$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer File: 7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer (raw, json) Hash identifier: q6z/PUbJx3TJSqJFr9sVuDKwhxPpz4lL4Be4z+vDnKI= Subject key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B2CEF4D6E92FF8D695C3E83C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 00:45:26 +0000 Certificate not after: Fri 17 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 393262 IP: 64.39.237.0/24 IP: 66.198.228.0/22 IP: 150.252.240.0/21 IP: 192.111.92.0/22 IP: 206.225.9.0/24 IP: 209.25.216.0/22 IP: 216.41.226.0/24 IP: 216.122.24.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:ef:4d:6e:92:ff:8d:69:5c:3e:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 13 00:45:26 2025 GMT Not After : Dec 17 01:45:26 2027 GMT Subject: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:05:38:27:8e:0f:a7:cc:28:f6:f2:d4:f5: 08:fc:a6:9e:53:d2:8d:6d:1e:86:bd:e5:4a:20:26: 44:a1:88:47:44:1b:4c:3c:48:5e:73:9e:ee:dc:c1: fd:fa:2d:64:f3:83:ae:88:fa:08:49:7c:ed:fa:e1: a5:1b:97:6f:cb:82:ce:db:51:a0:ef:42:19:49:72: 1e:47:ce:56:ab:88:1c:c9:17:96:3c:5d:97:7a:fe: 2e:16:c8:9a:88:da:2a:ee:42:85:53:dd:a3:10:ec: c4:b2:60:ae:2c:1b:23:bb:e0:a9:03:17:41:e2:ab: f8:0a:f1:37:31:78:9f:9b:29:16:b0:2c:06:ac:2e: 9e:cd:50:ab:95:e7:94:c4:df:a2:bb:75:d2:2a:c2: 20:50:cf:df:3b:db:15:05:94:14:10:f3:4e:a7:fc: 2c:2b:19:16:d8:bb:83:0f:cf:d6:ee:7d:e8:05:4e: ad:87:f8:96:12:40:95:e5:05:39:56:9b:7f:62:e2: dc:74:c5:2a:6a:19:5f:98:85:ca:55:d6:15:a3:1f: e9:3c:2c:66:e9:d4:76:f6:00:fb:da:25:e6:57:9d: fd:76:13:d8:01:ea:16:68:0f:26:58:17:a2:c7:c8: 04:2d:70:8e:36:54:b1:02:83:41:a3:84:70:2a:37: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.39.237.0/24 66.198.228.0/22 150.252.240.0/21 192.111.92.0/22 206.225.9.0/24 209.25.216.0/22 216.41.226.0/24 216.122.24.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393262 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:95:71:1d:c9:ff:ed:3a:83:04:2b:e0:f5:12:2d:d3:d8:38: 58:b5:d0:ff:11:80:af:5c:0e:ca:04:39:6f:2b:1b:3b:bc:62: 98:12:d8:b5:41:a6:a2:c6:e7:a6:43:04:76:68:06:8a:da:e5: 9d:d8:e8:e4:01:e3:56:33:4b:34:35:aa:a7:a3:2b:36:b0:21: 0e:84:43:c4:6f:d4:b2:ac:2c:2d:86:5f:f2:5d:34:e3:d2:03: 52:86:ee:29:29:2e:40:60:a1:9d:be:9c:fc:cd:31:16:3f:30: f6:08:0a:45:3c:b9:ad:63:01:d3:25:ce:2c:c4:d3:a3:7f:8a: 5e:8e:f5:53:b1:7e:f0:ab:f0:48:60:f2:21:b6:fa:f6:18:16: 53:04:b8:68:d8:8b:c0:df:32:06:f7:a1:96:ce:7d:59:f2:8f: f0:6f:de:7c:f0:6d:ae:22:e2:be:c4:cf:30:81:61:03:df:11: 8a:ca:2d:cb:64:c5:8a:30:d2:4e:0d:51:37:b8:39:9c:37:9e: 73:0e:1b:2b:dd:67:78:ee:95:50:a0:bf:9f:ef:92:c4:b8:e4: 32:8d:14:3a:cc:e6:51:d9:4d:05:9e:0a:3b:4a:b1:46:46:e3: d5:42:c3:c6:ae:b4:7e:7e:aa:67:c0:55:a8:84:1d:dd:6d:2f: 6f:1e:8f:8d -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEss701ukv+NaVw+g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxMzAwNDUyNloXDTI3MTIxNzAxNDUyNlowLzEtMCsGA1UEAxMk N2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw4FOCeOD6fMKPby1PUI/KaeU9KNbR6GveVK ICZEoYhHRBtMPEhec57u3MH9+i1k84OuiPoISXzt+uGlG5dvy4LO21Gg70IZSXIe R85Wq4gcyReWPF2Xev4uFsiaiNoq7kKFU92jEOzEsmCuLBsju+CpAxdB4qv4CvE3 MXifmykWsCwGrC6ezVCrleeUxN+iu3XSKsIgUM/fO9sVBZQUEPNOp/wsKxkW2LuD D8/W7n3oBU6th/iWEkCV5QU5Vpt/YuLcdMUqahlfmIXKVdYVox/pPCxm6dR29gD7 2iXmV539dhPYAeoWaA8mWBeix8gELXCONlSxAoNBo4RwKjeW1wIDAQABo4IERTCC BEEwHQYDVR0OBBYEFBjTf7dQ7kMBRiYdIlfReFwOkV/UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdlY2UwNDA0LTgwYTgtNDZmMi05 MmViLThmMGI1NThjN2RiZS83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4 YzdkYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBABAJ+0DBAJCxuQDBAOW/PADBALAb1wDBADO4QkD BALRGdgDBADYKeIDBAPYehgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2VcR3J/+06gwQr4PUSLdPYOFi10P8RgK9cDsoEOW8rGzu8YpgS2LVB pqLG56ZDBHZoBora5Z3Y6OQB41YzSzQ1qqejKzawIQ6EQ8Rv1LKsLC2GX/JdNOPS A1KG7ikpLkBgoZ2+nPzNMRY/MPYICkU8ua1jAdMlzizE06N/il6O9VOxfvCr8Ehg 8iG2+vYYFlMEuGjYi8DfMgb3oZbOfVnyj/Bv3nzwba4i4r7EzzCBYQPfEYrKLctk xYow0k4NUTe4OZw3nnMOGyvdZ3julVCgv5/vksS45DKNFDrM5lHZTQWeCjtKsUZG 49VCw8autH5+qmfAVaiEHd1tL28ej40= -----END CERTIFICATE-----Generated at Thu Oct 9 11:49:07 2025 by rpki-client