$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer File: 15106386-88d8-4103-adeb-a6e7c684ed09.cer (raw, json) Hash identifier: ofG23BYWliSfrm3hl44lVSvOWgxy+BG1CzTvAG4tLy4= Subject key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584B5E30FA4ADEAC2D7C8218FB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 16:12:22 +0000 Certificate not after: Wed 16 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 31916 IP: 207.174.22.0/24 IP: 208.66.108.0/22 IP: 2602:fa81::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:30:fa:4a:de:ac:2d:7c:82:18:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 30 16:12:22 2025 GMT Not After : Dec 16 01:45:26 2026 GMT Subject: CN=15106386-88d8-4103-adeb-a6e7c684ed09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3d:19:b6:9e:35:5e:fe:ce:ef:37:1b:21:f0: 58:74:01:e5:60:17:aa:ae:c3:b1:49:9d:9b:61:7b: bd:91:1a:6b:51:db:cb:7a:bb:e2:5e:0f:5c:b6:5b: 65:5c:c0:44:34:fa:e0:d3:94:73:28:39:09:a7:7d: 69:49:06:be:79:48:42:fb:c3:ef:d2:d8:30:58:6a: 55:e9:2a:9f:91:c4:9c:cd:ad:80:60:84:be:0d:a9: a3:af:b9:e6:6a:04:47:2b:6d:f1:f6:db:ba:36:92: da:4e:64:2c:b6:95:9a:ca:ab:60:ac:c4:fb:5b:20: 18:cc:1f:f6:e3:db:9b:10:8f:24:01:62:2e:bd:fa: 71:f0:da:57:d8:25:2d:b5:53:c1:78:4a:49:9f:a1: a4:00:4d:5e:ea:64:f0:93:a6:73:ef:40:5e:56:cb: c7:70:38:38:c7:53:e3:ca:fa:06:6b:8f:c4:f0:a7: 05:66:6f:da:7a:1d:ab:90:8f:95:5e:b0:49:a2:6e: 48:07:c8:01:ac:c5:3f:3f:2a:98:53:79:83:37:bb: af:64:b0:7e:8b:27:e3:5e:92:03:3a:c4:ac:0c:ec: a0:75:01:97:28:8b:2d:f0:82:70:43:7c:7b:69:a3: 9c:b9:44:84:03:dd:5f:c2:5f:0c:b9:b9:80:0b:55: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 207.174.22.0/24 208.66.108.0/22 IPv6: 2602:fa81::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31916 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7a:85:7e:76:e9:39:63:35:73:c9:72:0e:ed:2b:f8:50:47: 77:ff:27:b1:3b:c9:d1:9b:3e:62:bf:e7:d9:7e:2d:0a:45:b0: cf:de:02:b1:6d:77:f4:99:01:46:57:b7:f7:51:98:92:15:51: b6:40:70:78:65:9e:8a:ff:65:d0:78:e6:8d:29:19:6b:ca:17: 66:7b:c3:80:23:81:8d:71:a2:a2:0a:72:43:d9:26:7e:20:27: c3:6f:7d:f9:8d:8c:fe:90:01:ac:79:c9:68:9d:de:24:51:3c: d7:6a:9e:8d:d9:a8:06:55:6d:00:54:75:3a:dd:77:4f:dd:98: 15:7a:7b:29:49:d6:00:94:80:29:10:d4:0e:92:a9:f6:f3:e9: bf:ed:e8:69:cc:89:09:7f:a8:9b:fa:31:63:0b:3b:8d:05:32: cc:95:49:fb:51:59:e2:11:c8:58:5f:a5:ec:fe:8c:69:d0:ed: 78:ce:db:c6:c4:e8:53:a9:6d:d4:a0:c8:9a:66:ba:c8:96:dc: 11:e4:34:ff:a0:5a:58:8e:4b:c4:97:55:34:16:db:9f:7f:6a: f9:04:5e:43:c4:5c:d5:21:ae:29:ca:69:ce:dd:7b:2c:22:31: e2:75:ba:b5:a4:27:4b:0d:21:80:44:c2:95:d0:55:b1:c5:3f: 8f:e9:58:95 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEteMPpK3qwtfIIY+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDkzMDE2MTIyMloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk MTUxMDYzODYtODhkOC00MTAzLWFkZWItYTZlN2M2ODRlZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D0Ztp41Xv7O7zcbIfBYdAHlYBeqrsOxSZ2b YXu9kRprUdvLerviXg9ctltlXMBENPrg05RzKDkJp31pSQa+eUhC+8Pv0tgwWGpV 6SqfkcScza2AYIS+Damjr7nmagRHK23x9tu6NpLaTmQstpWayqtgrMT7WyAYzB/2 49ubEI8kAWIuvfpx8NpX2CUttVPBeEpJn6GkAE1e6mTwk6Zz70BeVsvHcDg4x1Pj yvoGa4/E8KcFZm/aeh2rkI+VXrBJom5IB8gBrMU/PyqYU3mDN7uvZLB+iyfjXpID OsSsDOygdQGXKIst8IJwQ3x7aaOcuUSEA91fwl8MubmAC1W5iQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJeWrfoTuEnlu86kwEAX3D6t0qMaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x NTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4NGVkMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE1MTA2Mzg2LTg4ZDgtNDEwMy1h ZGViLWE2ZTdjNjg0ZWQwOS8xNTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4 NGVkMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBADPrhYDBALQQmwwDgQCAAIwCAMGACYC+oEAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABF6hX526TljNXPJcg7t K/hQR3f/J7E7ydGbPmK/59l+LQpFsM/eArFtd/SZAUZXt/dRmJIVUbZAcHhlnor/ ZdB45o0pGWvKF2Z7w4AjgY1xoqIKckPZJn4gJ8NvffmNjP6QAax5yWid3iRRPNdq no3ZqAZVbQBUdTrdd0/dmBV6eylJ1gCUgCkQ1A6Sqfbz6b/t6GnMiQl/qJv6MWML O40FMsyVSftRWeIRyFhfpez+jGnQ7XjO28bE6FOpbdSgyJpmusiW3BHkNP+gWliO S8SXVTQW259/avkEXkPEXNUhrinKac7deywiMeJ1urWkJ0sNIYBEwpXQVbHFP4/p WJU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:36 2025 by rpki-client