$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer File: 61ba8425-192b-4617-96ff-4227c427dd41.cer (raw, json) Hash identifier: wzMkoMgoZ0LEmf7TRs51HFe5UPkNLxoT/6OJ6i7oKos= Subject key identifier: E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B0F8155FE03305774CDEA43B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 11:45:25 +0000 Certificate not after: Tue 16 Nov 2027 17:18:27 +0000 Subordinate resources: AS: 401909 IP: 74.207.192.0/21 IP: 216.183.64.0/21 IP: 2604:1c20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:81:55:fe:03:30:57:74:cd:ea:43:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 2 11:45:25 2025 GMT Not After : Nov 16 17:18:27 2027 GMT Subject: CN=61ba8425-192b-4617-96ff-4227c427dd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:c6:00:4e:55:1e:d7:26:4d:80:b2:1b:c8: 01:10:b4:12:67:e0:6f:da:d8:f8:d1:4f:26:0c:28: 73:ed:92:c1:92:99:0e:4f:37:aa:97:39:13:a6:dc: 4c:42:0b:c0:04:09:a4:53:15:e6:9d:48:a7:dd:36: c9:e3:71:4f:5b:ef:10:f3:16:28:38:40:dc:42:a8: f6:f0:4b:2d:fb:f8:13:0e:e0:e3:62:95:c7:61:c6: 46:0e:85:94:89:66:ef:c4:03:62:dc:04:62:84:cc: 26:d0:28:ab:1f:97:9a:64:c0:7e:25:a4:3f:2b:96: 7a:80:6c:00:5f:10:2c:dd:4c:41:c7:bc:10:24:0d: 3b:0e:8c:66:97:3c:af:66:7a:3f:d8:39:e1:5b:23: 5e:ea:c0:1c:30:13:25:b2:2b:01:9e:df:a4:bd:46: e6:54:96:89:50:48:ce:24:1c:c9:0d:7a:e7:94:ff: d9:04:51:1c:fa:38:dc:69:0d:0c:8a:20:89:2f:b3: fa:63:59:be:13:c0:7e:2d:c7:de:92:fe:d3:7d:5d: 71:99:22:af:13:2b:50:09:2c:74:87:4b:b9:33:be: e0:49:72:0f:86:c9:35:51:54:02:1a:d1:0c:cd:bb: 6d:d9:b2:11:8e:85:74:64:d0:5d:26:97:56:d0:b0: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.207.192.0/21 216.183.64.0/21 IPv6: 2604:1c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:eb:52:67:21:cd:21:8d:a9:e7:04:d9:24:b5:f3:b6:1d:d4: 17:31:39:35:e7:6d:9b:d6:ee:35:6f:1a:36:ea:11:23:12:61: 42:6d:3b:65:b1:89:0c:3d:17:8f:4f:e2:fc:ae:ab:f4:27:83: e8:0c:d7:2e:fd:fa:b2:c6:53:c2:29:5b:82:7f:58:b7:05:e6: 98:98:b1:98:53:ba:f6:6a:f1:24:b3:2d:b8:a5:7e:21:6f:e7: df:2b:5e:42:2b:6e:77:22:a5:eb:31:85:5c:73:4c:10:e6:17: dd:66:34:b0:cf:cf:1f:ca:c2:20:3b:60:cc:bb:a0:a2:7a:49: 80:23:5f:aa:88:06:e3:03:64:94:ed:3e:fa:96:37:58:d4:16: 51:06:67:fe:d7:d4:74:db:45:3e:c3:c7:f9:f5:41:5e:21:67: f6:2c:16:82:da:a0:10:ac:10:3c:51:f6:06:05:e9:aa:9d:83: 58:aa:65:49:0a:b8:ec:a5:87:00:e7:03:44:50:71:0b:e1:45: 0a:0c:2a:27:ab:9d:ef:81:86:cb:bd:93:7b:4a:68:bd:51:78: d6:e6:88:56:fd:ad:b2:68:8c:4a:52:13:f0:d4:30:57:a3:d6: 5a:cc:96:14:df:7d:05:6a:fb:df:cf:c4:b1:10:15:33:54:7e: b6:af:38:bf -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEsPgVX+AzBXdM3qQ7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkwMjExNDUyNVoXDTI3MTExNjE3MTgyN1owLzEtMCsGA1UEAxMk NjFiYTg0MjUtMTkyYi00NjE3LTk2ZmYtNDIyN2M0MjdkZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBrGAE5VHtcmTYCyG8gBELQSZ+Bv2tj40U8m DChz7ZLBkpkOTzeqlzkTptxMQgvABAmkUxXmnUin3TbJ43FPW+8Q8xYoOEDcQqj2 8Est+/gTDuDjYpXHYcZGDoWUiWbvxANi3ARihMwm0CirH5eaZMB+JaQ/K5Z6gGwA XxAs3UxBx7wQJA07DoxmlzyvZno/2DnhWyNe6sAcMBMlsisBnt+kvUbmVJaJUEjO JBzJDXrnlP/ZBFEc+jjcaQ0MiiCJL7P6Y1m+E8B+Lcfekv7TfV1xmSKvEytQCSx0 h0u5M77gSXIPhsk1UVQCGtEMzbtt2bIRjoV0ZNBdJpdW0LDPfQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOSONtqtiv0zXnWnTmjfAskY53iCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MWJhODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3YzQyN2RkNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYxYmE4NDI1LTE5MmItNDYxNy05 NmZmLTQyMjdjNDI3ZGQ0MS82MWJhODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3YzQy N2RkNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANKz8ADBAPYt0AwDQQCAAIwBwMFACYEHCAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBiH1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALDrUmchzSGNqecE2SS1 87Yd1BcxOTXnbZvW7jVvGjbqESMSYUJtO2WxiQw9F49P4vyuq/Qng+gM1y79+rLG U8IpW4J/WLcF5piYsZhTuvZq8SSzLbilfiFv598rXkIrbncipesxhVxzTBDmF91m NLDPzx/KwiA7YMy7oKJ6SYAjX6qIBuMDZJTtPvqWN1jUFlEGZ/7X1HTbRT7Dx/n1 QV4hZ/YsFoLaoBCsEDxR9gYF6aqdg1iqZUkKuOylhwDnA0RQcQvhRQoMKierne+B hsu9k3tKaL1ReNbmiFb9rbJojEpSE/DUMFej1lrMlhTffQVq+9/PxLEQFTNUfrav OL8= -----END CERTIFICATE-----Generated at Thu Oct 9 11:47:05 2025 by rpki-client