$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer File: 09440a93-986f-41da-8723-7b67f81bdbce.cer (raw, json) Hash identifier: St7jWcIo2UwgpYkqvPUsS/AD3GvXVSskwEDxEd5k6as= Subject key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B61019999A8FF3D10A96602C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 16:24:20 +0000 Certificate not after: Wed 21 Oct 2026 20:30:29 +0000 Subordinate resources: AS: 19901 AS: 36633 IP: 9.134.0.0/16 IP: 9.138.0.0/15 IP: 9.144.0.0/16 IP: 9.195.0.0 -- 9.196.255.255 IP: 9.244.0.0/15 IP: 67.144.0.0/14 IP: 143.103.0.0/16 IP: 146.135.0.0/17 IP: 207.48.0.0 -- 207.50.127.255 IP: 207.50.160.0 -- 207.50.255.255 IP: 208.160.0.0/15 IP: 2601:1e00::/24 IP: 2607:6c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:01:99:99:a8:ff:3d:10:a9:66:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 1 16:24:20 2025 GMT Not After : Oct 21 20:30:29 2026 GMT Subject: CN=09440a93-986f-41da-8723-7b67f81bdbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:36:e6:c7:12:1b:6c:ab:2d:b8:cf:e2:81: 0c:a9:38:82:d0:cf:54:07:ec:a7:1f:48:89:52:4e: 6e:5a:88:7e:cd:69:1e:11:48:50:0a:6f:fa:16:03: d9:1b:30:23:29:db:18:35:80:7d:e9:f5:ba:1d:27: 63:43:f5:40:af:91:dc:67:78:d5:24:a1:88:65:e0: a7:93:30:86:0e:9c:22:87:9d:53:2c:b2:0c:27:f2: 63:c8:23:68:a8:95:69:f5:9c:2a:b1:c9:9d:c2:37: 33:c3:86:fc:08:e1:d6:d2:82:02:20:c5:c9:c2:fe: b9:32:54:fa:df:f4:97:16:c9:e9:b3:9b:2a:f3:1d: 85:11:c2:34:fc:ae:5d:09:e7:b1:ee:2b:d1:a1:42: ee:7e:6d:c5:01:40:37:78:35:ae:e5:73:40:d7:da: ae:b6:09:65:52:83:35:bf:34:a9:7c:e8:36:5f:20: fe:8e:17:c2:08:1b:3c:9a:94:49:7e:44:15:77:ae: b8:66:69:7b:f7:59:9a:a1:d1:49:82:4e:cb:e3:df: 91:40:57:9d:9e:e3:b2:70:cf:d3:ad:66:4a:82:94: 90:09:56:cf:7a:4e:36:c7:db:c7:5c:eb:66:02:e6: 52:e6:8f:05:9f:95:a8:2c:aa:52:2c:00:40:c1:60: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 9.134.0.0/16 9.138.0.0/15 9.144.0.0/16 9.195.0.0-9.196.255.255 9.244.0.0/15 67.144.0.0/14 143.103.0.0/16 146.135.0.0/17 207.48.0.0-207.50.127.255 207.50.160.0-207.50.255.255 208.160.0.0/15 IPv6: 2601:1e00::/24 2607:6c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19901 36633 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b6:b8:dc:58:be:8a:9c:c9:eb:9d:ff:65:47:37:c9:f8:0c: d5:5b:f7:bc:c5:fa:2b:d7:c1:02:ef:9d:03:01:70:a0:cb:d1: 98:d9:a8:a1:01:18:e8:b5:f2:2e:8d:5f:76:24:13:54:00:56: de:56:c1:54:ad:d9:0e:8e:ef:f9:bf:ea:af:fe:09:58:06:31: e7:51:7b:75:7e:af:a5:bb:0a:a4:87:ef:58:11:32:85:55:32: 6e:27:ef:af:97:39:c4:52:cc:9e:04:01:3c:34:a9:53:62:be: 68:c7:fe:72:84:91:74:fc:a6:50:94:60:ae:13:51:2f:aa:6e: e3:fd:dd:49:50:2d:a0:58:1f:0f:7f:b3:a4:8e:d7:9b:c6:a0: a0:b0:99:9d:95:2d:97:0b:23:b9:02:c6:af:9f:34:70:ae:da: 05:49:04:4f:bf:40:e2:c2:c2:72:41:15:5e:e8:5f:3d:cc:a3: d2:a6:44:5e:c9:d8:38:e0:ac:96:a4:13:5f:58:df:ae:b8:51: 4c:40:f6:bb:de:92:82:52:81:e9:4d:53:a6:ce:80:ff:e5:db: 21:bb:6b:a8:7c:df:da:7d:fd:5a:88:5d:30:c4:df:60:82:69: 02:ca:00:8c:dc:3e:38:24:cb:42:15:50:58:c0:7e:14:5c:b1: a8:12:d8:0d -----BEGIN CERTIFICATE----- MIIHazCCBlOgAwIBAgIUAQ0Mn0MoWEthAZmZqP89EKlmAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwMTE2MjQyMFoXDTI2MTAyMTIwMzAyOVowLzEtMCsGA1UEAxMk MDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJkYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhag25scSG2yrLbjP4oEMqTiC0M9UB+ynH0iJ Uk5uWoh+zWkeEUhQCm/6FgPZGzAjKdsYNYB96fW6HSdjQ/VAr5HcZ3jVJKGIZeCn kzCGDpwih51TLLIMJ/JjyCNoqJVp9Zwqscmdwjczw4b8COHW0oICIMXJwv65MlT6 3/SXFsnps5sq8x2FEcI0/K5dCeex7ivRoULufm3FAUA3eDWu5XNA19qutgllUoM1 vzSpfOg2XyD+jhfCCBs8mpRJfkQVd664Zml791maodFJgk7L49+RQFednuOycM/T rWZKgpSQCVbPek42x9vHXOtmAuZS5o8Fn5WoLKpSLABAwWDDdwIDAQABo4IEfTCC BHkwHQYDVR0OBBYEFEhLgeuplpc/st7p3ore6VxCMEODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w OTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzA5NDQwYTkzLTk4NmYtNDFkYS04 NzIzLTdiNjdmODFiZGJjZS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3Zjgx YmRiY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwfQYIKwYBBQUH AQcBAf8EbjBsMFUEAgABME8DAwAJhgMDAQmKAwMACZAwCgMDAAnDAwMACcQDAwEJ 9AMDAkOQAwMAj2cDBAeShwAwCwMDBM8wAwQHzzIAMAsDBAXPMqADAwDPMgMDAdCg MBMEAgACMA0DBAAmAR4DBQAmB2xAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAk29 AgMAjxkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALra43Fi+ipzJ653/ZUc3yfgM1Vv3vMX6K9fBAu+dAwFw oMvRmNmooQEY6LXyLo1fdiQTVABW3lbBVK3ZDo7v+b/qr/4JWAYx51F7dX6vpbsK pIfvWBEyhVUybifvr5c5xFLMngQBPDSpU2K+aMf+coSRdPymUJRgrhNRL6pu4/3d SVAtoFgfD3+zpI7Xm8agoLCZnZUtlwsjuQLGr580cK7aBUkET79A4sLCckEVXuhf Pcyj0qZEXsnYOOCslqQTX1jfrrhRTED2u96SglKB6U1Tps6A/+XbIbtrqHzf2n39 WohdMMTfYIJpAsoAjNw+OCTLQhVQWMB+FFyxqBLYDQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:43 2025 by rpki-client