$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer File: 341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer (raw, json) Hash identifier: q48tYWssMKYLQNIvwVekD17cMYK7Z/n9UdpP5N+3Aj8= Subject key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AC86EAC5A68B21449551D6DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:45:25 +0000 Certificate not after: Thu 11 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 19551 IP: 45.60.0.0/16 IP: 45.223.0.0/16 IP: 107.154.0.0/16 IP: 192.230.64.0/18 IP: 198.143.32.0/19 IP: 199.83.128.0/21 IP: 2620:28:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:6e:ac:5a:68:b2:14:49:55:1d:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 8 00:45:25 2025 GMT Not After : Nov 11 01:45:25 2027 GMT Subject: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:04:ba:fe:56:48:92:72:a9:a6:3a:a0:5e: e8:47:9d:09:87:9a:df:cc:cd:a8:00:3a:68:6e:03: 3d:12:42:40:59:66:e1:cb:03:99:41:35:b6:ba:35: d4:d2:15:09:e4:6e:6f:4a:5e:34:d8:56:50:80:66: d7:41:82:36:22:63:b1:ed:a2:cd:1d:7f:1f:13:97: 97:4e:33:b8:8b:23:6b:24:cc:db:9e:ed:7e:62:f6: 47:4a:e4:c6:d8:23:bf:7e:66:88:90:72:1f:2b:58: 9c:ed:b6:ce:0b:f7:02:20:a4:5f:9a:e9:82:b8:af: 7c:07:12:1a:4b:76:2f:7c:5c:f9:db:cd:03:01:f2: c5:5c:a1:f7:ea:8b:55:d8:b7:ac:da:93:8e:4d:c8: 2f:b4:9d:d7:06:16:43:e1:80:9a:f5:21:2c:91:84: bb:0f:2d:c8:db:df:f9:f0:46:da:13:e5:b1:4d:27: 09:fa:45:6f:98:e7:20:5c:08:11:06:ed:5f:b0:2f: a6:4c:0b:81:8d:60:c4:04:ef:06:51:a0:0f:2f:e6: ad:6c:8d:7b:9c:3d:9c:ec:67:f5:de:69:54:ff:a9: 09:26:02:fb:8b:bf:df:9e:fb:fc:d6:e4:41:47:57: 32:29:19:e4:d7:4d:dc:a4:4d:54:41:8b:24:69:4e: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 45.60.0.0/16 45.223.0.0/16 107.154.0.0/16 192.230.64.0/18 198.143.32.0/19 199.83.128.0/21 IPv6: 2620:28:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:07:47:38:02:aa:6f:2d:ba:c8:06:2e:39:70:d3:63:c7:43: 56:74:fa:65:ef:cf:ec:c2:cc:16:96:8f:86:2c:17:da:9c:19: dc:b5:db:65:fd:c0:4e:5a:6e:09:8b:4d:e5:c7:18:99:50:d5: f0:fa:49:57:61:d8:4b:77:ad:fe:02:c9:3b:c0:c7:7d:b2:f1: a6:cb:70:db:eb:5e:6f:65:28:26:c9:94:39:ed:e9:fd:69:e9: 3f:39:37:0f:d6:ef:79:8d:f2:a9:78:ca:43:a2:05:37:76:94: 7d:7e:29:0e:76:ca:ee:51:55:78:fa:17:e7:d7:86:9b:08:b9: ac:ab:b4:30:b3:84:8c:3d:3f:a3:82:42:60:63:e2:a5:c4:06: 62:af:a5:e0:32:82:bd:1c:33:50:1a:ec:30:be:04:fb:83:98: 01:f4:b6:29:8a:a2:94:68:6f:e3:2d:df:04:01:24:f3:28:0a: b6:e3:23:8e:8d:94:2b:45:24:af:a9:ca:5d:dd:51:44:32:46: 1d:43:2c:bb:9c:24:e2:47:db:75:e6:c8:13:c7:75:b5:d3:81: 39:e0:24:61:b5:2b:15:bc:de:e3:7d:48:3a:46:de:56:8e:d3: 5a:74:fa:86:f3:f0:69:ac:5e:45:b4:6c:8d:b5:88:53:dd:d5: 95:1b:08:5b -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWErIbqxaaLIUSVUdbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgwODAwNDUyNVoXDTI3MTExMTAxNDUyNVowLzEtMCsGA1UEAxMk MzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNjYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvewEuv5WSJJyqaY6oF7oR50Jh5rfzM2oADpo bgM9EkJAWWbhywOZQTW2ujXU0hUJ5G5vSl402FZQgGbXQYI2ImOx7aLNHX8fE5eX TjO4iyNrJMzbnu1+YvZHSuTG2CO/fmaIkHIfK1ic7bbOC/cCIKRfmumCuK98BxIa S3YvfFz5280DAfLFXKH36otV2Les2pOOTcgvtJ3XBhZD4YCa9SEskYS7Dy3I29/5 8EbaE+WxTScJ+kVvmOcgXAgRBu1fsC+mTAuBjWDEBO8GUaAPL+atbI17nD2c7Gf1 3mlU/6kJJgL7i7/fnvv81uRBR1cyKRnk103cpE1UQYskaU6ItwIDAQABo4IERjCC BEIwHQYDVR0OBBYEFKDwQXhhjEiWz6mMxppTi0BQKLK1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM0MWI3ZTk2LWE2ZjAtNDRkMy1h ZWNjLTkyOTRkNmJjY2M3OC8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZi Y2NjNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCcEAgABMCEDAwAtPAMDAC3fAwMAa5oDBAbA5kADBAXGjyADBAPH U4AwDwQCAAIwCQMHBCYgAChAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJMXzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnB0c4AqpvLbrIBi45cNNjx0NWdPpl78/swswWlo+GLBfanBnctdtl /cBOWm4Ji03lxxiZUNXw+klXYdhLd63+Ask7wMd9svGmy3Db615vZSgmyZQ57en9 aek/OTcP1u95jfKpeMpDogU3dpR9fikOdsruUVV4+hfn14abCLmsq7Qws4SMPT+j gkJgY+KlxAZir6XgMoK9HDNQGuwwvgT7g5gB9LYpiqKUaG/jLd8EASTzKAq24yOO jZQrRSSvqcpd3VFEMkYdQyy7nCTiR9t15sgTx3W104E54CRhtSsVvN7jfUg6Rt5W jtNadPqG8/BprF5FtGyNtYhT3dWVGwhb -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:57 2025 by rpki-client