$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer File: b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer (raw, json) Hash identifier: 4VxqkEOe9W9PGrml3kvP1HF42k1Om/41PVr7cQQ2n20= Subject key identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B992DA21B81050B91E5B7C600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 19:18:19 +0000 Certificate not after: Mon 31 May 2027 00:45:34 +0000 Subordinate resources: IP: 141.109.0.0/18 IP: 141.109.96.0 -- 141.109.159.255 IP: 141.109.176.0 -- 141.109.239.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:2d:a2:1b:81:05:0b:91:e5:b7:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 21 19:18:19 2025 GMT Not After : May 31 00:45:34 2027 GMT Subject: CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:34:12:7d:91:8b:cb:54:b8:85:99:69:08:6c: 44:83:80:8c:8f:74:4a:00:c9:04:cc:48:f0:eb:5e: 0d:9a:2c:1e:8e:c7:7c:42:ec:3a:eb:6d:e3:1b:26: 3d:e6:fb:a2:99:00:94:5c:32:b7:6b:e3:7c:21:15: 33:48:10:f1:2f:bd:1a:60:21:39:2a:61:23:15:24: 6c:bf:e0:57:38:57:34:4a:4f:e5:0b:63:9d:f2:46: 93:63:7e:84:a1:45:71:41:be:7f:85:49:0a:46:bf: c1:a6:d5:bd:e0:a4:f8:a5:c4:9a:ef:8f:62:1f:99: 63:1e:b7:35:d8:10:38:65:21:e6:73:49:06:0f:4e: 92:03:34:ce:38:24:e8:b2:d5:92:39:bb:d6:be:03: 3b:32:4b:b3:d9:83:86:55:af:39:2e:8f:6b:d9:d7: d0:f9:af:29:90:b7:d1:cc:c7:d1:2a:75:4a:6a:de: 9d:94:b8:2a:ee:59:3f:49:f7:6d:58:f5:5e:5c:ec: 0b:8f:ce:90:5d:f5:4e:3e:9e:0e:93:b5:ce:03:01: d5:4d:bc:b3:36:54:15:cd:dd:5f:3c:0f:bd:ef:9d: 5a:36:10:4d:99:68:22:fa:d9:f4:ac:ad:54:f5:fd: 24:22:fd:5e:3b:de:5d:b7:6e:eb:3d:a4:50:a5:a7: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 141.109.0.0/18 141.109.96.0-141.109.159.255 141.109.176.0-141.109.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d6:b6:c0:25:e8:5a:5e:49:f2:05:e6:cf:18:b0:8b:c1:20: 08:1d:dd:e1:ef:b1:84:45:5a:be:18:1a:51:8a:8f:bd:03:10: 1d:01:ad:9c:e9:62:8a:d9:cb:06:fe:69:74:21:93:ae:59:a1: 93:17:94:c7:88:5b:12:98:77:d4:08:5b:dc:ff:45:5f:14:6c: 58:6c:66:68:e5:39:21:b9:55:24:99:27:bf:8d:54:fc:cf:f6: 57:94:68:d6:8b:93:0e:2d:09:69:22:d5:64:5e:0d:3f:6e:b8: 39:bc:52:0e:eb:96:2e:5a:2d:ea:72:1a:b9:79:ba:87:de:9c: c2:37:35:b7:69:ea:f2:41:b5:7a:c0:2a:a3:a4:bf:2f:c2:84: f2:5e:b5:84:7f:4a:70:78:d1:54:55:04:5e:94:25:d0:e9:f4: 64:01:9a:1c:4a:ae:77:b1:93:c9:f0:8a:e1:cb:f9:c3:50:cc: db:33:f3:c3:c7:41:b5:d6:3b:25:26:31:24:a8:cd:55:0d:b2: c9:19:2c:4d:d0:c9:00:7e:cc:a1:f3:c1:42:49:e9:d6:03:cc: 12:26:f0:24:14:67:bc:2d:27:6e:73:8f:80:63:32:33:d2:5d: 84:13:68:28:0a:af:e0:05:f7:aa:e7:2b:56:64:83:fe:42:ff: e2:1a:6f:2c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuZLaIbgQULkeW3xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAyMTE5MTgxOVoXDTI3MDUzMTAwNDUzNFowLzEtMCsGA1UEAxMk YjdjZmU3NGMtZGI3NS00NDQ2LTgxZmQtMWFkMTBhNjAxZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjQSfZGLy1S4hZlpCGxEg4CMj3RKAMkEzEjw 614Nmiwejsd8Quw6623jGyY95vuimQCUXDK3a+N8IRUzSBDxL70aYCE5KmEjFSRs v+BXOFc0Sk/lC2Od8kaTY36EoUVxQb5/hUkKRr/BptW94KT4pcSa749iH5ljHrc1 2BA4ZSHmc0kGD06SAzTOOCTostWSObvWvgM7Mkuz2YOGVa85Lo9r2dfQ+a8pkLfR zMfRKnVKat6dlLgq7lk/SfdtWPVeXOwLj86QXfVOPp4Ok7XOAwHVTbyzNlQVzd1f PA+9751aNhBNmWgi+tn0rK1U9f0kIv1eO95dt27rPaRQpadyYwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGdeQXzvjqDqUOeJnFECtNkHlgiqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i N2NmZTc0Yy1kYjc1LTQ0NDYtODFmZC0xYWQxMGE2MDFmMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I3Y2ZlNzRjLWRiNzUtNDQ0Ni04 MWZkLTFhZDEwYTYwMWYyYi9iN2NmZTc0Yy1kYjc1LTQ0NDYtODFmZC0xYWQxMGE2 MDFmMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMCgEAgABMCIDBAaNbQAwDAMEBY1tYAMEBY1tgDAMAwQEjW2wAwQE jW3gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIPWtsAl6FpeSfIF5s8YsIvBIAgd3eHvsYRFWr4YGlGKj70D EB0BrZzpYorZywb+aXQhk65ZoZMXlMeIWxKYd9QIW9z/RV8UbFhsZmjlOSG5VSSZ J7+NVPzP9leUaNaLkw4tCWki1WReDT9uuDm8Ug7rli5aLepyGrl5uofenMI3Nbdp 6vJBtXrAKqOkvy/ChPJetYR/SnB40VRVBF6UJdDp9GQBmhxKrnexk8nwiuHL+cNQ zNsz88PHQbXWOyUmMSSozVUNsskZLE3QyQB+zKHzwUJJ6dYDzBIm8CQUZ7wtJ25z j4BjMjPSXYQTaCgKr+AF96rnK1Zkg/5C/+Iabyw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:43 2025 by rpki-client