$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer File: 8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer (raw, json) Hash identifier: xKy7EeNSF8sqXb4o5tHn1mcSDzcdJb4Miodn47n8GQA= Subject key identifier: 33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B4E6F82F3B47DD88DAAEB0740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Sep 2025 00:45:26 +0000 Certificate not after: Wed 29 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 21732 IP: 192.225.99.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:6f:82:f3:b4:7d:d8:8d:aa:eb:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 25 00:45:26 2025 GMT Not After : Dec 29 01:45:26 2027 GMT Subject: CN=8594d3e0-32bb-4c5a-93c8-b52239cf17eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:e4:e4:57:57:fd:2f:86:77:7b:70:70:3c: a2:7a:65:fb:8b:68:79:65:23:a9:8b:db:1c:94:dc: ae:26:fd:2d:3e:e4:95:c8:04:6e:c6:3f:ce:ec:26: 97:30:4e:63:aa:88:90:dc:a5:46:76:fa:a7:65:b2: 60:2f:37:96:a4:97:d3:d7:f3:9b:7a:46:37:de:e3: ee:70:a4:8a:40:9d:9c:60:31:23:5a:42:39:3d:99: 73:60:56:11:e3:1b:6a:81:fb:7c:92:4f:86:83:72: 71:d5:42:ac:64:9e:b6:88:7c:86:2a:d2:20:17:a5: 8b:70:2c:4f:ee:3f:39:c4:df:c2:3a:0c:cd:56:9c: 09:e5:38:44:c0:d3:ce:57:44:15:4a:27:44:ff:6a: 49:a2:fc:c8:db:28:8e:7b:cc:db:89:26:e7:2a:ce: ee:88:e0:1c:9a:b7:e7:e2:af:b4:b8:f2:0f:dd:70: 79:ba:f1:85:89:7a:ba:b7:6b:03:bb:45:8c:92:88: 9b:34:1b:05:46:a5:8f:c9:95:e2:70:53:77:d4:c3: 57:ae:e5:4d:bc:0e:8d:6b:1a:fe:92:cb:c5:63:8b: 5b:bd:16:ab:c0:88:d5:61:6d:26:a2:e3:48:49:9a: 3f:d5:11:bf:95:fd:3b:b4:1f:2f:54:b5:73:70:28: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.225.99.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21732 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8e:c5:6b:e8:84:f1:d2:9b:d4:9b:4f:ac:eb:6f:38:ef:af: 28:de:19:4f:77:9a:d7:59:21:86:f4:36:c1:88:80:f9:44:32: a0:3b:d5:73:d8:75:e4:10:26:12:04:21:d0:1f:0f:38:99:2f: f8:81:88:0b:4a:65:49:8f:50:ac:82:92:a4:84:2b:cd:36:87: a7:7c:3f:b6:b8:fe:07:dd:74:6d:b3:2c:a2:1f:c0:43:e7:aa: 4a:65:5f:de:bd:9c:4e:c6:dc:47:27:e9:a9:5f:99:ce:51:3d: 38:50:7e:35:df:72:ae:ce:ae:8c:68:be:2f:41:9f:ff:f0:f3: e9:05:5f:59:0b:38:7c:9c:85:b3:11:59:ce:9d:f5:25:85:93: 26:d6:1d:8a:97:51:21:3d:cd:40:e2:9d:da:cb:ce:9d:e7:82: c1:6b:58:67:91:84:ea:fe:f7:7b:5d:f3:93:15:1b:29:ee:80: 4a:b7:7c:e6:e7:2b:71:5a:d5:19:6c:1d:cd:8d:60:f4:ca:bf: a4:22:e0:ed:35:93:ce:d1:fb:d2:1f:f2:d3:c1:91:a0:58:18: e7:de:5e:b3:d4:e1:5c:57:ad:31:70:41:80:74:97:56:f8:0a: c2:d8:4c:1e:73:3d:40:34:36:70:df:79:12:8c:25:47:48:47: 6a:39:7e:96 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEtOb4LztH3YjarrB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkyNTAwNDUyNloXDTI3MTIyOTAxNDUyNlowLzEtMCsGA1UEAxMk ODU5NGQzZTAtMzJiYi00YzVhLTkzYzgtYjUyMjM5Y2YxN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPXk5FdX/S+Gd3twcDyiemX7i2h5ZSOpi9sc lNyuJv0tPuSVyARuxj/O7CaXME5jqoiQ3KVGdvqnZbJgLzeWpJfT1/ObekY33uPu cKSKQJ2cYDEjWkI5PZlzYFYR4xtqgft8kk+Gg3Jx1UKsZJ62iHyGKtIgF6WLcCxP 7j85xN/COgzNVpwJ5ThEwNPOV0QVSidE/2pJovzI2yiOe8zbiSbnKs7uiOAcmrfn 4q+0uPIP3XB5uvGFiXq6t2sDu0WMkoibNBsFRqWPyZXicFN31MNXruVNvA6Naxr+ ksvFY4tbvRarwIjVYW0mouNISZo/1RG/lf07tB8vVLVzcCjOcwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDNNXJWw8b5anpag/bbtz0RLIrjyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 NTk0ZDNlMC0zMmJiLTRjNWEtOTNjOC1iNTIyMzljZjE3ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1OTRkM2UwLTMyYmItNGM1YS05 M2M4LWI1MjIzOWNmMTdlYi84NTk0ZDNlMC0zMmJiLTRjNWEtOTNjOC1iNTIyMzlj ZjE3ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA4WMwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VOQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZY7Fa+iE8dKb1JtPrOtvOO+vKN4ZT3ea11khhvQ2wYiA+UQy oDvVc9h15BAmEgQh0B8POJkv+IGIC0plSY9QrIKSpIQrzTaHp3w/trj+B910bbMs oh/AQ+eqSmVf3r2cTsbcRyfpqV+ZzlE9OFB+Nd9yrs6ujGi+L0Gf//Dz6QVfWQs4 fJyFsxFZzp31JYWTJtYdipdRIT3NQOKd2svOneeCwWtYZ5GE6v73e13zkxUbKe6A Srd85ucrcVrVGWwdzY1g9Mq/pCLg7TWTztH70h/y08GRoFgY595es9ThXFetMXBB gHSXVvgKwthMHnM9QDQ2cN95EowlR0hHajl+lg== -----END CERTIFICATE-----Generated at Thu Oct 9 11:44:57 2025 by rpki-client