$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer File: 2d723287-d624-4178-939e-a7d8be3facc5.cer (raw, json) Hash identifier: SiV13Kt8eFogrWz3BQZfLIYNKU7hGcjdv75F06wk0fA= Subject key identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B2FB9FA48ECA8EF71696DCAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Sep 2025 00:45:25 +0000 Certificate not after: Sat 18 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 29796 IP: 199.27.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:b9:fa:48:ec:a8:ef:71:69:6d:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 14 00:45:25 2025 GMT Not After : Dec 18 01:45:25 2027 GMT Subject: CN=2d723287-d624-4178-939e-a7d8be3facc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:f2:91:3d:55:7d:26:d4:66:c2:3b:6c:96: 88:cc:5f:7d:35:af:d6:91:50:e2:e4:ac:0b:54:54: a8:66:10:a2:23:59:66:32:be:d9:be:08:1c:c2:b2: 0c:fd:d5:d9:73:39:80:f2:5f:f8:f9:55:f0:d8:92: 6b:8c:aa:48:d5:fd:d4:5d:9c:c6:9a:30:c5:ac:28: bb:58:69:de:6f:ec:5e:f3:67:fc:ac:61:db:8d:b8: 3b:55:50:7f:ba:e6:b7:c2:be:ba:16:7e:58:31:d2: 13:41:80:fe:af:dc:a3:f4:5e:f0:1f:9f:e2:1f:b2: 8c:d8:dc:69:63:79:a2:30:c4:aa:7a:ca:5a:36:d3: 20:85:05:3b:f5:0e:5f:9e:0f:b5:28:e7:7e:8c:42: ec:58:6b:67:b1:31:0c:05:97:3d:e6:55:9a:8e:9d: be:f0:40:d6:e2:65:70:a4:c2:ed:b7:e4:4a:aa:11: 8b:61:43:5f:d9:d0:1b:d8:12:9c:e9:50:a5:3f:e7: 3e:9c:db:39:b4:15:90:22:a8:f2:67:e1:03:55:66: 2a:94:91:4e:0e:a1:11:b9:15:19:d2:1e:c4:99:92: f2:3b:6a:a0:c9:20:54:86:f9:c6:69:73:c0:a8:4d: 28:be:da:55:e5:0c:5b:10:dc:55:e0:5e:b8:30:5e: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.27.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e2:8e:98:fe:60:95:f5:00:46:82:82:02:a0:d0:b6:80:c9: 5f:77:d1:68:b6:45:48:e1:55:a1:ff:95:5d:4d:49:cb:f3:95: 95:ab:2a:84:a7:ae:38:9d:23:98:3c:97:1a:99:7d:79:c4:6e: 27:1b:78:e6:d5:e5:d1:fb:6e:fd:c7:c8:98:72:90:b3:30:52: fc:e4:5e:cb:db:78:ed:19:f7:bd:3c:12:05:65:da:52:17:f8: d3:14:f4:5a:2d:28:62:ea:33:00:2e:6c:59:42:7d:d4:99:cb: dd:38:9c:c9:ed:05:ba:de:3b:7e:47:c5:54:23:ce:cf:d1:f9: 60:0c:cd:da:ab:40:28:51:19:da:59:37:9b:95:e8:04:65:1d: dc:ea:73:2c:1a:2c:e6:97:e1:bc:89:65:d6:7a:c5:86:6a:43: 3f:11:db:2a:e7:f9:6f:2a:9a:bc:3e:50:e7:b0:5a:67:95:07: 83:fa:2e:12:d7:20:3e:50:37:f1:11:73:5e:71:98:12:4f:2d: 7e:f2:e5:a3:f8:01:5d:6c:c5:92:6a:b7:46:b8:49:d1:ee:c6: 62:47:90:55:e2:22:ae:14:5e:66:46:9b:98:02:21:ea:cd:89: 88:dd:bc:bd:5e:42:72:8e:67:6d:00:f1:67:bb:3b:d4:80:aa: a8:00:f4:63 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEsvufpI7KjvcWltysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxNDAwNDUyNVoXDTI3MTIxODAxNDUyNVowLzEtMCsGA1UEAxMk MmQ3MjMyODctZDYyNC00MTc4LTkzOWUtYTdkOGJlM2ZhY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9bykT1VfSbUZsI7bJaIzF99Na/WkVDi5KwL VFSoZhCiI1lmMr7ZvggcwrIM/dXZczmA8l/4+VXw2JJrjKpI1f3UXZzGmjDFrCi7 WGneb+xe82f8rGHbjbg7VVB/uua3wr66Fn5YMdITQYD+r9yj9F7wH5/iH7KM2Nxp Y3miMMSqespaNtMghQU79Q5fng+1KOd+jELsWGtnsTEMBZc95lWajp2+8EDW4mVw pMLtt+RKqhGLYUNf2dAb2BKc6VClP+c+nNs5tBWQIqjyZ+EDVWYqlJFODqERuRUZ 0h7EmZLyO2qgySBUhvnGaXPAqE0ovtpV5QxbENxV4F64MF4DHwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGD+VaqYX9+pdzv7gT9TnmAKpaXVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y ZDcyMzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4YmUzZmFjYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJkNzIzMjg3LWQ2MjQtNDE3OC05 MzllLWE3ZDhiZTNmYWNjNS8yZDcyMzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4YmUz ZmFjYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHG9QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dGQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAROKOmP5glfUARoKCAqDQtoDJX3fRaLZFSOFVof+VXU1Jy/OV lasqhKeuOJ0jmDyXGpl9ecRuJxt45tXl0ftu/cfImHKQszBS/ORey9t47Rn3vTwS BWXaUhf40xT0Wi0oYuozAC5sWUJ91JnL3Ticye0Fut47fkfFVCPOz9H5YAzN2qtA KFEZ2lk3m5XoBGUd3OpzLBos5pfhvIll1nrFhmpDPxHbKuf5byqavD5Q57BaZ5UH g/ouEtcgPlA38RFzXnGYEk8tfvLlo/gBXWzFkmq3RrhJ0e7GYkeQVeIirhReZkab mAIh6s2JiN28vV5Cco5nbQDxZ7s71ICqqAD0Yw== -----END CERTIFICATE-----Generated at Thu Oct 9 11:49:10 2025 by rpki-client