$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer File: ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer (raw, json) Hash identifier: D9w+pjKm6m2TrZdimHNSV9SQ5JVdsyjKZLAnmav80VQ= Subject key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B1EF9DEEB1490BC829FDE4980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 393269 IP: 198.54.200.0/23 IP: 2620:132:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:de:eb:14:90:bc:82:9f:de:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:62:40:53:81:d0:1c:8c:25:e5:65:5f:97: 5f:79:fa:0a:5f:11:7d:e1:06:03:63:f5:64:af:98: 85:e1:4c:62:69:b0:81:1b:d9:bc:2f:10:52:52:7a: 4e:02:72:b7:83:4d:d3:f6:1c:a0:4c:cb:de:24:e8: 39:96:f8:5c:fd:52:35:16:e3:87:fe:97:f5:e9:f0: 38:11:fd:96:12:9f:3e:14:00:df:70:34:e5:70:c5: 19:46:5b:08:86:fd:23:f6:88:d2:1a:77:07:e1:28: bf:5d:aa:21:b9:b9:4d:e8:a7:0c:21:95:f3:0a:d9: ff:6b:c4:92:f4:7c:45:1c:27:f5:a6:0c:57:fc:3c: a6:48:10:70:4a:21:83:95:c6:41:96:ec:1a:4a:9f: 53:5a:7e:7e:75:22:5d:71:75:8d:8d:13:b2:fb:32: 7e:3e:17:5c:dc:8b:39:69:e8:5f:88:00:a8:45:fd: b3:af:15:15:9c:e0:c3:bb:31:15:70:1a:84:aa:96: d7:67:13:ba:0a:89:a4:65:e2:83:11:91:3f:28:2c: a2:fb:c6:bb:c9:09:30:86:9c:1b:1d:f1:46:b2:cc: 3e:3e:8b:a3:e8:ac:33:db:83:a7:85:49:10:9a:c9: a2:43:33:73:d1:48:60:62:b7:c3:73:7e:58:3b:c1: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 198.54.200.0/23 IPv6: 2620:132:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393269 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e8:36:a0:bd:73:d7:8a:9a:dd:44:a6:4a:5a:a8:26:43:68: 6e:e3:f8:b1:d8:b5:be:41:24:1b:cd:1b:d3:18:e2:6f:b7:1f: 59:cd:45:f0:34:df:db:e3:59:7f:06:88:2b:6a:2a:8b:cf:4d: eb:45:6e:dc:40:71:08:26:05:21:11:06:73:da:f5:fa:49:4c: 13:52:23:14:df:5b:e1:1c:b7:5e:d8:13:e4:5e:5b:e4:cf:7d: 74:70:4d:01:90:d6:56:cf:95:0e:b4:21:b3:ec:84:71:eb:c5: 5f:8c:3f:9c:69:28:83:6d:81:19:10:66:e1:32:b3:ad:5d:ec: 78:70:88:47:01:2c:87:12:a1:8f:05:8f:e1:99:b7:e7:af:76: a6:30:e4:ee:39:2c:62:d8:20:13:a4:61:23:0c:25:97:f7:cb: 80:f6:b8:44:27:eb:e5:7a:fa:a3:f1:db:ba:79:0b:9a:1c:82: 9c:79:43:9e:a9:ac:55:39:56:fc:8f:e2:85:a3:35:3a:65:64: ac:bd:9e:72:21:1d:e7:c8:24:e3:dd:57:dd:77:39:e5:d9:cb: 2d:82:95:0a:e5:de:af:dd:e6:47:bd:43:8b:fb:71:16:5e:f6: 91:64:d0:21:0f:5c:69:d2:6c:67:93:2d:73:57:ff:c4:8a:1b: 01:6a:d4:9a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEse+d7rFJC8gp/eSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk ZWJlOWMyNmQtYWRmYS00M2MzLWFhZmQtZDZjMjg2MDY1Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmZiQFOB0ByMJeVlX5dfefoKXxF94QYDY/Vk r5iF4UxiabCBG9m8LxBSUnpOAnK3g03T9hygTMveJOg5lvhc/VI1FuOH/pf16fA4 Ef2WEp8+FADfcDTlcMUZRlsIhv0j9ojSGncH4Si/XaohublN6KcMIZXzCtn/a8SS 9HxFHCf1pgxX/DymSBBwSiGDlcZBluwaSp9TWn5+dSJdcXWNjROy+zJ+Phdc3Is5 aehfiACoRf2zrxUVnODDuzEVcBqEqpbXZxO6ComkZeKDEZE/KCyi+8a7yQkwhpwb HfFGssw+Pouj6Kwz24OnhUkQmsmiQzNz0UhgYrfDc35YO8G3dQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFIhf4bsXd2Z4mMwQEg0KB4rIEAx6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YmU5YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMyODYwNjViNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ViZTljMjZkLWFkZmEtNDNjMy1h YWZkLWQ2YzI4NjA2NWI3Ny9lYmU5YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMyODYw NjViNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHGNsgwDwQCAAIwCQMHBCYgATLgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGADUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAROg2oL1z14qa3USmSlqoJkNo buP4sdi1vkEkG80b0xjib7cfWc1F8DTf2+NZfwaIK2oqi89N60Vu3EBxCCYFIREG c9r1+klME1IjFN9b4Ry3XtgT5F5b5M99dHBNAZDWVs+VDrQhs+yEcevFX4w/nGko g22BGRBm4TKzrV3seHCIRwEshxKhjwWP4Zm35692pjDk7jksYtggE6RhIwwll/fL gPa4RCfr5Xr6o/HbunkLmhyCnHlDnqmsVTlW/I/ihaM1OmVkrL2eciEd58gk491X 3Xc55dnLLYKVCuXer93mR71Di/txFl72kWTQIQ9cadJsZ5Mtc1f/xIobAWrUmg== -----END CERTIFICATE-----Generated at Thu Oct 9 11:39:57 2025 by rpki-client