$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer File: 1918ee56-343c-40dc-b01d-fb5efd51e26a.cer (raw, json) Hash identifier: 5X3OM21kHsNXd+9WC+w+GVaDUjKFu7526OU7ail87Ks= Subject key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584ACA8E2E549D513E9A213DD480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 19:00:32 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 398351 IP: 23.143.204.0/24 IP: 2602:80a:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:8e:2e:54:9d:51:3e:9a:21:3d:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 8 19:00:32 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:97:75:a0:20:d5:e2:ec:48:89:b6:c4:61: 31:98:47:24:d2:72:ec:28:ff:d9:3e:3f:00:9b:ee: db:a5:0a:52:56:e0:3f:87:69:97:8f:85:5d:b7:da: ec:82:b4:ff:e0:ed:0c:89:d7:87:b4:be:9c:76:c1: 32:33:f3:15:b4:84:ef:8f:d0:bc:b6:0e:9b:4c:bb: 35:fe:44:a3:a9:a8:1e:13:f8:fb:2d:90:55:a4:69: df:96:cb:0e:72:a1:45:2e:9a:84:54:a9:39:85:7d: df:4f:6b:9b:0a:7e:2b:ed:84:3e:88:bb:e2:d8:66: 53:db:d5:ba:17:f0:1c:e7:3a:00:5e:e7:00:95:f8: 0b:5d:79:16:bd:51:4f:a6:7d:7f:a3:2a:1d:3b:61: be:ad:0d:df:63:b9:60:8c:ab:79:0d:cd:de:51:f0: 50:72:4f:5c:bb:2c:59:aa:75:6a:ab:c1:ca:e5:41: fe:e4:09:d9:61:52:97:d0:73:61:39:05:7b:fb:66: 29:99:18:47:66:58:d7:92:7f:96:3c:bf:2e:cb:22: dd:c9:1b:97:8d:55:69:3a:9e:64:ac:7e:3c:1c:e5: c4:ee:77:aa:b5:42:67:30:d9:3d:96:f3:a7:b5:08: 49:a0:4a:a1:79:5b:76:d4:92:e8:3f:3b:9d:1a:e7: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.204.0/24 IPv6: 2602:80a:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398351 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7c:2c:26:21:f3:4e:b8:f4:2a:c1:18:04:b1:b2:97:58:1d: c7:74:3f:14:8d:75:46:91:28:d8:97:0c:22:dd:fa:12:94:23: d8:fe:ad:51:8c:dd:22:c5:1d:6b:b6:58:a2:fd:f0:8b:e1:84: 58:35:e0:ce:45:77:64:f5:88:35:71:69:72:8b:ec:58:ee:39: 32:88:5d:ac:47:d9:6b:41:ac:60:6b:df:4f:b9:ad:17:a2:8f: 08:3d:df:6a:4d:8e:c4:25:41:bc:c0:c6:34:3e:e1:77:b1:ae: a1:1b:63:96:bb:3c:c4:84:71:29:39:70:ac:59:12:b0:2e:a3: 44:df:3f:6c:d6:4f:e7:17:4d:ee:99:22:39:c6:eb:e3:f8:38: f3:8e:0c:2f:1c:73:00:e2:aa:5d:21:88:e2:3a:ae:9e:53:28: 63:76:11:9c:8b:7d:6d:61:2a:74:ce:a2:36:79:91:4d:76:7c: 0e:47:e7:db:7c:53:0d:7e:2e:dc:f4:6f:96:50:96:50:47:17: 36:f0:59:0d:9d:74:05:65:d2:c5:10:ee:26:14:d0:4f:18:19: 05:a7:33:74:3a:ff:d3:c4:2c:0e:b9:03:33:ed:4a:26:85:76: f1:3c:df:13:31:34:66:0b:e0:85:71:7b:5c:df:dd:3b:f3:c0: 2c:4f:7d:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErKji5UnVE+miE91IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgwODE5MDAzMloXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk MTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFlMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkaXdaAg1eLsSIm2xGExmEck0nLsKP/ZPj8A m+7bpQpSVuA/h2mXj4Vdt9rsgrT/4O0MideHtL6cdsEyM/MVtITvj9C8tg6bTLs1 /kSjqageE/j7LZBVpGnflssOcqFFLpqEVKk5hX3fT2ubCn4r7YQ+iLvi2GZT29W6 F/Ac5zoAXucAlfgLXXkWvVFPpn1/oyodO2G+rQ3fY7lgjKt5Dc3eUfBQck9cuyxZ qnVqq8HK5UH+5AnZYVKX0HNhOQV7+2YpmRhHZljXkn+WPL8uyyLdyRuXjVVpOp5k rH48HOXE7neqtUJnMNk9lvOntQhJoEqheVt21JLoPzudGudYXQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBc5ScaDpvKjORYPNQDNgYF1a3/jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x OTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE5MThlZTU2LTM0M2MtNDBkYy1i MDFkLWZiNWVmZDUxZTI2YS8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1 MWUyNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj8wwDgQCAAIwCAMGACYCCAogMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYUDzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRfCwmIfNOuPQqwRgEsbKXWB3H dD8UjXVGkSjYlwwi3foSlCPY/q1RjN0ixR1rtlii/fCL4YRYNeDORXdk9Yg1cWly i+xY7jkyiF2sR9lrQaxga99Pua0Xoo8IPd9qTY7EJUG8wMY0PuF3sa6hG2OWuzzE hHEpOXCsWRKwLqNE3z9s1k/nF03umSI5xuvj+DjzjgwvHHMA4qpdIYjiOq6eUyhj dhGci31tYSp0zqI2eZFNdnwOR+fbfFMNfi7c9G+WUJZQRxc28FkNnXQFZdLFEO4m FNBPGBkFpzN0Ov/TxCwOuQMz7UomhXbxPN8TMTRmC+CFcXtc390788AsT308 -----END CERTIFICATE-----Generated at Mon Nov 3 10:30:04 2025 by rpki-client