$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70777194-1458-41fb-97da-76c7ba5de1c7.cer File: 70777194-1458-41fb-97da-76c7ba5de1c7.cer (raw, json) Hash identifier: jhAQaDH+AKWjFP9rny+xu1cnjou86Vsnrd6UDbHo11Y= Subject key identifier: CE:34:C2:CC:47:3A:C9:00:17:73:F4:C7:B8:97:77:5F:CD:DF:D2:EF Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B7228D01DDE4C86EBF3FAB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70777194-1458-41fb-97da-76c7ba5de1c7/70777194-1458-41fb-97da-76c7ba5de1c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70777194-1458-41fb-97da-76c7ba5de1c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 19:52:05 +0000 Certificate not after: Mon 10 Jan 2028 20:52:05 +0000 Subordinate resources: IP: 216.235.221.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:28:d0:1d:de:4c:86:eb:f3:fa:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 7 19:52:05 2025 GMT Not After : Jan 10 20:52:05 2028 GMT Subject: CN=70777194-1458-41fb-97da-76c7ba5de1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:89:ef:57:df:8e:69:5e:db:1c:ac:41:1d:a0: 9a:c5:98:53:f6:e8:1f:fc:9d:50:40:1e:ba:52:24: e2:29:06:86:9a:4c:0d:11:fd:b7:e5:ee:59:12:89: 01:7f:e2:78:c7:a1:2f:c1:c3:23:e0:82:a5:b6:8c: 06:d3:66:46:b1:b2:b8:cf:59:62:fd:ac:88:ea:32: 30:d0:bd:d3:58:f9:ef:2e:0a:0e:17:c5:fa:c0:71: d0:35:28:7e:98:4c:2f:ca:01:6f:f2:75:c6:b9:37: 83:2a:df:e6:9d:8a:9c:bd:b0:43:bb:67:5f:a7:64: 63:f5:1f:da:cc:28:34:97:8b:5b:fe:cc:89:e0:2c: 4b:de:2d:96:09:d7:d3:78:f1:69:70:94:2f:61:66: de:bc:37:5c:27:62:a7:34:a1:ad:7e:a4:4f:42:96: 24:67:3c:21:42:62:66:9f:12:c5:f0:60:40:c4:b2: d7:e4:02:65:fa:cc:08:ad:f2:ca:10:d0:06:8b:92: ca:62:c4:6a:41:ba:87:a9:e3:3f:9b:aa:de:71:9b: a3:39:98:7d:96:c5:a8:38:3e:2c:b0:b2:85:b7:d0: 7b:f1:c6:1c:85:71:eb:95:15:90:f9:74:14:95:8c: b9:3d:98:af:b1:5e:58:41:ea:47:99:89:94:54:af: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:34:C2:CC:47:3A:C9:00:17:73:F4:C7:B8:97:77:5F:CD:DF:D2:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70777194-1458-41fb-97da-76c7ba5de1c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70777194-1458-41fb-97da-76c7ba5de1c7/70777194-1458-41fb-97da-76c7ba5de1c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 216.235.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:93:09:55:b8:44:97:f8:c8:7c:ca:3c:f6:2f:e6:e4:10:1c: 2c:50:20:4c:f9:05:0e:24:72:00:95:ae:72:62:dd:4e:19:aa: b7:d4:51:07:66:cd:02:2a:1a:8d:ed:4d:40:2d:13:31:a2:ff: 25:05:9c:24:77:ab:22:cc:9a:2e:e5:9d:36:13:48:3c:71:39: c0:9c:e2:9f:8a:7d:96:fc:da:64:aa:7e:dd:fa:5d:83:f3:9f: 0d:06:eb:4e:81:5e:04:72:e5:31:48:f3:32:27:f1:77:28:a8: f2:c9:81:b3:9b:b5:6d:75:39:c6:fb:28:24:f6:76:9d:cd:d3: 54:35:fc:4b:3e:d8:38:5d:ef:6e:e6:51:1a:21:ef:8c:8f:65: 8a:68:6b:a7:c9:fe:07:48:44:c6:a7:d9:6f:cf:8b:22:2d:dd: dc:35:32:f7:45:7b:4f:a1:5b:d9:6f:05:f5:e2:fe:bf:48:1b: 1a:7c:18:75:36:d8:45:15:27:89:ba:05:39:37:11:b2:a9:fe: 0d:39:52:86:71:e0:0d:a6:ba:61:0a:19:de:b8:0c:cf:98:46: 8d:18:f2:c4:6e:2b:0a:dc:24:13:a2:02:37:8f:e9:e6:9a:41: f1:cb:46:e3:7f:d0:d7:ea:06:88:ef:af:ad:7c:46:49:8d:aa: 0c:3e:9d:62 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtyKNAd3kyG6/P6tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAwNzE5NTIwNVoXDTI4MDExMDIwNTIwNVowLzEtMCsGA1UEAxMk NzA3NzcxOTQtMTQ1OC00MWZiLTk3ZGEtNzZjN2JhNWRlMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYnvV9+OaV7bHKxBHaCaxZhT9ugf/J1QQB66 UiTiKQaGmkwNEf235e5ZEokBf+J4x6EvwcMj4IKltowG02ZGsbK4z1li/ayI6jIw 0L3TWPnvLgoOF8X6wHHQNSh+mEwvygFv8nXGuTeDKt/mnYqcvbBDu2dfp2Rj9R/a zCg0l4tb/syJ4CxL3i2WCdfTePFpcJQvYWbevDdcJ2KnNKGtfqRPQpYkZzwhQmJm nxLF8GBAxLLX5AJl+swIrfLKENAGi5LKYsRqQbqHqeM/m6recZujOZh9lsWoOD4s sLKFt9B78cYchXHrlRWQ+XQUlYy5PZivsV5YQepHmYmUVK8ucQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFM40wsxHOskAF3P0x7iXd1/N39LvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 MDc3NzE5NC0xNDU4LTQxZmItOTdkYS03NmM3YmE1ZGUxYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzcwNzc3MTk0LTE0NTgtNDFmYi05 N2RhLTc2YzdiYTVkZTFjNy83MDc3NzE5NC0xNDU4LTQxZmItOTdkYS03NmM3YmE1 ZGUxYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADY690wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT5MJVbhEl/jIfMo89i/m 5BAcLFAgTPkFDiRyAJWucmLdThmqt9RRB2bNAioaje1NQC0TMaL/JQWcJHerIsya LuWdNhNIPHE5wJzin4p9lvzaZKp+3fpdg/OfDQbrToFeBHLlMUjzMifxdyio8smB s5u1bXU5xvsoJPZ2nc3TVDX8Sz7YOF3vbuZRGiHvjI9limhrp8n+B0hExqfZb8+L Ii3d3DUy90V7T6Fb2W8F9eL+v0gbGnwYdTbYRRUniboFOTcRsqn+DTlShnHgDaa6 YQoZ3rgMz5hGjRjyxG4rCtwkE6ICN4/p5ppB8ctG43/Q1+oGiO+vrXxGSY2qDD6d Yg== -----END CERTIFICATE-----Generated at Thu Oct 9 01:03:58 2025 by rpki-client