$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer File: 7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer (raw, json) Hash identifier: iXH0yE25U/ociVYG+5DuBLFp1w9vdc1o5m2pEb78qrw= Subject key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B26560A00F25953EBC6F32588 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 16:01:47 +0000 Certificate not after: Tue 14 Dec 2027 17:01:47 +0000 Subordinate resources: AS: 16851 IP: 104.152.240.0/22 IP: 104.218.80.0/22 IP: 107.167.242.0/23 IP: 162.212.16.0/22 IP: 199.36.116.0/22 IP: 199.58.136.0/22 IP: 209.94.54.0/23 IP: 2607:3700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:56:0a:00:f2:59:53:eb:c6:f3:25:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 10 16:01:47 2025 GMT Not After : Dec 14 17:01:47 2027 GMT Subject: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:de:db:42:84:16:1a:e3:98:53:f4:cb:8d: 14:81:9f:8d:c7:6c:bb:bd:32:e6:22:44:1c:5a:5c: 6e:6a:b2:b6:d8:6f:ea:70:90:09:94:a9:4a:00:a9: 65:5a:20:f9:6d:19:00:72:a8:b7:93:16:6e:57:6b: f1:dd:fa:e5:c7:4d:d4:09:f9:39:f4:a6:ee:24:6e: 3d:7d:b9:8d:b5:86:dc:03:ae:40:e9:3f:bd:f3:91: 4c:81:ef:3a:2f:31:a3:97:94:ff:f1:a0:14:3a:8e: 68:b8:cc:50:fa:14:16:c0:9b:33:42:56:12:9c:82: d7:21:f3:e2:58:6c:76:9c:ac:46:77:c2:f3:68:38: 5e:b1:82:2b:f5:ed:1b:f3:79:22:31:8a:88:11:f3: 7a:e4:83:c2:0b:5b:c2:bc:ff:20:e6:ed:c7:d3:05: 7b:ac:da:a6:ac:ef:6f:77:fe:ea:60:d0:68:38:73: 48:9c:24:da:a4:0a:74:4f:aa:f3:9b:b7:74:d8:ea: a7:a9:85:ad:06:37:fc:c7:ca:89:3b:d3:86:13:7a: 1d:25:39:85:a2:8e:a4:85:c8:12:3a:7c:e7:01:7d: cb:20:c4:bf:b1:75:f1:f6:72:a1:c7:b0:c0:08:fb: 2b:74:81:8d:41:70:e6:40:d0:eb:87:9b:cc:aa:df: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.152.240.0/22 104.218.80.0/22 107.167.242.0/23 162.212.16.0/22 199.36.116.0/22 199.58.136.0/22 209.94.54.0/23 IPv6: 2607:3700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:59:e4:38:29:eb:81:23:ca:c8:34:9b:53:4c:e7:0c:76:cc: 2d:82:bd:76:df:7f:53:3f:1e:65:07:2d:6e:20:1d:64:bd:7b: e4:44:28:de:fe:74:51:9f:b1:6c:e8:de:f6:27:e6:05:18:55: f7:40:59:a7:4a:10:65:cd:35:ba:e4:48:bd:32:9e:79:fd:e5: f7:0b:56:e0:e8:d4:06:cf:9c:54:17:69:63:8c:0e:81:b3:f3: 99:49:c5:82:f0:39:41:48:09:66:da:68:60:01:a6:a6:07:82: 64:c1:1d:a7:77:6d:77:c2:d5:41:20:19:9e:d9:3b:aa:87:d6: 1f:04:28:98:f3:47:a3:b1:5e:36:ee:c0:d1:d6:52:e6:fe:57: b9:76:68:57:2b:74:12:10:74:53:df:37:4e:1f:26:f4:3b:ee: a7:27:6a:22:90:bb:40:3b:83:0a:4c:1b:8b:9c:da:13:09:00: af:14:ea:04:2e:d4:b9:85:b5:87:57:ee:1f:e0:fc:83:7e:45: d9:e8:92:fc:47:70:2f:27:c3:da:3d:74:17:76:2f:f9:45:02: d5:2c:37:6e:f7:ab:39:8a:8f:ec:a4:c3:a8:9d:6b:86:d2:c0: 1c:29:a2:21:f1:52:ac:2f:72:6e:a7:41:84:7a:c5:ce:5a:d5: e8:91:e6:dd -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEsmVgoA8llT68bzJYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDkxMDE2MDE0N1oXDTI3MTIxNDE3MDE0N1owLzEtMCsGA1UEAxMk N2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmife20KEFhrjmFP0y40UgZ+Nx2y7vTLmIkQc WlxuarK22G/qcJAJlKlKAKllWiD5bRkAcqi3kxZuV2vx3frlx03UCfk59KbuJG49 fbmNtYbcA65A6T+985FMge86LzGjl5T/8aAUOo5ouMxQ+hQWwJszQlYSnILXIfPi WGx2nKxGd8LzaDhesYIr9e0b83kiMYqIEfN65IPCC1vCvP8g5u3H0wV7rNqmrO9v d/7qYNBoOHNInCTapAp0T6rzm7d02OqnqYWtBjf8x8qJO9OGE3odJTmFoo6khcgS OnznAX3LIMS/sXXx9nKhx7DACPsrdIGNQXDmQNDrh5vMqt9bxQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFNyLJtARA2ZtVDSNMy8WOW5OUnYHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdmOWY3MGFjLTJjNTEtNGZiZS1i NzNhLWE4MTk3M2U1ODNlMy83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNl NTgzZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAJomPADBAJo2lADBAFrp/IDBAKi1BADBALHJHQD BALHOogDBAHRXjYwDQQCAAIwBwMFACYHNwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICQdMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAkVnkOCnrgSPKyDSbU0znDHbMLYK9dt9/Uz8eZQctbiAd ZL175EQo3v50UZ+xbOje9ifmBRhV90BZp0oQZc01uuRIvTKeef3l9wtW4OjUBs+c VBdpY4wOgbPzmUnFgvA5QUgJZtpoYAGmpgeCZMEdp3dtd8LVQSAZntk7qofWHwQo mPNHo7FeNu7A0dZS5v5XuXZoVyt0EhB0U983Th8m9DvupydqIpC7QDuDCkwbi5za EwkArxTqBC7UuYW1h1fuH+D8g35F2eiS/EdwLyfD2j10F3Yv+UUC1Sw3bverOYqP 7KTDqJ1rhtLAHCmiIfFSrC9ybqdBhHrFzlrV6JHm3Q== -----END CERTIFICATE-----Generated at Fri Sep 19 18:03:40 2025 by rpki-client