$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer File: c743b329-2385-4bb0-899d-c1639569faa3.cer (raw, json) Hash identifier: a8H91+gQgr0FaHpZYv4XIQmXbT+NLBc4d/dogYAx6QU= Subject key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B6FEFB0A877C758A66BB3F0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 00:45:22 +0000 Certificate not after: Mon 10 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 399199 IP: 172.99.192.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:ef:b0:a8:77:c7:58:a6:6b:b3:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 7 00:45:22 2025 GMT Not After : Jan 10 01:45:22 2028 GMT Subject: CN=c743b329-2385-4bb0-899d-c1639569faa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:ca:03:8c:d2:53:13:b8:a5:4e:f7:ba:cc: 19:67:3b:69:5f:b1:00:8e:b1:eb:0f:71:01:c2:05: e7:d2:4c:cf:32:30:fe:bb:71:ef:69:8a:5c:dc:e0: 4c:24:46:b6:53:67:d6:c6:cd:b9:ad:67:06:f0:e1: 93:dc:1c:ca:21:07:75:4f:fe:5c:0f:91:3a:f8:8e: 2e:1f:18:7d:90:15:6a:44:89:a9:be:01:58:e7:cc: 61:c6:7b:cf:2a:aa:f0:bd:a5:ed:5c:49:a1:5b:ce: 47:aa:0b:24:b6:6d:95:ff:23:c0:6c:d4:18:6b:d6: 03:50:bd:86:d7:8e:56:0f:be:bf:d9:03:5b:59:00: 45:a2:e1:df:56:2d:32:6f:b3:e5:59:8f:8d:4a:00: 25:de:ec:28:b3:91:2d:c0:2e:eb:ea:71:b9:2e:88: f1:a1:cd:37:fa:a1:7d:4d:6d:58:9a:fd:87:9f:be: 1b:45:76:f9:cd:ef:0a:8e:57:66:56:5b:4d:43:67: 3a:94:1f:5a:6e:bc:56:d4:86:9c:59:31:6f:3f:96: 5c:bb:06:23:ed:35:b0:9e:f8:f0:4a:86:1d:ce:dd: 66:42:61:c7:14:42:1c:72:e5:36:9d:14:df:72:d9: b1:7a:cf:6a:ee:45:c5:1d:78:bb:d7:1c:53:7f:ab: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 172.99.192.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399199 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:11:d7:c0:30:3f:e1:e9:56:23:07:91:16:dc:3f:18:d3:5a: 0e:0d:55:78:20:34:a5:d1:e2:fd:90:1c:b0:ff:60:97:07:9e: 1e:96:c0:26:b8:d2:27:b3:b3:77:8b:da:e7:3d:fd:1a:c5:77: 77:09:59:85:e4:36:14:0f:29:f4:a4:00:89:53:f8:de:92:54: 4b:fb:a9:48:7c:bb:fe:c6:cc:fb:cc:a2:0b:8d:b7:50:8d:7c: 71:53:f7:9e:fb:66:28:0e:cc:9e:f0:57:fd:53:35:b4:9a:c2: ed:e5:2d:83:0b:bf:4e:30:3d:72:c9:50:8a:4c:ad:a4:c5:c5: 14:b5:f7:8c:c1:2b:60:27:83:63:10:53:de:43:83:54:cb:67: 5f:32:07:7a:10:03:4e:86:11:d8:2d:34:95:14:d9:1c:57:6d: 1b:a6:75:9b:c1:fc:b8:89:94:82:02:dc:60:43:be:57:8c:f3: 51:ad:e8:eb:ef:76:cd:67:15:a7:b8:c3:a3:58:b5:1e:25:a7: 0c:be:fa:9b:fd:21:53:a2:47:a2:15:d7:97:b4:0a:ba:d7:e3: 35:a0:f1:96:b8:53:4f:cf:98:d6:2e:79:2e:4a:15:5a:75:6f: 72:6c:c1:19:6d:d7:e9:81:6a:a1:b1:1a:db:9f:01:8c:80:1f: 3f:44:3c:11 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtv77Cod8dYpmuz8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAwNzAwNDUyMloXDTI4MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk Yzc0M2IzMjktMjM4NS00YmIwLTg5OWQtYzE2Mzk1NjlmYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig/KA4zSUxO4pU73uswZZztpX7EAjrHrD3EB wgXn0kzPMjD+u3HvaYpc3OBMJEa2U2fWxs25rWcG8OGT3BzKIQd1T/5cD5E6+I4u Hxh9kBVqRImpvgFY58xhxnvPKqrwvaXtXEmhW85Hqgsktm2V/yPAbNQYa9YDUL2G 145WD76/2QNbWQBFouHfVi0yb7PlWY+NSgAl3uwos5EtwC7r6nG5Lojxoc03+qF9 TW1Ymv2Hn74bRXb5ze8KjldmVltNQ2c6lB9abrxW1IacWTFvP5ZcuwYj7TWwnvjw SoYdzt1mQmHHFEIccuU2nRTfctmxes9q7kXFHXi71xxTf6sAkwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJvXX2a3PICJSbJKNltX0lgP+DoKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j NzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2OWZhYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2M3NDNiMzI5LTIzODUtNGJiMC04 OTlkLWMxNjM5NTY5ZmFhMy9jNzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2 OWZhYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACsY8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhdfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIoR18AwP+HpViMHkRbcPxjTWg4NVXggNKXR4v2QHLD/YJcH nh6WwCa40iezs3eL2uc9/RrFd3cJWYXkNhQPKfSkAIlT+N6SVEv7qUh8u/7GzPvM oguNt1CNfHFT9577ZigOzJ7wV/1TNbSawu3lLYMLv04wPXLJUIpMraTFxRS194zB K2Ang2MQU95Dg1TLZ18yB3oQA06GEdgtNJUU2RxXbRumdZvB/LiJlIIC3GBDvleM 81Gt6Ovvds1nFae4w6NYtR4lpwy++pv9IVOiR6IV15e0CrrX4zWg8Za4U0/PmNYu eS5KFVp1b3JswRlt1+mBaqGxGtufAYyAHz9EPBE= -----END CERTIFICATE-----Generated at Thu Oct 9 11:49:06 2025 by rpki-client