.229.0/24 192.58.37.0-192.58.40.255 199.6.128.0/17 204.17.157.0-204.17.162.255 IPv6: 2620:0:1700::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2567 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:17:e8:a3:6d:f1:39:59:f8:8e:01:62:78:54:94:f1:11:4d: d1:e6:8a:da:d2:b8:bd:9c:6a:17:ea:3f:f2:54:d0:16:0a:a1: 7c:f0:fc:ff:54:70:cc:ac:b1:72:91:54:e8:41:ac:2c:ee:e6: db:dc:ed:91:e4:c3:21:95:b9:8b:c8:52:05:4c:05:0f:16:84: 51:84:7f:06:41:2c:19:00:6d:1f:04:58:fe:d5:a8:d5:8a:80: 03:8f:44:4d:7d:89:2e:14:da:77:24:a8:e5:19:02:9c:0f:25: 71:af:ec:0e:20:44:42:90:4e:92:19:00:27:2b:7e:44:18:5b: 2c:c3:d6:0e:72:a5:35:d3:66:27:00:fb:d3:90:7d:8f:1d:60: 0e:50:78:90:4a:8f:e8:ba:ff:3b:0e:b6:4c:53:96:29:d6:e6: fc:fe:7e:ce:9e:eb:30:b4:98:08:af:ed:36:54:b9:52:ee:d4: 28:09:eb:38:6a:1f:cf:14:b1:de:a0:9a:47:64:5b:00:59:9a: 19:76:e9:d9:6b:fc:df:3b:f3:12:a8:f0:41:47:36:7e:dd:71: 48:fa:10:f8:02:c7:94:0d:4a:24:9e:f8:46:9e:94:6a:97:03: e9:63:44:9d:5c:70:0c:b1:ea:0e:83:5f:8f:4b:f9:c5:ef:a9: 40:74:dd:24 -----BEGIN CERTIFICATE----- MIIHezCCBmOgAwIBAgIUAQ0Mn0MoWEqsg+6CX54AKPjSfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyOTAwNDUzN1oXDTI3MTEwMTAwNDUzN1owLzEtMCsGA1UEAxMk ZTlmMjBkMzYtMDVlZC00MTg5LTgyMzAtMTJlYWVkMmI0MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMI1+lsgSptXEwjiPNaVk08oMEiSXXU4NMY u+soEmMy8BC9fVlkAnoOiIX3VL25FqN4dhiMD5/uk0uKQiuH8MEGBDH7WCoFwo4A c5j4InMzZpYjspHgCEhcisUxfVDt8evPIdl2P9XTHZfHDigrvwaGOBGbLVsuf/MJ hSIujSHFqwPeW193neCdMX8NHn5fzXhL1kswXWKfnvP3qWpYUbnpOemqcm8PJKrE 4JFUCFyIKCg5W01SZYZkxCJoOmhN5eCw0TJ9/vOfAj+hRRJAAmLZA7LdCZxYjhGh myIxJes/7cvTMxm/FffxPKK4Je3otmOhKQrQG0dbx5zafyJM6wIDAQABo4IEjTCC BIkwHQYDVR0OBBYEFL7ejbLOhxVD5GBS3pCdG8LuiOpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l OWYyMGQzNi0wNWVkLTQxODktODIzMC0xMmVhZWQyYjQxYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U5ZjIwZDM2LTA1ZWQtNDE4OS04 MjMwLTEyZWFlZDJiNDFjNi9lOWYyMGQzNi0wNWVkLTQxODktODIzMC0xMmVhZWQy YjQxYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgZEGCCsGAQUF BwEHAQH/BIGBMH8wbAQCAAEwZjAKAwMAiPkDAwCI/gMDAImQMAoDAwCjtwMDAKO8 MAwDBAHADCIDBADADCgDAwDAFzAMAwQFwB8gAwQAwB8kAwQAwDTlMAwDBADAOiUD BADAOigDBAfHBoAwDAMEAMwRnQMEAMwRojAPBAIAAjAJAwcEJiAAABcAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAgoHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADUX6KNt8TlZ+I4BYnhUlPER TdHmitrSuL2cahfqP/JU0BYKoXzw/P9UcMyssXKRVOhBrCzu5tvc7ZHkwyGVuYvI UgVMBQ8WhFGEfwZBLBkAbR8EWP7VqNWKgAOPRE19iS4U2nckqOUZApwPJXGv7A4g REKQTpIZACcrfkQYWyzD1g5ypTXTZicA+9OQfY8dYA5QeJBKj+i6/zsOtkxTlinW 5vz+fs6e6zC0mAiv7TZUuVLu1CgJ6zhqH88Usd6gmkdkWwBZmhl26dlr/N878xKo 8EFHNn7dcUj6EPgCx5QNSiSe+EaelGqXA+ljRJ1ccAyx6g6DX49L+cXvqUB03SQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:36 2025 by rpki-client