$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/97228cae-35b9-458b-ac99-e5843234e0ff.cer File: 97228cae-35b9-458b-ac99-e5843234e0ff.cer (raw, json) Hash identifier: 4LY1mn77z3ufXeYr+E3/029p9BPHidxrJ+nQYm166Q4= Subject key identifier: 72:4D:67:75:6F:73:48:36:19:5D:0A:6F:F9:A0:D7:06:43:A1:7D:65 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BB5BACD1042E6D2E01C2C8D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/97228cae-35b9-458b-ac99-e5843234e0ff/97228cae-35b9-458b-ac99-e5843234e0ff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/97228cae-35b9-458b-ac99-e5843234e0ff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Nov 2025 00:45:23 +0000 Certificate not after: Fri 04 Feb 2028 01:45:23 +0000 Subordinate resources: IP: 209.127.205.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:ba:cd:10:42:e6:d2:e0:1c:2c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 1 00:45:23 2025 GMT Not After : Feb 4 01:45:23 2028 GMT Subject: CN=97228cae-35b9-458b-ac99-e5843234e0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:c7:fd:ad:84:90:d3:27:0a:7b:47:e9:41: de:a2:60:bc:14:d1:4d:1f:ff:71:83:67:9e:89:72: 63:e0:f8:88:81:0d:6e:3c:45:0b:de:f5:45:79:1b: f7:5a:2f:b0:87:00:f3:78:77:85:3b:98:47:9a:fc: ab:f8:13:7f:49:1e:f0:50:7b:74:62:94:9b:b2:27: c2:a5:bb:29:ac:0b:86:c8:21:9c:d3:25:b2:df:46: 24:1e:4b:d8:38:0f:62:56:44:01:92:6e:a1:68:13: df:58:fb:f0:3f:02:50:6d:02:2e:e1:0a:1c:fb:35: 8e:82:e2:41:55:45:df:00:e0:b8:f0:25:a5:cc:30: 64:66:20:13:b4:0b:3a:67:ae:8f:02:b6:2d:ec:95: eb:dc:a1:40:3e:58:6d:ea:7d:e6:41:8b:4e:ce:c2: 79:02:7f:f1:55:46:75:cf:3e:27:a0:2d:b5:ad:52: 57:96:bd:7f:b0:5b:a9:27:75:ba:5e:39:c1:81:6f: de:15:4d:49:15:d4:2c:76:37:8f:fc:71:22:0c:b3: d9:32:a2:43:70:51:96:7c:ed:f2:e5:fb:91:d0:bb: f9:1d:a4:2c:7a:d4:78:16:7d:dd:38:b5:b5:a7:75: a2:a8:90:9d:a9:28:ed:47:03:ac:a2:b0:5d:73:bd: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4D:67:75:6F:73:48:36:19:5D:0A:6F:F9:A0:D7:06:43:A1:7D:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/97228cae-35b9-458b-ac99-e5843234e0ff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/97228cae-35b9-458b-ac99-e5843234e0ff/97228cae-35b9-458b-ac99-e5843234e0ff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 209.127.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a3:54:1e:ec:94:d6:e1:71:9b:44:01:76:88:a6:73:5c:a6: 57:69:a2:6e:ca:02:7f:9c:d6:59:8f:20:af:87:4c:58:85:a9: 1b:27:c8:b1:bc:3c:c6:a8:e8:b3:80:84:d4:dd:a9:88:21:2c: 7e:df:bd:71:d2:d5:f2:43:f9:f8:08:e2:a7:ec:5f:9b:5a:d7: e8:27:bc:f1:b1:d1:b9:32:67:d0:3a:1c:4c:27:2d:32:0a:57: b0:be:4e:a8:3c:7e:2d:27:fc:d2:f2:1a:85:70:b9:46:44:9d: 46:21:e4:66:8c:f3:31:05:c7:c2:7d:28:c9:56:82:ba:fc:b4: 57:5b:b1:b4:55:1c:58:fe:51:f0:28:6d:8f:95:45:1f:ef:82: 54:6e:65:b6:f1:9d:e8:e3:af:a1:40:fb:84:03:d0:18:b3:6e: 48:f2:ce:54:b4:41:98:8b:01:09:c9:5b:e4:f7:3e:94:90:96: 91:7a:ee:03:ab:ac:79:97:24:09:23:dd:53:7f:ab:a1:76:47: b6:4a:1a:98:46:b2:e1:06:fc:de:80:5f:b2:14:58:b5:4e:2d: e9:8e:29:41:8e:49:2f:5e:9a:17:db:4a:bc:0c:44:90:f1:c3: 60:2e:4d:ac:ba:23:de:52:f4:59:a6:49:b0:fd:6c:e4:07:77: c4:f6:f6:45 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEu1us0QQubS4BwsjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEwMTAwNDUyM1oXDTI4MDIwNDAxNDUyM1owLzEtMCsGA1UEAxMk OTcyMjhjYWUtMzViOS00NThiLWFjOTktZTU4NDMyMzRlMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtELH/a2EkNMnCntH6UHeomC8FNFNH/9xg2ee iXJj4PiIgQ1uPEUL3vVFeRv3Wi+whwDzeHeFO5hHmvyr+BN/SR7wUHt0YpSbsifC pbsprAuGyCGc0yWy30YkHkvYOA9iVkQBkm6haBPfWPvwPwJQbQIu4Qoc+zWOguJB VUXfAOC48CWlzDBkZiATtAs6Z66PArYt7JXr3KFAPlht6n3mQYtOzsJ5An/xVUZ1 zz4noC21rVJXlr1/sFupJ3W6XjnBgW/eFU1JFdQsdjeP/HEiDLPZMqJDcFGWfO3y 5fuR0Lv5HaQsetR4Fn3dOLW1p3WiqJCdqSjtRwOsorBdc73MwQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHJNZ3Vvc0g2GV0Kb/mg1wZDoX1lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 NzIyOGNhZS0zNWI5LTQ1OGItYWM5OS1lNTg0MzIzNGUwZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk3MjI4Y2FlLTM1YjktNDU4Yi1h Yzk5LWU1ODQzMjM0ZTBmZi85NzIyOGNhZS0zNWI5LTQ1OGItYWM5OS1lNTg0MzIz NGUwZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRf80wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcaNUHuyU1uFxm0QBdoim c1ymV2mibsoCf5zWWY8gr4dMWIWpGyfIsbw8xqjos4CE1N2piCEsft+9cdLV8kP5 +Ajip+xfm1rX6Ce88bHRuTJn0DocTCctMgpXsL5OqDx+LSf80vIahXC5RkSdRiHk ZozzMQXHwn0oyVaCuvy0V1uxtFUcWP5R8Chtj5VFH++CVG5ltvGd6OOvoUD7hAPQ GLNuSPLOVLRBmIsBCclb5Pc+lJCWkXruA6useZckCSPdU3+roXZHtkoamEay4Qb8 3oBfshRYtU4t6Y4pQY5JL16aF9tKvAxEkPHDYC5NrLoj3lL0WaZJsP1s5Ad3xPb2 RQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:57 2025 by rpki-client