$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer File: 84ee337c-42c7-4207-b916-5028c8c62f82.cer (raw, json) Hash identifier: rLjT3MJWkFxpkP9TDZ+pN2RybM+08ft/kYA+SDHj4sY= Subject key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AD6641665907CCEB1808C7BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 00:45:24 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 11164 AS: 11537 AS: 13436 AS: 55038 AS: 62775 AS: 396450 AS: 396955 AS: 396961 IP: 64.57.16.0/20 IP: 162.244.104.0/21 IP: 162.252.68.0/22 IP: 163.253.0.0/16 IP: 198.71.44.0/22 IP: 2001:468::/32 IP: 2602:f64b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:64:16:65:90:7c:ce:b1:80:8c:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 13 00:45:24 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:a8:b5:ae:98:05:f5:24:ac:21:ec:fd:c3: 8b:94:92:80:92:20:3c:8e:78:76:9d:e8:69:73:9b: 94:d2:fa:43:28:c1:11:15:2d:f9:01:95:7e:84:f6: 2d:bc:d9:ba:79:a5:59:14:70:8c:78:bb:cd:7b:a8: d6:e2:41:83:d3:34:05:af:29:73:e3:b6:b6:f2:1a: ce:ad:09:42:e5:03:12:0e:da:15:79:0c:54:3e:a0: 76:42:8e:72:ef:ac:b4:94:a4:c9:70:47:02:51:f6: f3:2e:f5:da:db:da:17:c2:4e:4b:48:bd:d1:91:10: c4:aa:9d:50:17:a1:36:b9:e9:20:d8:94:e3:40:68: 74:82:ff:3f:46:19:9f:83:30:4a:25:8d:18:32:db: 31:f9:96:ce:20:80:e8:e4:12:17:7b:d3:c4:a3:89: bb:b1:89:1e:f9:b0:8f:6d:d6:14:3b:52:0a:77:aa: 8f:2b:ec:f5:37:0f:f8:bd:44:02:d5:2b:74:67:65: 68:e5:12:63:ba:7c:0f:aa:92:c9:1b:65:89:ef:79: 13:b0:96:84:83:b9:8b:2b:dd:d2:45:e3:2c:4b:35: 82:0c:a3:79:97:b4:30:e1:d7:c9:7e:3d:13:f4:71: 51:5b:cb:d5:b2:c0:97:5d:32:17:e6:12:e6:5a:73: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.57.16.0/20 162.244.104.0/21 162.252.68.0/22 163.253.0.0/16 198.71.44.0/22 IPv6: 2001:468::/32 2602:f64b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11164 11537 13436 55038 62775 396450 396955 396961 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:73:27:e5:aa:bd:f6:84:3c:fe:6b:7e:0c:16:e0:27:d1:a1: ae:02:e2:3f:6e:f4:a9:e0:07:57:64:16:d0:bb:6e:12:e2:5f: 3f:dd:6f:4a:11:f2:b3:f3:c8:59:5e:bd:38:24:ef:92:a0:13: 2e:9a:70:a4:29:c4:85:21:2a:0b:88:f1:76:33:c7:ea:21:45: 98:e6:40:27:5f:a5:30:eb:c1:b0:58:b3:d2:e2:89:11:71:12: 70:e5:86:f2:23:6a:20:0d:da:90:7d:b2:5c:21:94:09:dc:0a: 10:a2:e4:12:09:f5:4a:8e:05:2f:a0:39:92:ed:13:b8:2a:f5: 7a:7d:5f:16:2b:29:03:70:16:2a:db:06:72:7a:43:a5:43:05: 6a:56:cd:ca:d4:26:33:d8:36:4b:b4:85:81:f2:d2:52:4a:8e: 22:ec:6b:aa:5f:a2:81:dc:92:04:61:77:b5:c2:f6:14:c6:de: 33:0a:01:0f:f9:50:f3:6a:68:59:7a:5a:d1:a5:1b:a0:5d:0a: 3d:77:44:57:61:92:ef:09:74:ab:7d:a0:aa:a4:81:47:b5:9c: 6a:39:f3:df:68:fc:5b:49:f2:be:21:9b:af:22:92:1a:42:33: 9c:00:02:8b:16:d1:2b:12:65:62:2d:07:96:f4:1d:8d:02:cd: 0a:b2:26:1b -----BEGIN CERTIFICATE----- MIIHVzCCBj+gAwIBAgIUAQ0Mn0MoWErWZBZlkHzOsYCMe6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxMzAwNDUyNFoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk ODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYyZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nyota6YBfUkrCHs/cOLlJKAkiA8jnh2nehp c5uU0vpDKMERFS35AZV+hPYtvNm6eaVZFHCMeLvNe6jW4kGD0zQFrylz47a28hrO rQlC5QMSDtoVeQxUPqB2Qo5y76y0lKTJcEcCUfbzLvXa29oXwk5LSL3RkRDEqp1Q F6E2uekg2JTjQGh0gv8/RhmfgzBKJY0YMtsx+ZbOIIDo5BIXe9PEo4m7sYke+bCP bdYUO1IKd6qPK+z1Nw/4vUQC1St0Z2Vo5RJjunwPqpLJG2WJ73kTsJaEg7mLK93S ReMsSzWCDKN5l7Qw4dfJfj0T9HFRW8vVssCXXTIX5hLmWnNDGwIDAQABo4IEaTCC BGUwHQYDVR0OBBYEFKHFq6VUg5aNMzR0fGnAXymW3iX4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg0ZWUzMzdjLTQyYzctNDIwNy1i OTE2LTUwMjhjOGM2MmY4Mi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4Yzhj NjJmODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCMEAgABMB0DBARAORADBAOi9GgDBAKi/EQDAwCj/QMEAsZHLDAV BAIAAjAPAwUAIAEEaAMGBCYC9ksAMDoGCCsGAQUFBwEIAQH/BCswKaAnMCUCAiuc AgItEQICNHwCAwDW/gIDAPU3AgMGDKICAwYOmwIDBg6hMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEVzJ+Wq vfaEPP5rfgwW4CfRoa4C4j9u9KngB1dkFtC7bhLiXz/db0oR8rPzyFlevTgk75Kg Ey6acKQpxIUhKguI8XYzx+ohRZjmQCdfpTDrwbBYs9LiiRFxEnDlhvIjaiAN2pB9 slwhlAncChCi5BIJ9UqOBS+gOZLtE7gq9Xp9XxYrKQNwFirbBnJ6Q6VDBWpWzcrU JjPYNku0hYHy0lJKjiLsa6pfooHckgRhd7XC9hTG3jMKAQ/5UPNqaFl6WtGlG6Bd Cj13RFdhku8JdKt9oKqkgUe1nGo5899o/FtJ8r4hm68ikhpCM5wAAosW0SsSZWIt B5b0HY0CzQqyJhs= -----END CERTIFICATE-----Generated at Sat Aug 23 09:48:40 2025 by rpki-client