$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer File: 20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer (raw, json) Hash identifier: 7iJ4HMEQoEHGf9dtZX5r53bM+dJUsNmk59ZZSGi9QNQ= Subject key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority key identifier: 27:F8:46:D3:73:B6:58:4A:AD:5C:D8:B4:61:1D:A0:DB:36:05:29:CF Certificate issuer: /CN=78e28dc6-5afe-42b3-92af-6ace9c2d5bd8 Certificate serial: 010D0C9F4328584BDC15DDA6EE217C603FFBF900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer Manifest: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft caRepository: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 18:29:36 +0000 Certificate not after: Thu 17 Feb 2028 18:29:36 +0000 Subordinate resources: AS: 32931 IP: 104.219.168.0/22 IP: 144.168.0.0/19 IP: 172.96.0.0/21 IP: 216.126.56.0/22 IP: 2606:1880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:15:dd:a6:ee:21:7c:60:3f:fb:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e28dc6-5afe-42b3-92af-6ace9c2d5bd8 Validity Not Before: Nov 14 18:29:36 2025 GMT Not After : Feb 17 18:29:36 2028 GMT Subject: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:fb:ba:e6:67:94:a3:04:3b:f6:26:59:8a: 05:50:af:5e:71:bd:76:8f:05:0c:11:1d:39:37:fc: b1:a6:62:a4:86:86:ce:00:64:2c:2a:3a:95:eb:44: 1b:66:e8:79:5e:fe:78:77:f6:3d:c1:53:4e:e5:06: 42:a7:cd:1f:3e:8f:59:e2:0e:d1:83:fd:0a:ba:bf: 1d:4b:aa:ef:6d:b1:7b:b0:b3:07:f4:20:de:29:82: 60:ad:7d:a5:92:82:ed:eb:9d:e8:87:8f:eb:fe:fe: 64:16:70:b2:26:25:e3:58:75:8f:4b:f4:bd:a1:97: 9c:ba:59:3c:1c:ea:4b:87:82:a1:95:17:0f:5b:39: 2c:0a:6d:30:22:d6:30:79:02:a3:46:f4:89:6a:0b: 6b:79:32:0c:55:5d:dd:22:1d:d7:c7:9e:c0:16:9f: eb:33:9f:73:1f:d2:fc:42:f9:2a:cf:d4:fc:47:32: 5f:d6:3e:a2:1e:be:5e:8d:80:3d:49:ae:69:51:91: 82:d4:35:29:e0:cd:63:7c:0a:f3:fd:bb:26:76:31: dd:b2:05:6e:64:83:20:47:20:0f:f0:31:2d:9d:ad: 67:a1:63:b3:d7:c5:c3:17:f9:66:0a:46:0d:be:0c: 4b:b5:82:0a:19:b8:b2:56:f7:ef:de:be:91:b3:8f: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl X509v3 Authority Key Identifier: keyid:27:F8:46:D3:73:B6:58:4A:AD:5C:D8:B4:61:1D:A0:DB:36:05:29:CF X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer sbgp-ipAddrBlock: critical IPv4: 104.219.168.0/22 144.168.0.0/19 172.96.0.0/21 216.126.56.0/22 IPv6: 2606:1880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32931 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c3:fe:03:94:9e:f3:58:da:af:94:6a:3b:36:9a:80:31:ff: e4:0b:9c:07:0f:17:1f:20:90:d0:aa:a3:21:14:28:c3:7f:3e: 39:67:0c:e3:24:2f:74:6a:29:fa:b2:6b:0d:47:7c:e4:1e:81: c9:4a:c5:53:a1:9f:3a:3d:61:9b:f9:fb:45:96:7c:a7:a5:a4: 