$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer File: 551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer (raw, json) Hash identifier: a+Hr+7BF8rSLIACjdE1Dh+Bho6j+6O6iBE+IJ8SQUMY= Subject key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority key identifier: 27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 Certificate issuer: /CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Certificate serial: 010D0C9F43285849DCA133567D7EDCD3690F2D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml Certificate not before: Fri 11 Apr 2025 11:58:37 +0000 Certificate not after: Thu 15 Jul 2027 11:58:37 +0000 Subordinate resources: AS: 7224 AS: 10291 AS: 16509 AS: 19047 AS: 63088 IP: 72.21.192.0/19 IP: 204.246.160.0/19 IP: 205.251.192.0/18 IP: 207.171.160.0/19 IP: 216.137.32.0/19 IP: 2600:9000::/28 IP: 2605:b940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:a1:33:56:7d:7e:dc:d3:69:0f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Validity Not Before: Apr 11 11:58:37 2025 GMT Not After : Jul 15 11:58:37 2027 GMT Subject: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:7d:88:97:9a:55:9b:78:09:20:d8:2e:46: 14:2b:de:1e:7d:99:47:85:19:9f:0e:07:12:80:98: 7e:cc:6f:8a:70:ac:4e:af:f6:92:39:5a:24:cd:48: af:98:1d:7b:a8:9e:cb:a8:c5:a6:17:e2:4e:01:12: 55:19:0c:26:dc:e4:0d:51:a8:bc:3f:43:03:bb:3a: 99:f8:77:d8:c7:d0:dd:06:de:f3:bd:48:98:85:a7: 10:e1:65:29:4f:c8:da:17:bc:9d:3c:b6:10:dd:f0: ec:c8:e7:5f:08:76:54:a5:41:8d:c8:f3:21:e6:8a: 3e:39:2f:ee:e4:4f:84:5d:ca:64:71:10:45:3d:83: e8:d4:db:94:40:82:b8:c3:85:fd:01:20:95:b9:68: b1:18:f0:9b:c7:7a:0f:5c:5e:a5:9f:43:39:e4:46: b0:f9:f8:7e:60:b3:a8:c6:e1:8c:21:37:72:0f:40: f1:f6:a7:78:27:4b:b1:99:e1:fa:ee:b1:09:05:56: 1e:1c:fa:9f:f5:34:d9:58:76:60:62:a2:c7:8a:43: 73:f4:bc:af:f5:41:2b:3e:34:ec:4c:c8:45:ff:0b: 26:6c:9e:d9:1d:83:0f:be:85:5d:c1:83:33:eb:a2: a7:aa:f3:f6:be:6f:87:c2:12:ee:87:3f:d0:1e:28: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl X509v3 Authority Key Identifier: keyid:27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer sbgp-ipAddrBlock: critical IPv4: 72.21.192.0/19 204.246.160.0/19 205.251.192.0/18 207.171.160.0/19 216.137.32.0/19 IPv6: 2600:9000::/28 2605:b940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7224 10291 16509 19047 63088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:36:06:b5:9d:4a:27:d2:f8:b6:0c:14:c3:11:4f:bb:22:a9: 23:a5:86:f1:20:d0:06:b0:67:98:aa:54:90:96:7c:e6:f1:bf: 90:7b:11:1d:d0:aa:b9:6a:d7:aa:72:0a:e4:3f:ac:12:f0:d1: 02:8b:69:11:b6:55:59:58:c5:9d:41:e3:bd:2e:c6:3e:bc:0f: b1:1e:6f:16:00:06:2c:a1:53:ce:6e:35:ed:3a:dd:0e:db:71: 4a:34:a1:8f:83:6a:66:97:e2:b3:34:1e:e5:9a:9a:0a:81:db: fc:ac:41:f1:82:12:be:8a:64:52:f8:4d:f9:e7:06:f5:5f:5a: c9:3d:6b:38:b3:8e:ee:1f:d7:74:8b:a2:dc:9a:db:97:95:d1: 5c:6b:a1:0e:0b:c7:73:00:ca:6d:79:b8:65:d2:81:76:47:29: 61:31:37:2a:cd:ab:d9:f1:a7:16:65:e9:3c:cf:5e:80:83:39: 0c:de:e4:71:7b:c7:9e:9f:34:60:93:db:60:30:a8:2f:f5:58: 6d:b8:fb:91:9a:35:dc:6e:22:9a:e2:9a:5a:c1:af:7c:06:f1: ae:d0:f1:78:f3:95:4e:46:c7:ba:21:8e:2b:77:10:c5:65:f9: c8:dd:42:0e:af:f9:15:fe:01:ce:a8:74:73:75:9c:05:36:07: ee:9e:ed:1c -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEncoTNWfX7c02kPLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmOGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1 OTEwMB4XDTI1MDQxMTExNTgzN1oXDTI3MDcxNTExNTgzN1owPTE7MDkGA1UEAxMy NTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQy Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmn2Il5pVm3gJINgu RhQr3h59mUeFGZ8OBxKAmH7Mb4pwrE6v9pI5WiTNSK+YHXuonsuoxaYX4k4BElUZ DCbc5A1RqLw/QwO7Opn4d9jH0N0G3vO9SJiFpxDhZSlPyNoXvJ08thDd8OzI518I dlSlQY3I8yHmij45L+7kT4RdymRxEEU9g+jU25RAgrjDhf0BIJW5aLEY8JvHeg9c XqWfQznkRrD5+H5gs6jG4YwhN3IPQPH2p3gnS7GZ4frusQkFVh4c+p/1NNlYdmBi oseKQ3P0vK/1QSs+NOxMyEX/CyZsntkdgw++hV3BgzProqeq8/a+b4fCEu6HP9Ae KPKPAgMBAAGjggRKMIIERjAdBgNVHQ4EFgQU6PPFIOIO8l06t6IWuxQEMWo3OPEw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEz NDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4 YWY1LWEzNDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVs eFc1VngzUjQwczQubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2U3NTE4YWY1LWEzNDMtNDI4ZC1i Zjc4LWY5ODJiNmU2MDUwNS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5Lzk5ZjhmZWQyLTI5MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC85OWY4ZmVk Mi0yOTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAuY3JsMB8GA1UdIwQYMBaAFCez ySj/JZNoxbJofjkPLyzpOMn1MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTlm OGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1OTEwLmNlcjBNBggrBgEFBQcB BwEB/wQ+MDwwJAQCAAEwHgMEBUgVwAMEBcz2oAMEBs37wAMEBc+roAMEBdiJIDAU BAIAAjAOAwUEJgCQAAMFACYFuUAwKgYIKwYBBQUHAQgBAf8EGzAZoBcwFQICHDgC AigzAgJAfQICSmcCAwD2cDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvNga1nUon0vi2DBTDEU+7IqkjpYbx INAGsGeYqlSQlnzm8b+QexEd0Kq5ateqcgrkP6wS8NECi2kRtlVZWMWdQeO9LsY+ vA+xHm8WAAYsoVPObjXtOt0O23FKNKGPg2pml+KzNB7lmpoKgdv8rEHxghK+imRS +E355wb1X1rJPWs4s47uH9d0i6LcmtuXldFca6EOC8dzAMptebhl0oF2RylhMTcq zavZ8acWZek8z16AgzkM3uRxe8eenzRgk9tgMKgv9VhtuPuRmjXcbiKa4ppawa98 BvGu0PF485VORse6IY4rdxDFZfnI3UIOr/kV/gHOqHRzdZwFNgfunu0c -----END CERTIFICATE-----Generated at Mon Nov 3 05:11:47 2025 by rpki-client