$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer File: af86fe52-5b77-46b6-9502-51ccccf3a755.cer (raw, json) Hash identifier: fLDSEf3trj1bliTXcYqWGcteAstxLblCznxFDERMkMM= Subject key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B3AE4B7E2E7E3A5372612CC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 00:45:25 +0000 Certificate not after: Wed 22 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 22794 IP: 131.226.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:e4:b7:e2:e7:e3:a5:37:26:12:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 18 00:45:25 2025 GMT Not After : Dec 22 01:45:25 2027 GMT Subject: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:6c:fa:8a:a6:71:ca:b9:18:f8:c1:8b:b0: f9:2d:c9:08:5d:83:ae:b0:b0:a1:a3:d1:85:32:aa: c0:4d:e4:0a:1f:fe:65:c6:bf:bd:68:1b:10:04:c1: 15:b6:a0:41:5c:b6:91:9b:67:54:b2:c7:49:5d:4f: cc:1d:5d:b6:90:a9:16:37:96:e8:0f:0a:44:2a:c8: 7e:56:84:1e:da:00:6c:ea:37:7a:23:0c:48:65:ce: fd:e5:ee:e5:d0:d7:ca:f2:15:db:0c:14:80:e7:6d: 43:34:35:c6:2c:a7:65:b3:f0:a8:8c:c6:e8:74:ff: 0c:ab:34:14:cf:19:ea:da:ba:f0:4b:68:de:52:e4: 3a:11:1d:3f:f4:51:8a:03:09:0b:9f:6b:6c:d4:ab: c1:75:b3:48:36:c4:d3:d5:53:bc:cc:e9:8d:60:eb: 95:03:07:37:7c:00:16:99:f6:d7:80:6b:c2:6b:f7: 45:90:34:d7:bf:af:fe:90:97:e3:ed:6b:05:9b:65: 0a:01:58:73:f6:ec:cb:06:58:93:d7:f6:85:d6:08: 2c:3b:63:67:fd:c0:96:d3:1b:04:b0:0f:98:e5:e2: 90:eb:64:a4:77:d4:80:4c:83:96:da:92:5a:4d:40: 08:82:24:46:3f:d9:c3:75:ae:bd:5a:ca:c1:15:38: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 131.226.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22794 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:11:e0:a8:43:bb:84:74:88:2b:13:cc:31:7f:b1:f9:54:1e: 1c:9d:a5:17:8c:81:4a:3f:79:4b:d4:b2:4f:d2:9d:53:34:0a: 8e:d4:1f:33:55:b5:c7:76:5a:d6:0c:fa:ff:7c:f8:a9:0c:b1: 6e:1a:c8:ff:3b:1f:24:b0:15:b1:57:79:33:33:13:df:a2:5d: 75:bf:1d:42:29:4f:b1:3f:11:c7:5f:98:fb:56:ea:91:32:1e: 77:a7:53:1d:2d:13:4f:2f:58:ff:d7:6d:c3:2b:d6:83:55:95: ca:f1:f1:f1:d0:9a:e4:0a:b2:44:3d:e9:86:11:17:e0:82:7e: 0d:f6:13:d9:65:03:c0:ae:dd:95:32:76:e4:8f:3c:4a:8b:82: f2:a8:29:0d:0b:8f:e5:7b:ab:f3:20:44:8a:f2:da:0b:d9:e7: 9a:fd:87:b5:75:ec:35:65:aa:85:20:73:87:32:f3:7f:c1:48: de:65:10:b2:c6:37:dd:83:bf:8b:7f:4b:10:1d:ee:d8:3f:4f: d1:c7:fb:35:14:08:09:a2:d7:1a:f3:e9:b5:29:ac:90:09:8e: 5b:00:84:34:55:83:f0:6f:19:48:4e:f9:c5:b9:7c:17:69:1f: 01:f6:94:88:80:32:43:5a:20:84:3a:88:70:f6:aa:5a:19:6a: 8f:10:65:9e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEs65Lfi5+OlNyYSzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkxODAwNDUyNVoXDTI3MTIyMjAxNDUyNVowLzEtMCsGA1UEAxMk YWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNhNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Gds+oqmccq5GPjBi7D5LckIXYOusLCho9GF MqrATeQKH/5lxr+9aBsQBMEVtqBBXLaRm2dUssdJXU/MHV22kKkWN5boDwpEKsh+ VoQe2gBs6jd6IwxIZc795e7l0NfK8hXbDBSA521DNDXGLKdls/CojMbodP8MqzQU zxnq2rrwS2jeUuQ6ER0/9FGKAwkLn2ts1KvBdbNINsTT1VO8zOmNYOuVAwc3fAAW mfbXgGvCa/dFkDTXv6/+kJfj7WsFm2UKAVhz9uzLBliT1/aF1ggsO2Nn/cCW0xsE sA+Y5eKQ62Skd9SATIOW2pJaTUAIgiRGP9nDda69WsrBFTg0RQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKQp2HW8venyI3fXJy/NhkVo/WL6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h Zjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2FmODZmZTUyLTViNzctNDZiNi05 NTAyLTUxY2NjY2YzYTc1NS9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2Nm M2E3NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAaD4oAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WQowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAARHgqEO7hHSIKxPMMX+x+VQeHJ2lF4yBSj95S9SyT9KdUzQK jtQfM1W1x3Za1gz6/3z4qQyxbhrI/zsfJLAVsVd5MzMT36Jddb8dQilPsT8Rx1+Y +1bqkTIed6dTHS0TTy9Y/9dtwyvWg1WVyvHx8dCa5AqyRD3phhEX4IJ+DfYT2WUD wK7dlTJ25I88SouC8qgpDQuP5Xur8yBEivLaC9nnmv2HtXXsNWWqhSBzhzLzf8FI 3mUQssY33YO/i39LEB3u2D9P0cf7NRQICaLXGvPptSmskAmOWwCENFWD8G8ZSE75 xbl8F2kfAfaUiIAyQ1oghDqIcPaqWhlqjxBlng== -----END CERTIFICATE-----Generated at Thu Oct 9 11:46:26 2025 by rpki-client