$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer File: 7895ee85-2a16-4e54-9c5b-a9a05908877e.cer (raw, json) Hash identifier: +AlVrEBSEKqkA7VDJm28v4JhD17uGK2Z+u9xUHMHUIA= Subject key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491A21EF2119920C3FA01C4920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 21:33:13 +0000 Certificate not after: Wed 09 Jun 2027 20:33:13 +0000 Subordinate resources: AS: 16832 AS: 62741 AS: 394423 IP: 138.128.232.0/21 IP: 192.161.66.0/23 IP: 208.117.64.0/20 IP: 208.123.128.0/19 IP: 216.41.136.0/22 IP: 2605:2b80::/32 IP: 2606:9f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:21:ef:21:19:92:0c:3f:a0:1c:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 6 21:33:13 2025 GMT Not After : Jun 9 20:33:13 2027 GMT Subject: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:be:53:d0:db:78:a1:a9:85:f2:25:be:16: 0d:92:57:e2:41:6a:1b:1a:57:82:77:b3:48:9e:1b: 84:89:ac:8a:99:72:5d:5d:d9:33:2d:64:16:6f:cf: 2f:e8:c9:32:3b:44:7b:bf:9b:4d:0a:96:e0:a7:76: b6:b5:02:c9:b7:f1:e2:c2:e1:f8:f6:ca:22:0f:ad: eb:3e:11:10:af:32:08:f5:5b:04:78:a4:d2:ee:9f: a5:ea:01:b9:e7:78:06:cb:48:12:2d:61:df:10:3e: 8a:18:7f:f2:c8:22:86:50:d1:a8:6c:df:77:92:b2: 33:8e:e2:7d:67:8c:7b:65:dd:66:2c:af:d5:ec:78: 22:5f:55:03:e7:fb:da:4b:09:f9:39:6a:17:ff:52: df:2c:c0:56:0f:50:e2:71:da:3b:85:d0:bb:5d:57: 2c:60:71:d4:da:51:df:5b:cc:09:f9:7b:40:d0:0c: 13:af:18:69:01:f1:31:f2:b4:6b:af:54:22:1c:d2: 84:8d:12:ea:f6:a9:d7:7a:90:8a:c3:9e:1a:fb:ff: e6:66:ee:d8:55:5a:b4:e6:cd:96:39:b4:40:d7:c4: 03:51:80:1a:8c:ac:5d:55:4f:19:31:4f:2f:45:f9: ed:1b:12:b7:00:36:3a:7e:d0:6b:9c:03:d0:d0:38: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 138.128.232.0/21 192.161.66.0/23 208.117.64.0/20 208.123.128.0/19 216.41.136.0/22 IPv6: 2605:2b80::/32 2606:9f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16832 62741 394423 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:91:c5:3d:13:94:94:86:d4:2a:e7:11:23:4e:79:ec:fe:6d: 56:e1:b7:95:4b:49:08:fd:dd:98:06:ec:5e:bd:b9:aa:78:2f: 5f:26:e3:0c:c4:38:aa:cc:93:8b:da:82:1a:c0:6e:42:91:ee: 9c:50:8a:e7:66:4e:a6:5c:21:0d:ff:33:64:ac:25:4f:4e:63: 27:b0:27:f8:b9:ca:5f:44:7e:2a:1b:3f:6b:85:a2:dc:b7:93: 16:6c:85:65:5a:59:7e:64:16:40:47:cc:a2:5b:fe:85:64:b8: 60:67:5e:50:ac:69:d9:91:e8:58:c7:59:a8:3f:97:b4:16:ee: 58:bf:d8:43:8f:c8:56:f4:34:83:31:cc:1a:67:52:d7:cb:d6: 9b:05:e2:2c:14:ff:34:8c:bb:1b:24:25:95:5e:ec:12:1c:9b: f1:30:51:cc:2e:e3:f5:0f:8e:73:5a:48:fe:f4:73:fa:fd:d1: 92:44:e1:12:fe:8b:01:64:0e:3e:1f:e9:49:43:f7:b2:b8:ff: 35:0f:c8:57:fb:b2:d8:e5:0a:95:64:6d:94:1a:e4:08:07:20: d8:5e:2f:39:d3:6a:8e:3e:d8:4f:e8:9a:43:d2:af:ab:0c:74: ab:03:68:32:77:e1:76:ea:96:09:56:d0:2c:78:b9:44:44:3f: c7:73:27:cd -----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWEkaIe8hGZIMP6AcSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNjIxMzMxM1oXDTI3MDYwOTIwMzMxM1owLzEtMCsGA1UEAxMk Nzg5NWVlODUtMmExNi00ZTU0LTljNWItYTlhMDU5MDg4NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+q+U9DbeKGphfIlvhYNklfiQWobGleCd7NI nhuEiayKmXJdXdkzLWQWb88v6MkyO0R7v5tNCpbgp3a2tQLJt/HiwuH49soiD63r PhEQrzII9VsEeKTS7p+l6gG553gGy0gSLWHfED6KGH/yyCKGUNGobN93krIzjuJ9 Z4x7Zd1mLK/V7HgiX1UD5/vaSwn5OWoX/1LfLMBWD1Dicdo7hdC7XVcsYHHU2lHf W8wJ+XtA0AwTrxhpAfEx8rRrr1QiHNKEjRLq9qnXepCKw54a+//mZu7YVVq05s2W ObRA18QDUYAajKxdVU8ZMU8vRfntGxK3ADY6ftBrnAPQ0Dj+CQIDAQABo4IEUjCC BE4wHQYDVR0OBBYEFLOho60qivjUVe8d56glfhF5svUqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ODk1ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEwNTkwODg3N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc4OTVlZTg1LTJhMTYtNGU1NC05 YzViLWE5YTA1OTA4ODc3ZS83ODk1ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEwNTkw ODg3N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCQEAgABMB4DBAOKgOgDBAHAoUIDBATQdUADBAXQe4ADBALYKYgw FAQCAAIwDgMFACYFK4ADBQAmBp+AMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAkHA AgMA9RUCAwYEtzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqkcU9E5SUhtQq5xEjTnns/m1W4beVS0kI/d2Y BuxevbmqeC9fJuMMxDiqzJOL2oIawG5Cke6cUIrnZk6mXCEN/zNkrCVPTmMnsCf4 ucpfRH4qGz9rhaLct5MWbIVlWll+ZBZAR8yiW/6FZLhgZ15QrGnZkehYx1moP5e0 Fu5Yv9hDj8hW9DSDMcwaZ1LXy9abBeIsFP80jLsbJCWVXuwSHJvxMFHMLuP1D45z Wkj+9HP6/dGSROES/osBZA4+H+lJQ/eyuP81D8hX+7LY5QqVZG2UGuQIByDYXi85 02qOPthP6JpD0q+rDHSrA2gyd+F26pYJVtAseLlERD/HcyfN -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:38 2025 by rpki-client