$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer File: efead3cb-1d38-407f-ba06-8e276b067238.cer (raw, json) Hash identifier: P3QpmpHKcI4sF4K2sWlXCbO1NO3L2qqz7QVn6L8Tcxs= Subject key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B8BDA8A4D44E7C4D66D4D4C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 00:45:23 +0000 Certificate not after: Thu 20 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 63421 IP: 192.107.237.0/24 IP: 205.251.146.0/23 IP: 216.238.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:da:8a:4d:44:e7:c4:d6:6d:4d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 17 00:45:23 2025 GMT Not After : Jan 20 01:45:23 2028 GMT Subject: CN=efead3cb-1d38-407f-ba06-8e276b067238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:8c:b8:d3:1e:cb:1c:d8:d3:83:f9:98:43: e9:1a:5f:c5:e1:5e:7d:31:a3:04:72:c3:f8:1c:66: 67:a1:a5:4c:eb:fd:09:5d:cb:0d:77:dd:89:25:a0: 3c:39:e5:93:3f:b1:34:3b:44:49:c2:6b:6d:35:08: 99:67:f2:5a:44:95:4a:7b:0b:6e:73:29:39:d0:0b: ec:61:2e:1b:47:5f:ac:d5:83:30:a2:b1:08:5e:40: 03:a0:9b:02:6d:aa:63:7a:be:fb:3f:33:8e:0b:5f: 29:e5:c9:22:da:86:a5:a1:b0:bf:b6:ee:58:aa:7a: af:cc:ba:f8:8a:0a:ba:d9:e8:07:8e:78:4f:82:90: 9f:17:48:63:75:69:55:a2:6e:c0:71:04:44:b3:22: de:af:5d:82:4b:06:7e:d6:de:e9:c8:ed:6d:9f:91: 49:24:74:5f:29:a3:4d:f0:11:d2:be:61:ae:16:99: 92:89:6f:d9:a8:b0:22:03:c5:73:5c:76:4f:74:1f: 43:35:67:7a:64:7c:d2:9f:9e:43:ff:f2:68:4b:7b: ce:f4:e9:f7:5a:7d:77:8d:95:27:b7:35:bb:63:77: bc:d8:fb:b4:67:49:22:5b:c8:48:58:49:7a:78:6f: b6:ae:18:71:f2:56:36:fd:72:93:6d:ec:a1:b7:60: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.107.237.0/24 205.251.146.0/23 216.238.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63421 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:58:17:51:9f:ef:45:61:39:e6:08:f1:2a:77:18:05:10:94: 55:d4:9d:d7:88:d2:44:7c:df:e9:18:49:27:c0:81:d2:68:e1: 1a:48:c1:e4:38:15:2f:c9:d8:cc:97:5d:46:ca:7f:a3:ee:32: 34:0f:fe:2c:65:ba:da:9b:60:b0:2c:55:11:a7:d0:bc:14:8b: ed:10:f9:41:c3:9e:36:83:6d:be:90:91:2a:50:b5:44:6f:09: 23:4a:5a:06:f3:9b:f5:df:5d:a2:9f:75:db:4f:5d:7d:11:2b: 73:b3:a5:01:90:8a:85:68:84:3f:d5:99:9b:01:84:85:51:13: c7:eb:21:80:74:db:ad:b4:13:7d:b9:8e:88:50:13:04:f7:e6: 06:68:cc:2f:96:d7:0b:21:55:08:f5:04:7a:c2:f7:e3:4b:74: 0b:85:7b:22:96:09:a3:ef:98:74:1a:ff:4a:1b:ed:bb:66:ff: 5e:d2:eb:55:fd:7a:ed:b1:96:45:2b:36:be:f8:8f:84:db:ac: bd:9f:ec:55:a4:b4:03:23:f5:b8:30:aa:5e:26:0c:3b:5b:2e: 16:01:5b:80:22:c9:72:53:ef:bf:0b:46:42:c0:73:f5:45:28: e7:eb:4c:a1:da:8c:25:f4:23:34:0e:cf:d8:24:35:72:f0:be: 30:c9:65:15 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEuL2opNROfE1m1NTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAxNzAwNDUyM1oXDTI4MDEyMDAxNDUyM1owLzEtMCsGA1UEAxMk ZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqMuNMeyxzY04P5mEPpGl/F4V59MaMEcsP4 HGZnoaVM6/0JXcsNd92JJaA8OeWTP7E0O0RJwmttNQiZZ/JaRJVKewtucyk50Avs YS4bR1+s1YMworEIXkADoJsCbapjer77PzOOC18p5cki2oalobC/tu5YqnqvzLr4 igq62egHjnhPgpCfF0hjdWlVom7AcQREsyLer12CSwZ+1t7pyO1tn5FJJHRfKaNN 8BHSvmGuFpmSiW/ZqLAiA8VzXHZPdB9DNWd6ZHzSn55D//JoS3vO9On3Wn13jZUn tzW7Y3e82Pu0Z0kiW8hIWEl6eG+2rhhx8lY2/XKTbeyht2BSXwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFDT52o3N31+AolX19miLT0cgwQPSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l ZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2VmZWFkM2NiLTFkMzgtNDA3Zi1i YTA2LThlMjc2YjA2NzIzOC9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIw NjcyMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADAa+0DBAHN+5IDBALY7rwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPe9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI9YF1Gf70VhOeYI8Sp3GAUQlFXUndeI 0kR83+kYSSfAgdJo4RpIweQ4FS/J2MyXXUbKf6PuMjQP/ixlutqbYLAsVRGn0LwU i+0Q+UHDnjaDbb6QkSpQtURvCSNKWgbzm/XfXaKfddtPXX0RK3OzpQGQioVohD/V mZsBhIVRE8frIYB02620E325johQEwT35gZozC+W1wshVQj1BHrC9+NLdAuFeyKW CaPvmHQa/0ob7btm/17S61X9eu2xlkUrNr74j4TbrL2f7FWktAMj9bgwql4mDDtb LhYBW4AiyXJT778LRkLAc/VFKOfrTKHajCX0IzQOz9gkNXLwvjDJZRU= -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:14 2025 by rpki-client