$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer File: 78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer (raw, json) Hash identifier: 4LU0Mb/+PO55Gnm4JGFo7A/9DuAXTBKL6smxpx/BbhQ= Subject key identifier: 27:F8:46:D3:73:B6:58:4A:AD:5C:D8:B4:61:1D:A0:DB:36:05:29:CF Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584BDC152DBF2079388633867240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 18:28:13 +0000 Certificate not after: Thu 17 Feb 2028 18:28:13 +0000 Subordinate resources: AS: 32931 IP: 104.219.168.0/22 IP: 144.168.0.0/19 IP: 172.96.0.0/21 IP: 216.126.56.0/22 IP: 2606:1880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:15:2d:bf:20:79:38:86:33:86:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Nov 14 18:28:13 2025 GMT Not After : Feb 17 18:28:13 2028 GMT Subject: CN=78e28dc6-5afe-42b3-92af-6ace9c2d5bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cc:e4:26:e5:1c:11:40:c7:6a:5f:17:ac:d5: ca:8f:1b:58:da:77:53:ab:b1:5b:82:e4:32:0f:26: 48:34:d4:d0:64:6e:1b:dd:1c:ea:c1:8f:20:ca:12: 3a:61:2d:7e:b5:43:a7:35:ae:22:4d:66:22:0a:7b: fe:ee:e1:d9:ae:57:ec:63:29:f2:b6:88:15:5a:e5: 33:54:91:d0:5c:72:46:0f:90:86:b5:6d:61:0a:8c: 46:05:e9:7e:0f:dd:ec:a0:4f:1d:a5:42:9c:a6:c1: 0a:05:fe:64:93:fe:e1:f8:08:f9:ab:ff:a6:32:0a: 21:bf:22:87:ad:c6:4e:6f:62:b8:9c:ae:2b:db:03: 3a:51:7a:e5:23:13:c1:18:6d:9f:20:d1:6d:a1:a6: 18:6f:01:42:3a:15:3b:cd:28:2e:c5:f0:9a:35:05: 2d:e2:05:ca:c1:b0:26:0e:ed:87:86:17:b9:1f:4c: f3:59:ff:7c:64:f0:2f:b3:64:ea:45:bc:49:f0:51: aa:5d:aa:53:c0:4f:7b:70:20:f8:8f:aa:3d:fa:29: 12:e4:2e:51:3c:11:3b:7f:a6:72:71:69:55:81:6b: 30:c0:24:ff:da:d8:7f:59:32:79:25:f9:21:ab:54: 56:39:81:ee:29:a9:69:de:d1:58:de:99:87:cd:c7: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:46:D3:73:B6:58:4A:AD:5C:D8:B4:61:1D:A0:DB:36:05:29:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 104.219.168.0/22 144.168.0.0/19 172.96.0.0/21 216.126.56.0/22 IPv6: 2606:1880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32931 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:56:9f:ee:c2:04:03:92:69:19:f9:83:42:fd:56:11:b0:3c: 3c:3f:12:c7:52:f2:ec:72:25:f0:77:63:11:b0:9f:b8:08:98: 11:a7:96:5f:f1:f6:c6:fb:4b:62:6c:64:cb:e2:e0:00:4a:36: a6:f9:dd:04:99:72:5e:be:17:76:98:6e:e6:4c:4c:b5:12:1f: fd:43:f0:1e:48:ba:13:46:b8:cc:92:0e:58:56:32:18:ed:06: 9b:9e:20:77:5a:75:3f:e4:da:24:b1:2f:af:f7:3e:54:88:27: fc:ea:5b:df:40:e7:39:1a:ee:b5:ee:0b:9f:64:a9:0a:27:bf: 12:49:0a:9f:01:a5:74:4a:03:40:5d:8d:0f:c3:ad:2f:db:88: 2e:d1:de:5a:ac:4c:0e:01:eb:a5:9e:69:f9:1c:a6:4a:00:af: 65:af:4e:93:e4:ef:75:5d:ca:72:cb:10:85:82:84:dd:e6:07: e2:e2:14:97:46:7c:1e:ad:ec:db:a2:0c:79:7e:eb:8a:9b:3d: 22:57:74:bf:67:26:ab:15:7d:ae:f2:ce:8b:d7:dd:c3:f7:5d: 35:2f:73:63:1e:0b:dc:3c:53:0b:73:9e:cb:15:89:a8:4a:5d: bc:b1:7c:7d:2a:62:0b:34:46:bd:34:ef:e9:2a:53:3d:ff:b2: d6:da:9a:e0 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEvcFS2/IHk4hjOGckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTExNDE4MjgxM1oXDTI4MDIxNzE4MjgxM1owLzEtMCsGA1UEAxMk NzhlMjhkYzYtNWFmZS00MmIzLTkyYWYtNmFjZTljMmQ1YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MzkJuUcEUDHal8XrNXKjxtY2ndTq7FbguQy DyZINNTQZG4b3RzqwY8gyhI6YS1+tUOnNa4iTWYiCnv+7uHZrlfsYynytogVWuUz VJHQXHJGD5CGtW1hCoxGBel+D93soE8dpUKcpsEKBf5kk/7h+Aj5q/+mMgohvyKH rcZOb2K4nK4r2wM6UXrlIxPBGG2fINFtoaYYbwFCOhU7zSguxfCaNQUt4gXKwbAm Du2Hhhe5H0zzWf98ZPAvs2TqRbxJ8FGqXapTwE97cCD4j6o9+ikS5C5RPBE7f6Zy cWlVgWswwCT/2th/WTJ5Jfkhq1RWOYHuKalp3tFY3pmHzccGdQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFCf4RtNztlhKrVzYtGEdoNs2BSnPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 OGUyOGRjNi01YWZlLTQyYjMtOTJhZi02YWNlOWMyZDViZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05 MmFmLTZhY2U5YzJkNWJkOC83OGUyOGRjNi01YWZlLTQyYjMtOTJhZi02YWNlOWMy ZDViZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJo26gDBAWQqAADBAOsYAADBALYfjgwDQQCAAIw BwMFACYGGIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAICjMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFxW n+7CBAOSaRn5g0L9VhGwPDw/EsdS8uxyJfB3YxGwn7gImBGnll/x9sb7S2JsZMvi 4ABKNqb53QSZcl6+F3aYbuZMTLUSH/1D8B5IuhNGuMySDlhWMhjtBpueIHdadT/k 2iSxL6/3PlSIJ/zqW99A5zka7rXuC59kqQonvxJJCp8BpXRKA0BdjQ/DrS/biC7R 3lqsTA4B66WeafkcpkoAr2WvTpPk73VdynLLEIWChN3mB+LiFJdGfB6t7NuiDHl+ 64qbPSJXdL9nJqsVfa7yzovX3cP3XTUvc2MeC9w8UwtznssViahKXbyxfH0qYgs0 Rr007+kqUz3/stbamuA= -----END CERTIFICATE-----Generated at Tue Nov 18 07:41:00 2025 by rpki-client