$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer File: 900920d7-dc26-412d-b92a-7af35af2cc24.cer (raw, json) Hash identifier: VBFjs1e/EvAnrkXVFY+xIDJxddV/zSk7tBuveluhSRE= Subject key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A7D0E4C7BA582DD0ED39DAA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Jul 2025 00:45:37 +0000 Certificate not after: Fri 15 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 36694 IP: 104.219.228.0/22 IP: 2620:11d:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:0e:4c:7b:a5:82:dd:0e:d3:9d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 12 00:45:37 2025 GMT Not After : Oct 15 00:45:37 2027 GMT Subject: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:45:fb:f1:3a:a3:d2:a7:65:0f:ad:ea:f0: d5:a4:68:48:2e:b0:fb:1c:16:bd:6e:ae:23:07:c3: 40:17:0a:2e:d9:05:6b:47:8f:3a:f8:4f:eb:82:f9: 08:4f:14:8b:cc:3f:5e:77:9e:26:1d:31:ec:ca:79: 8a:ca:f2:d9:e4:72:ab:fb:bc:7a:0b:1a:df:6b:71: cc:7c:b7:6e:22:fc:7c:cb:a0:c8:7f:73:4d:45:e0: 51:6e:9a:1c:60:f2:ee:78:c8:f0:6e:a8:53:c9:7c: 64:9c:cc:8a:59:59:31:d0:93:68:ea:83:79:f9:7b: df:66:af:d6:68:ac:02:4d:a0:66:91:6e:0b:90:33: 03:d8:59:6a:e2:bb:e5:5f:1b:dc:8d:f8:14:a4:76: 14:1d:59:ae:a9:b3:ed:0c:36:a0:56:54:7d:bd:b5: f1:14:9b:6e:8e:06:52:14:cb:b7:1e:2a:88:3c:ec: 33:09:3c:ba:5f:14:d2:e1:e0:6a:1e:c3:de:c4:80: 15:af:4f:94:6e:b2:c0:dd:e8:a6:20:ae:aa:47:66: 9d:42:9b:16:a5:2b:2a:5d:b6:19:cb:39:51:ef:84: 9b:d4:d4:1c:7b:da:b5:ec:ff:39:88:44:d4:ec:e5: a7:08:13:de:74:1f:c3:18:92:34:be:b8:9c:a8:35: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36694 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1f:85:3d:f4:aa:1f:dc:d4:c8:71:85:9b:c2:6b:b0:64:01: 59:19:cc:b3:44:2d:bc:d4:aa:64:20:12:f9:26:dc:5c:d2:e1: 3d:e4:96:a7:1a:a5:d9:43:63:26:94:4f:d3:45:fa:1b:b4:fb: 22:ea:46:56:d2:dc:ea:64:42:33:32:64:23:e9:4d:4b:85:99: 99:dd:61:e3:f3:c7:10:31:6f:2a:63:97:ab:dc:42:c1:2f:11: df:0f:8e:4f:64:31:a8:28:4c:6e:34:1f:00:7f:22:1d:08:7b: 17:02:9f:40:8a:8e:3a:aa:20:87:98:fb:41:88:8e:b8:38:c4: 4a:06:51:86:10:b3:ea:c3:70:6d:20:a1:1b:41:1a:47:81:8e: 8d:37:4e:16:16:b1:bc:60:b2:74:fe:99:a4:0c:60:24:6f:4c: 5d:91:14:f8:dd:c9:f9:1e:e5:ee:97:55:9d:63:c0:11:6e:aa: 86:f5:9e:76:d7:6d:f4:32:31:51:5d:07:ff:3a:c7:7f:a7:39: 7c:94:be:8f:35:8c:eb:8a:3d:87:ea:89:35:be:7b:30:b7:f1: 31:aa:6c:a4:c3:67:a5:e2:83:8f:c5:e6:a9:f8:e2:e9:50:8f: 91:18:e4:43:54:ca:85:82:ed:cf:d8:d7:f7:42:f2:20:45:0b: a0:af:ab:99 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEp9Dkx7pYLdDtOdqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDcxMjAwNDUzN1oXDTI3MTAxNTAwNDUzN1owLzEtMCsGA1UEAxMk OTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJjYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mZF+/E6o9KnZQ+t6vDVpGhILrD7HBa9bq4j B8NAFwou2QVrR486+E/rgvkITxSLzD9ed54mHTHsynmKyvLZ5HKr+7x6Cxrfa3HM fLduIvx8y6DIf3NNReBRbpocYPLueMjwbqhTyXxknMyKWVkx0JNo6oN5+XvfZq/W aKwCTaBmkW4LkDMD2Flq4rvlXxvcjfgUpHYUHVmuqbPtDDagVlR9vbXxFJtujgZS FMu3HiqIPOwzCTy6XxTS4eBqHsPexIAVr0+UbrLA3eimIK6qR2adQpsWpSsqXbYZ yzlR74Sb1NQce9q17P85iETU7OWnCBPedB/DGJI0vricqDWiaQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNdypppaml4xBRshUbg7x0iJSNPgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkwMDkyMGQ3LWRjMjYtNDEyZC1i OTJhLTdhZjM1YWYyY2MyNC85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFm MmNjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAJo2+QwDwQCAAIwCQMHBCYgAR0QADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAj1YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgx+FPfSqH9zUyHGFm8JrsGQB WRnMs0QtvNSqZCAS+SbcXNLhPeSWpxql2UNjJpRP00X6G7T7IupGVtLc6mRCMzJk I+lNS4WZmd1h4/PHEDFvKmOXq9xCwS8R3w+OT2QxqChMbjQfAH8iHQh7FwKfQIqO Oqogh5j7QYiOuDjESgZRhhCz6sNwbSChG0EaR4GOjTdOFhaxvGCydP6ZpAxgJG9M XZEU+N3J+R7l7pdVnWPAEW6qhvWedtdt9DIxUV0H/zrHf6c5fJS+jzWM64o9h+qJ Nb57MLfxMapspMNnpeKDj8Xmqfji6VCPkRjkQ1TKhYLtz9jX90LyIEULoK+rmQ== -----END CERTIFICATE-----Generated at Mon Aug 4 08:30:21 2025 by rpki-client