$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer File: 1e536701-e40c-420a-abd0-993bf8e0eac8.cer (raw, json) Hash identifier: QhEOgz5Y8ZrNHpLhvta9nHrW6gi2AHlPsGic2oJzywc= Subject key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B2759EE338853CF151423FC20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 00:45:25 +0000 Certificate not after: Wed 15 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 11563 IP: 64.29.64.0/19 IP: 66.180.128.0/19 IP: 2607:f6a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:59:ee:33:88:53:cf:15:14:23:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 11 00:45:25 2025 GMT Not After : Dec 15 01:45:25 2027 GMT Subject: CN=1e536701-e40c-420a-abd0-993bf8e0eac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:59:5b:9b:8b:99:0f:b6:80:08:6c:5f:ee:e4: ab:3b:2d:b1:12:75:be:50:0a:c6:d8:ec:3c:bf:6f: c4:b0:bd:bf:89:42:7b:55:14:97:ff:ba:89:cb:b4: 71:a4:7c:8f:c7:cf:92:89:36:bf:49:a6:94:9a:08: 7c:dc:e8:58:da:8c:22:9c:18:a8:ea:cd:e6:db:3f: 37:e3:05:c9:8c:5a:5c:9c:8b:d5:f4:41:71:92:6d: 38:f7:0f:4f:a9:1c:35:85:a4:5f:af:55:b4:e5:eb: 72:f9:ca:35:33:0f:03:20:aa:ef:ed:cb:b6:b9:e7: a0:cb:80:72:1f:bc:e6:ce:2a:26:03:43:55:ac:b3: b9:ce:7a:94:6a:a7:eb:9a:65:32:e0:8c:af:92:05: e6:0f:4e:15:a7:df:ea:b0:52:28:e0:31:bc:fd:57: ea:f4:00:0e:78:00:72:7f:15:71:55:85:0c:e4:92: b8:8a:84:ce:c4:9a:e2:db:c5:a3:40:e3:91:d8:88: 88:df:28:dd:6b:f9:de:26:8f:e0:75:50:7d:5b:4c: e0:09:ec:fe:aa:1f:c1:45:ea:06:89:f2:bb:ee:d4: 08:1c:24:09:d5:8b:1a:37:a8:0e:45:b6:12:2f:72: b6:f6:79:b4:fc:aa:2f:58:4f:12:05:e2:b7:27:15: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.29.64.0/19 66.180.128.0/19 IPv6: 2607:f6a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11563 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a5:6c:f7:93:6c:1d:84:a9:74:6c:35:c3:fd:e2:3a:14:d9: 9a:c9:2b:03:40:09:a5:7d:44:5b:d4:7b:73:39:80:09:69:a5: 2c:c6:86:e4:d2:95:c6:95:33:8f:05:a3:98:b3:cc:f8:7f:bb: ce:d3:a2:f2:b3:e7:98:48:f0:0b:4e:f9:e7:1d:66:8a:7c:45: 8b:b9:1b:89:06:ab:02:ab:44:11:28:ec:ce:4e:37:86:c9:92: d1:4a:81:1f:d0:69:9e:20:c6:5f:b3:a7:e1:8f:29:0a:8a:ab: 00:42:42:ca:b7:8c:92:7b:5f:a4:a8:c2:b9:28:e2:8e:ca:f4: dd:3b:63:64:a7:f3:57:f3:fd:aa:85:a8:08:f4:0b:46:0e:65: 1e:07:ec:11:4f:12:23:f9:d9:74:67:6a:13:35:9a:95:be:16: 7d:d7:51:05:f3:a7:ac:c3:54:b7:13:30:55:06:92:a1:b5:c9: 30:9d:1b:a4:4a:9c:6b:06:4b:f8:56:2e:2c:ac:15:f8:e2:3e: b1:d7:9e:3b:b0:90:a7:03:80:9a:a9:07:b8:f1:a8:87:dc:09: c2:97:45:80:27:a2:a2:1f:94:65:d4:41:66:a6:cc:44:ed:e9: 55:12:05:6b:57:b0:f4:c7:81:44:ae:cf:28:43:1b:21:4c:0e: c3:3d:5b:8c -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEsnWe4ziFPPFRQj/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxMTAwNDUyNVoXDTI3MTIxNTAxNDUyNVowLzEtMCsGA1UEAxMk MWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBlYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vlbm4uZD7aACGxf7uSrOy2xEnW+UArG2Ow8 v2/EsL2/iUJ7VRSX/7qJy7RxpHyPx8+SiTa/SaaUmgh83OhY2owinBio6s3m2z83 4wXJjFpcnIvV9EFxkm049w9PqRw1haRfr1W05ety+co1Mw8DIKrv7cu2ueegy4By H7zmziomA0NVrLO5znqUaqfrmmUy4IyvkgXmD04Vp9/qsFIo4DG8/Vfq9AAOeABy fxVxVYUM5JK4ioTOxJri28WjQOOR2IiI3yjda/neJo/gdVB9W0zgCez+qh/BReoG ifK77tQIHCQJ1YsaN6gORbYSL3K29nm0/KovWE8SBeK3JxUVNwIDAQABo4IELzCC BCswHQYDVR0OBBYEFEzo9JJxRCZSCUH5UD+ALishzopbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x ZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFlNTM2NzAxLWU0MGMtNDIwYS1h YmQwLTk5M2JmOGUwZWFjOC8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhl MGVhYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVAHUADBAVCtIAwDQQCAAIwBwMFACYH9qAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLSswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOqVs95NsHYSpdGw1w/3i OhTZmskrA0AJpX1EW9R7czmACWmlLMaG5NKVxpUzjwWjmLPM+H+7ztOi8rPnmEjw C0755x1minxFi7kbiQarAqtEESjszk43hsmS0UqBH9BpniDGX7On4Y8pCoqrAEJC yreMkntfpKjCuSjijsr03TtjZKfzV/P9qoWoCPQLRg5lHgfsEU8SI/nZdGdqEzWa lb4WfddRBfOnrMNUtxMwVQaSobXJMJ0bpEqcawZL+FYuLKwV+OI+sdeeO7CQpwOA mqkHuPGoh9wJwpdFgCeioh+UZdRBZqbMRO3pVRIFa1ew9MeBRK7PKEMbIUwOwz1b jA== -----END CERTIFICATE-----Generated at Thu Oct 9 11:38:24 2025 by rpki-client