$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer File: 25283898-2dc3-4477-af3c-b64dd3c800ab.cer (raw, json) Hash identifier: 8cV0yxD9jxzQv4yIcWc3fUPV2PAgZ7q8PHyfPTXqiew= Subject key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A0E8F9EE50FE5BAE575727E70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 10:51:27 +0000 Certificate not after: Tue 26 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 13692 AS: 20328 IP: 66.179.60.0/22 IP: 67.219.224.0/20 IP: 100.42.160.0/20 IP: 108.174.176.0/20 IP: 172.98.44.0/22 IP: 192.55.252.0/22 IP: 192.86.0.0/24 IP: 192.175.50.0/23 IP: 198.100.136.0/21 IP: 208.77.176.0/21 IP: 2607:8600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:8f:9e:e5:0f:e5:ba:e5:75:72:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 2 10:51:27 2025 GMT Not After : Jan 26 01:45:26 2027 GMT Subject: CN=25283898-2dc3-4477-af3c-b64dd3c800ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:89:32:1d:7d:14:e0:a2:49:e9:9f:d7:03: 0c:e0:1c:21:b1:17:fc:de:52:4d:bf:a8:80:d0:9e: 9c:1b:b4:48:e9:14:3b:e1:e0:fe:31:a8:1a:35:10: 00:8a:f5:21:9d:34:46:20:6f:2e:77:fa:1d:33:25: 8e:c0:48:7f:3f:30:d6:6b:73:22:7f:b1:d4:f8:ff: f4:61:f6:15:14:aa:b5:05:11:90:f7:3b:53:9d:a0: d2:e6:12:53:b7:15:40:1d:a8:40:c2:0a:d1:f7:38: 18:85:66:7d:b7:0e:22:a2:44:b4:20:cd:9e:e4:d3: 48:87:41:7b:06:b6:74:ce:dd:3c:40:08:4b:b5:ee: 32:48:fc:df:57:a3:b9:0c:d7:e1:49:3a:7e:c9:d9: 90:e2:09:e5:32:6a:8a:c1:f3:01:98:9c:ef:7e:7e: 44:fb:41:b3:8f:db:bf:9a:74:37:7b:a5:e8:26:85: 09:1e:d6:12:b4:74:75:33:87:8d:1f:bc:75:32:b4: 92:c8:97:38:45:bf:9e:b3:fd:fe:79:e2:ad:4e:5b: ff:6f:b0:89:17:ff:ff:3d:b7:3f:73:c5:56:7c:e2: 88:46:dd:68:c8:89:2c:db:5c:76:fe:c2:32:f8:16: d4:c9:cb:78:12:0e:a3:47:d9:ff:22:55:86:21:7a: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.179.60.0/22 67.219.224.0/20 100.42.160.0/20 108.174.176.0/20 172.98.44.0/22 192.55.252.0/22 192.86.0.0/24 192.175.50.0/23 198.100.136.0/21 208.77.176.0/21 IPv6: 2607:8600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13692 20328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:39:53:cd:5f:a2:03:0b:ce:59:dd:37:e0:e3:db:66:e9:8a: 2d:5f:d5:03:f5:8c:85:37:01:4f:9c:43:6a:7a:d5:56:3e:c4: 8e:96:06:f1:81:14:07:bc:97:27:da:1a:cf:ea:e4:71:ba:13: 27:1c:ed:52:2e:55:c9:59:97:1f:14:0e:32:4a:2a:bc:a2:3e: c5:5d:39:60:8a:d4:7a:6c:7e:9a:5d:1f:51:b2:c8:6f:4f:f2: 13:83:da:2c:6d:8e:4a:3d:27:a1:e7:80:48:28:aa:43:67:c6: 42:5b:12:87:69:7a:46:39:d2:b6:7d:70:e1:df:dd:c0:9c:e6: 71:01:b3:92:d7:87:bc:a2:5a:00:8b:42:17:37:09:4f:cc:37: 50:28:25:ed:e7:73:83:84:74:9b:67:db:8d:01:9c:92:15:66: 72:25:3c:ba:bc:b1:c1:89:86:d8:f0:7d:6c:00:8a:91:22:cc: ec:03:39:e0:5d:4c:4d:5a:6b:a6:ba:8e:ca:e5:7d:53:3c:71: 07:1c:3e:6a:86:c6:e0:64:f0:91:45:1f:e0:a4:40:71:73:4a: 98:d6:5f:8d:ca:ec:88:e1:08:1f:f2:46:e3:9e:bc:ab:b6:6b: 05:51:fb:6a:29:e2:78:4a:f9:20:fd:eb:ce:59:01:72:64:6b: b1:ae:7d:9a -----BEGIN CERTIFICATE----- MIIHUTCCBjmgAwIBAgIUAQ0Mn0MoWEoOj57lD+W65XVyfnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDYwMjEwNTEyN1oXDTI3MDEyNjAxNDUyNlowLzEtMCsGA1UEAxMk MjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgwMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj6JMh19FOCiSemf1wMM4BwhsRf83lJNv6iA 0J6cG7RI6RQ74eD+MagaNRAAivUhnTRGIG8ud/odMyWOwEh/PzDWa3Mif7HU+P/0 YfYVFKq1BRGQ9ztTnaDS5hJTtxVAHahAwgrR9zgYhWZ9tw4iokS0IM2e5NNIh0F7 BrZ0zt08QAhLte4ySPzfV6O5DNfhSTp+ydmQ4gnlMmqKwfMBmJzvfn5E+0Gzj9u/ mnQ3e6XoJoUJHtYStHR1M4eNH7x1MrSSyJc4Rb+es/3+eeKtTlv/b7CJF///Pbc/ c8VWfOKIRt1oyIks21x2/sIy+BbUyct4Eg6jR9n/IlWGIXqH7QIDAQABo4IEYzCC BF8wHQYDVR0OBBYEFB1+jZmLwELHlOvxUDk0qgxQYBPfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y NTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI1MjgzODk4LTJkYzMtNDQ3Ny1h ZjNjLWI2NGRkM2M4MDBhYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNj ODAwYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMEIEAgABMDwDBAJCszwDBARD2+ADBARkKqADBARsrrADBAKsYiwD BALAN/wDBADAVgADBAHArzIDBAPGZIgDBAPQTbAwDQQCAAIwBwMFACYHhgAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICNXwCAk9oMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFU5U81fogMLzlnd N+Dj22bpii1f1QP1jIU3AU+cQ2p61VY+xI6WBvGBFAe8lyfaGs/q5HG6Eycc7VIu VclZlx8UDjJKKryiPsVdOWCK1HpsfppdH1GyyG9P8hOD2ixtjko9J6HngEgoqkNn xkJbEodpekY50rZ9cOHf3cCc5nEBs5LXh7yiWgCLQhc3CU/MN1AoJe3nc4OEdJtn 240BnJIVZnIlPLq8scGJhtjwfWwAipEizOwDOeBdTE1aa6a6jsrlfVM8cQccPmqG xuBk8JFFH+CkQHFzSpjWX43K7IjhCB/yRuOevKu2awVR+2op4nhK+SD9685ZAXJk a7GufZo= -----END CERTIFICATE-----Generated at Mon Nov 3 00:58:44 2025 by rpki-client