4b:cb:ea:80:54:90:0a:2c:0a:78:2e:c7:06:35:63:82:8a:fe: ee:cd:be:4d:b7:d5:0a:bb:9d:47:88:f1:2a:8f:7f:41:be:2c: 77:4c:eb:8e:96:bb:79:07:55:1c:2d:db:36:89:ee:02:b8:94: 98:31:c6:23:82:6f:79:e6:7e:8b:cf:3a:e2:b0:dc:49:ce:cf: 0e:0a:2b:6e:ea:46:7c:3c:35:0a:73:a9:06:48:37:64:9d:47: fa:d6:24:20:06:0d:77:0a:04:b0:fb:c8:6d:41:98:ed:39:7d: 13:b9:6f:ac:a7:c4:b0:7a:ad:5f:7c:d6:f5:1d:f4:fa:55:ad: dd:fa:62:ad:10:0a:08:d2:17:cb:48:8e:c5:d1:15:30:15:42: 89:b8:52:81:fe:f2:26:a5:b5:7c:70:5a:d2:2a:84:e6:03:63: 94:45:09:66:a1:28:65:52:47:78:2e:20:0f:f5:3c:60:21:bc: bb:03:cf:1c -----BEGIN CERTIFICATE----- MIIG3jCCBcagAwIBAgIUAQ0Mn0MoWEvcFd2m7iF8YD/7+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhlMjhkYzYtNWFmZS00MmIzLTkyYWYtNmFjZTljMmQ1 YmQ4MB4XDTI1MTExNDE4MjkzNloXDTI4MDIxNzE4MjkzNlowPTE7MDkGA1UEAxMy MjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBkMDZkZWRjYjI3YWQyMDc4 ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkvu65meUowQ79iZZ igVQr15xvXaPBQwRHTk3/LGmYqSGhs4AZCwqOpXrRBtm6Hle/nh39j3BU07lBkKn zR8+j1niDtGD/Qq6vx1Lqu9tsXuwswf0IN4pgmCtfaWSgu3rneiHj+v+/mQWcLIm JeNYdY9L9L2hl5y6WTwc6kuHgqGVFw9bOSwKbTAi1jB5AqNG9IlqC2t5MgxVXd0i HdfHnsAWn+szn3Mf0vxC+SrP1PxHMl/WPqIevl6NgD1JrmlRkYLUNSngzWN8CvP9 uyZ2Md2yBW5kgyBHIA/wMS2drWehY7PXxcMX+WYKRg2+DEu1ggoZuLJW9+/evpGz j+tzAgMBAAGjggPiMIID3jAdBgNVHQ4EFgQU8/JehiMCo6dlqqgGqD25+Ocg7jIw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvZmNhMjIxNDkzOWIwNDU3ZWEzYTcwODE3 NTRmNGU2NDkvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvZmNhMjIxNDkzOWIwNDU3ZWEzYTcwODE3NTRmNGU2NDkv MC9GM0YyNUU4NjIzMDJBM0E3NjVBQUE4MDZBODNEQjlGOEU3MjBFRTMyLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFm LTZhY2U5YzJkNWJkOC83OGUyOGRjNi01YWZlLTQyYjMtOTJhZi02YWNlOWMyZDVi ZDguY3JsMB8GA1UdIwQYMBaAFCf4RtNztlhKrVzYtGEdoNs2BSnPMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt Yjc3OC1kMjA0Y2ZjZDk5YTgvNzhlMjhkYzYtNWFmZS00MmIzLTkyYWYtNmFjZTlj MmQ1YmQ4LmNlcjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAmjbqAMEBZCo AAMEA6xgAAMEAth+ODANBAIAAjAHAwUAJgYYgDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAgKMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAJcP+A5Se81jar5RqOzaagDH/5AucBw8XHyCQ0Kqj IRQow38+OWcM4yQvdGop+rJrDUd85B6ByUrFU6GfOj1hm/n7RZZ8p6WkS8vqgFSQ CiwKeC7HBjVjgor+7s2+TbfVCrudR4jxKo9/Qb4sd0zrjpa7eQdVHC3bNonuAriU mDHGI4JveeZ+i8864rDcSc7PDgorbupGfDw1CnOpBkg3ZJ1H+tYkIAYNdwoEsPvI bUGY7Tl9E7lvrKfEsHqtX3zW9R30+lWt3fpirRAKCNIXy0iOxdEVMBVCibhSgf7y JqW1fHBa0iqE5gNjlEUJZqEoZVJHeC4gD/U8YCG8uwPPHA== -----END CERTIFICATE-----Generated at Tue Nov 18 07:39:51 2025 by rpki-client