$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer File: 618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer (raw, json) Hash identifier: 7mO4jBopdsP/5bUdeW3IA3Eh80aUmpNk6ShvmNsh264= Subject key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B2968FC3755855E3DC5AC4300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 18:27:22 +0000 Certificate not after: Sun 20 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11641 AS: 14436 AS: 20439 AS: 21894 AS: 30181 AS: 36774 AS: 54802 AS: 393711 IP: 173.240.160.0/20 IP: 199.16.136.0/21 IP: 199.187.152.0/21 IP: 206.108.40.0/21 IP: 206.225.192.0/19 IP: 2601:5000::/24 IP: 2620:103:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:68:fc:37:55:85:5e:3d:c5:ac:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 11 18:27:22 2025 GMT Not After : Jun 20 00:45:33 2027 GMT Subject: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:92:74:32:1b:f7:20:ef:36:ae:bc:2f:c2: 3a:6c:ae:80:03:6e:04:b2:fb:d7:d0:da:c0:c7:f9: ff:86:41:7a:d9:21:51:44:38:92:71:69:0a:f2:62: 18:36:d0:1d:3f:fd:db:cc:27:d2:b2:5f:54:43:0c: 83:d0:4b:7b:e7:55:ba:2a:03:c3:3b:86:d5:27:f8: de:26:c7:3e:81:1e:b9:60:77:2a:7a:c6:9b:59:c4: ae:7c:38:dc:ce:c9:0e:3b:8b:1d:65:48:be:b3:35: 44:ee:30:13:56:65:1d:4e:3e:94:4b:4c:23:16:48: fd:fe:1b:3f:18:77:27:1f:b5:8a:dc:93:52:fd:fe: dd:05:ce:cc:ec:32:a5:78:a7:c9:7e:a3:87:6a:37: f4:fd:3e:6c:36:73:d4:20:cf:72:e8:a0:71:35:25: 14:5d:86:82:18:f5:c9:94:3c:e7:d6:aa:79:bb:1b: 65:3b:4e:e6:5a:af:b3:68:c8:a1:4b:b2:eb:e0:a9: be:59:27:1a:68:fd:ef:d0:c5:d4:57:69:27:40:3f: 89:bc:67:f2:dc:3c:ad:8f:c6:d4:dd:b5:82:1c:ce: 82:b7:78:05:68:f9:42:8d:ec:2b:04:de:12:30:d6: 21:6a:fe:e8:5a:13:ac:06:26:be:10:7c:fe:d2:ad: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 173.240.160.0/20 199.16.136.0/21 199.187.152.0/21 206.108.40.0/21 206.225.192.0/19 IPv6: 2601:5000::/24 2620:103:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11641 14436 20439 21894 30181 36774 54802 393711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ba:41:bc:f9:2e:80:21:2d:75:e2:af:a6:f4:c2:ce:03:aa: 86:59:3e:49:ed:8c:32:cb:37:ba:0c:20:a7:16:18:9f:7a:4b: 7f:1b:95:40:28:e1:40:ef:21:64:bf:12:b4:52:3f:87:04:6b: 1e:42:96:3f:95:37:9c:b9:3d:4d:b1:7c:0f:64:8c:34:19:8e: 96:40:ba:bd:2e:5a:36:9c:c0:e5:ba:2a:07:02:1f:67:a7:52: 97:45:65:10:0e:fe:74:1d:da:9a:3a:9a:37:00:d0:21:90:1b: e4:eb:9e:1f:28:cf:7f:c5:17:f7:40:db:06:15:75:18:c7:a7: da:28:6f:99:45:5c:a3:7a:56:5e:a4:e8:7f:05:b5:75:22:22: ed:cb:83:56:40:a0:bc:4a:94:0d:d8:8f:5c:85:57:a7:d5:57: 27:eb:77:2a:d0:54:20:f5:9d:e0:de:a5:09:76:13:87:38:e5: 26:76:6a:fc:6e:65:84:10:94:64:0d:a9:84:3c:94:fa:18:16: c2:0b:11:76:0a:a3:e7:b3:8b:c0:ee:b0:0f:6b:4b:b5:66:94: eb:d9:14:82:8c:37:e7:3a:9b:18:f0:6a:34:ed:da:90:f2:b0: 2c:27:93:dd:4f:3e:d9:4d:58:ab:0b:13:e5:41:d0:53:6a:a7: 7f:d3:07:ed -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEspaPw3VYVePcWsQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxMTE4MjcyMloXDTI3MDYyMDAwNDUzM1owLzEtMCsGA1UEAxMk NjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SGSdDIb9yDvNq68L8I6bK6AA24EsvvX0NrA x/n/hkF62SFRRDiScWkK8mIYNtAdP/3bzCfSsl9UQwyD0Et751W6KgPDO4bVJ/je Jsc+gR65YHcqesabWcSufDjczskOO4sdZUi+szVE7jATVmUdTj6US0wjFkj9/hs/ GHcnH7WK3JNS/f7dBc7M7DKleKfJfqOHajf0/T5sNnPUIM9y6KBxNSUUXYaCGPXJ lDzn1qp5uxtlO07mWq+zaMihS7Lr4Km+WScaaP3v0MXUV2knQD+JvGfy3Dytj8bU 3bWCHM6Ct3gFaPlCjewrBN4SMNYhav7oWhOsBia+EHz+0q3WTQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJc+V/UxgbFSUmfTBiul8UpIvqN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYxOGE4YWU0LWJlNjItNGVmMC05 ZGM3LTRjNGQ4MjZhNDBkZi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2 YTQwZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCQEAgABMB4DBASt8KADBAPHEIgDBAPHu5gDBAPObCgDBAXO4cAw FQQCAAIwDwMEACYBUAMHBCYgAQNwADA4BggrBgEFBQcBCAEB/wQpMCegJTAjAgIt eQICOGQCAk/XAgJVhgICdeUCAwCPpgIDANYSAgMGAe8wVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo7pBvPku gCEtdeKvpvTCzgOqhlk+Se2MMss3ugwgpxYYn3pLfxuVQCjhQO8hZL8StFI/hwRr HkKWP5U3nLk9TbF8D2SMNBmOlkC6vS5aNpzA5boqBwIfZ6dSl0VlEA7+dB3amjqa NwDQIZAb5OueHyjPf8UX90DbBhV1GMen2ihvmUVco3pWXqTofwW1dSIi7cuDVkCg vEqUDdiPXIVXp9VXJ+t3KtBUIPWd4N6lCXYThzjlJnZq/G5lhBCUZA2phDyU+hgW wgsRdgqj57OLwO6wD2tLtWaU69kUgow35zqbGPBqNO3akPKwLCeT3U8+2U1YqwsT 5UHQU2qnf9MH7Q== -----END CERTIFICATE-----Generated at Thu Oct 9 11:41:01 2025 by rpki-client