$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer File: 74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer (raw, json) Hash identifier: qfL3SrYfcZasRW+DqHNOJysMxWoTwGMEQfCDV9HMgC0= Subject key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584B1699D452CAA55A81ACB61F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Sep 2025 00:45:26 +0000 Certificate not after: Thu 09 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 19704 IP: 74.85.159.0/24 IP: 216.57.113.0/24 IP: 2620:135:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:99:d4:52:ca:a5:5a:81:ac:b6:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 5 00:45:26 2025 GMT Not After : Dec 9 01:45:26 2027 GMT Subject: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:e7:26:95:e6:d5:75:ef:86:d6:02:b5:d1: 10:ee:9a:73:43:7b:c5:e6:69:64:a8:ed:b8:71:83: c9:26:65:eb:6b:bf:41:ff:6e:92:00:f2:df:24:1a: 11:08:1b:c7:81:5c:2a:cd:d1:b9:7d:7f:fa:6d:dc: 98:57:5d:ef:d3:da:56:87:8f:ff:41:81:3e:2f:cd: b9:cf:92:94:d0:2f:3a:7f:1b:fb:9a:7a:e8:cf:ec: 68:0a:c9:94:c8:1c:d5:23:40:33:a2:0f:b0:8b:b8: 5e:b6:aa:93:0c:0f:6d:f3:70:a5:08:34:9b:d5:51: 0a:03:f1:28:4a:9c:47:0b:2a:77:d4:5c:19:d0:26: 03:fc:b2:30:e4:4a:4f:ce:6e:18:4d:7f:16:55:38: aa:d1:67:24:91:1f:d9:1b:a4:fe:91:4b:05:a5:1a: 8d:fe:31:88:ca:d1:77:d0:1c:23:67:b8:14:b7:8f: bf:f6:11:e2:96:b6:9c:80:7b:34:5b:d5:f5:1c:7a: a2:bf:3d:7d:64:12:40:77:62:1f:c5:90:2c:a0:61: 71:d7:97:db:7a:b1:15:c9:c3:54:ee:1d:c9:c6:c2: 43:92:14:d9:37:e7:a4:97:6c:7d:27:65:2c:6b:f1: 7b:d5:04:98:84:02:33:27:f3:4f:29:dc:10:03:e9: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.85.159.0/24 216.57.113.0/24 IPv6: 2620:135:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19704 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3e:3f:ab:c4:e5:c5:81:05:30:da:96:76:8e:31:31:d2:0d: 54:ab:72:a1:99:26:63:6e:0a:d3:d9:14:e8:13:4e:78:c6:d0: 3b:af:bc:16:30:f8:c7:2d:1d:a0:71:4e:da:bf:fd:da:4c:69: 91:fe:03:71:3f:be:84:51:de:67:5d:69:39:a2:bf:b4:1a:9f: f8:25:7b:87:41:e3:30:95:ba:74:42:91:7c:32:bd:83:94:33: e9:19:85:03:f7:ea:3c:0b:32:89:76:48:21:76:21:5b:7d:fd: fd:56:95:2b:77:35:10:de:0b:f1:98:a6:ce:99:83:e8:ba:9d: 0f:3b:58:48:fe:8f:67:17:1d:0a:14:aa:5b:1c:70:4b:4d:33: 28:c7:19:62:89:d0:2d:ad:9d:d5:1c:3c:8e:ec:33:88:20:1d: a4:69:ec:34:b2:4c:01:5a:c7:9d:a5:d1:cf:61:1e:96:68:d1: 6c:89:e0:bd:49:e4:cd:d5:8a:84:79:4e:33:ed:d5:5c:80:c8: 7d:b4:a9:27:61:9d:73:10:e0:07:cc:b1:32:8f:bd:be:4d:22: c8:93:3c:0f:22:9c:2c:23:31:e8:f8:c0:4d:52:0b:65:f3:09: d2:6b:16:a2:89:21:89:4d:15:cd:9c:fc:9f:e6:d3:32:1e:27: 2c:51:d9:7a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEsWmdRSyqVagay2H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDkwNTAwNDUyNloXDTI3MTIwOTAxNDUyNlowLzEtMCsGA1UEAxMk NzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1OTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKDnJpXm1XXvhtYCtdEQ7ppzQ3vF5mlkqO24 cYPJJmXra79B/26SAPLfJBoRCBvHgVwqzdG5fX/6bdyYV13v09pWh4//QYE+L825 z5KU0C86fxv7mnroz+xoCsmUyBzVI0Azog+wi7hetqqTDA9t83ClCDSb1VEKA/Eo SpxHCyp31FwZ0CYD/LIw5EpPzm4YTX8WVTiq0WckkR/ZG6T+kUsFpRqN/jGIytF3 0BwjZ7gUt4+/9hHilracgHs0W9X1HHqivz19ZBJAd2IfxZAsoGFx15fberEVycNU 7h3JxsJDkhTZN+ekl2x9J2Usa/F71QSYhAIzJ/NPKdwQA+lHTwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFL6b8EPh56qhAZwF9NNCpNyffshYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc0ZmU3MmQzLWM3ZjctNGM5My1h OWYwLWE1NzM0MWIyNTkwYi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFi MjU5MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABKVZ8DBADYOXEwDgQCAAIwCAMGACYgATUgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkz4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFU+P6vE5cWBBTDalnaO MTHSDVSrcqGZJmNuCtPZFOgTTnjG0DuvvBYw+MctHaBxTtq//dpMaZH+A3E/voRR 3mddaTmiv7Qan/gle4dB4zCVunRCkXwyvYOUM+kZhQP36jwLMol2SCF2IVt9/f1W lSt3NRDeC/GYps6Zg+i6nQ87WEj+j2cXHQoUqlsccEtNMyjHGWKJ0C2tndUcPI7s M4ggHaRp7DSyTAFax52l0c9hHpZo0WyJ4L1J5M3VioR5TjPt1VyAyH20qSdhnXMQ 4AfMsTKPvb5NIsiTPA8inCwjMej4wE1SC2XzCdJrFqKJIYlNFc2c/J/m0zIeJyxR 2Xo= -----END CERTIFICATE-----Generated at Thu Oct 9 11:39:55 2025 by rpki-client