$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer File: 133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer (raw, json) Hash identifier: evX8G6mTgcPHiJHiyiInh0ggkRanNVkbr+KCzfWbOeM= Subject key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584EB6DA28E679FC6B3D8DD8A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Aug 2026 12:45:12 +0000 Certificate not after: Sun 05 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 62579 IP: 147.160.48.0/24 IP: 148.59.127.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:da:28:e6:79:fc:6b:3d:8d:d8:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 3 12:45:12 2026 GMT Not After : Nov 5 13:45:12 2028 GMT Subject: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:ae:2f:e3:8d:dc:f7:9e:08:0d:45:54:6b: 92:71:99:1c:f8:84:07:d9:d9:6e:c8:56:61:f4:03: 31:de:cb:a0:b9:25:a5:d6:02:eb:b8:e2:a6:48:5f: 24:27:9a:4e:ec:c7:65:ab:ca:0d:f5:27:8e:ab:7d: a7:61:37:0f:a7:be:45:c2:17:e9:70:27:03:b0:bf: c8:9c:4e:68:34:62:63:0c:a8:f0:9c:73:49:9c:01: 5f:31:59:a7:08:b5:31:a3:b8:a0:94:3e:8a:d5:0c: 1b:d2:70:20:49:7d:39:ae:80:d3:91:7a:3a:9d:25: 9d:fe:b7:04:97:bb:fc:00:d5:cd:af:0c:a4:cf:ce: d2:25:07:fa:42:e3:15:c7:01:5f:d5:cb:2f:a9:dc: f2:83:4b:82:a7:59:05:fe:45:5e:b6:65:d0:da:de: 48:ca:70:c9:c5:95:b7:af:61:9b:81:e1:da:2a:ed: a2:90:46:d7:cd:6d:36:c6:96:59:0c:16:b3:87:2b: f8:38:70:2b:c8:59:c5:c6:5b:b9:ec:10:a4:70:e6: 16:69:ad:f3:e0:eb:57:a6:b9:b5:b5:8b:e2:75:5c: 06:4c:d2:eb:ef:79:3f:fa:4a:c5:85:ed:7e:0b:f1: dd:1c:8a:99:ee:45:51:9d:29:ed:37:30:4b:e2:79: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 147.160.48.0/24 148.59.127.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62579 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7a:d0:2a:55:9b:98:7c:12:a1:9d:e4:16:9d:61:2f:11:99: 53:9e:0d:cf:24:ae:d4:60:a7:b9:77:0a:47:a7:0d:d1:39:3b: 04:a0:ad:1b:9b:f9:eb:7f:d6:3b:c8:ce:77:99:c2:cc:f0:f9: e1:61:b1:9c:e0:af:b4:65:a5:b9:1f:26:f3:7c:b5:c9:b5:20: 50:72:d7:3c:9d:61:11:56:40:dd:e9:8f:e6:f3:39:91:dd:aa: c8:ec:ed:ac:ce:69:01:a2:1c:ce:32:7a:17:c0:4f:87:d2:95: b3:30:b6:82:99:bd:96:91:39:4a:2f:46:49:b8:13:97:81:63: 5e:06:85:1a:22:11:e7:39:67:a8:7d:76:cc:2b:fb:3b:1f:db: a9:f9:0a:af:d8:50:70:88:34:74:75:fe:67:cd:51:d7:5e:4e: cd:ee:e5:7d:e7:4b:a7:b1:21:99:e2:f2:59:40:97:03:01:06: 84:0c:ed:cd:8a:3f:c2:da:77:26:f2:61:75:5f:a9:70:1c:f1: cb:ae:7c:7c:cb:3e:3f:91:10:ce:15:54:b1:c2:f7:c8:13:41: 54:2a:90:20:44:3a:7b:44:6e:3e:03:78:ff:2c:1b:d5:c0:61: ef:4e:54:66:0b:39:ab:a0:98:ca:1c:e1:1c:23:03:32:42:ec: 75:0d:9b:2f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE622ijmefxrPY3YpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDgwMzEyNDUxMloXDTI4MTEwNTEzNDUxMlowLzEtMCsGA1UEAxMk MTMzZjJlOTEtY2M4MC00YjEwLWJmZDgtMzJiZmNjZWViMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjWuL+ON3PeeCA1FVGuScZkc+IQH2dluyFZh 9AMx3suguSWl1gLruOKmSF8kJ5pO7Mdlq8oN9SeOq32nYTcPp75FwhfpcCcDsL/I nE5oNGJjDKjwnHNJnAFfMVmnCLUxo7iglD6K1Qwb0nAgSX05roDTkXo6nSWd/rcE l7v8ANXNrwykz87SJQf6QuMVxwFf1csvqdzyg0uCp1kF/kVetmXQ2t5IynDJxZW3 r2GbgeHaKu2ikEbXzW02xpZZDBazhyv4OHAryFnFxlu57BCkcOYWaa3z4OtXprm1 tYvidVwGTNLr73k/+krFhe1+C/HdHIqZ7kVRnSntNzBL4nnfGwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNCtCYxol5WFt3S5FP5Z0lnV1jyrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x MzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2NlZWIxMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzEzM2YyZTkxLWNjODAtNGIxMC1i ZmQ4LTMyYmZjY2VlYjEwZC8xMzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2Nl ZWIxMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACToDADBACUO38wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPRzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAx60CpVm5h8EqGd5BadYS8RmVOeDc8krtRgp7l3 CkenDdE5OwSgrRub+et/1jvIzneZwszw+eFhsZzgr7RlpbkfJvN8tcm1IFBy1zyd YRFWQN3pj+bzOZHdqsjs7azOaQGiHM4yehfAT4fSlbMwtoKZvZaROUovRkm4E5eB Y14GhRoiEec5Z6h9dswr+zsf26n5Cq/YUHCINHR1/mfNUddeTs3u5X3nS6exIZni 8llAlwMBBoQM7c2KP8LadybyYXVfqXAc8cuufHzLPj+REM4VVLHC98gTQVQqkCBE OntEbj4DeP8sG9XAYe9OVGYLOaugmMoc4RwjAzJC7HUNmy8= -----END CERTIFICATE-----Generated at Sat Sep 5 00:22:52 2026 by rpki-client