$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer File: 239e2a72-9347-4316-9be7-20bdf6512711.cer (raw, json) Hash identifier: /xfjbkr0JZzmAhOcUYLkhIIY7VYaU+tIFd4mLrNbhoU= Subject key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B08A468A2F67FB4D66FC36B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Aug 2025 00:45:25 +0000 Certificate not after: Sat 04 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 23.129.232.0/24 IP: 23.140.88.0/24 IP: 104.193.212.0/22 IP: 142.147.96.0/22 IP: 162.251.120.0/22 IP: 172.96.8.0/21 IP: 192.188.88.0/24 IP: 204.10.160.0/22 IP: 207.174.9.0/24 IP: 208.70.8.0/22 IP: 2602:fb24::/40 IP: 2604:1740::/32 IP: 2606:9940::/32 IP: 2606:99c0::/32 IP: 2606:9a40::/32 IP: 2606:9ac0::/32 IP: 2606:f280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:a4:68:a2:f6:7f:b4:d6:6f:c3:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 31 00:45:25 2025 GMT Not After : Dec 4 01:45:25 2027 GMT Subject: CN=239e2a72-9347-4316-9be7-20bdf6512711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:7d:55:08:c2:55:04:96:b4:5b:ec:86:90: 7c:6e:5b:b4:5c:0e:85:94:1f:7d:4b:33:65:9b:41: 0a:45:68:7b:1e:81:58:69:ff:00:71:c0:a2:a3:a0: c0:e8:6d:9d:bf:ef:ed:55:97:ee:b5:d2:a5:01:d3: 10:2e:19:d2:cb:07:b8:3a:eb:7a:db:49:11:97:7d: 78:08:dc:51:af:13:2d:42:04:2d:bb:f2:61:87:64: 86:f0:f9:ee:0c:68:8b:8f:fa:15:50:90:a8:fb:81: ca:f4:26:67:9a:cd:4c:18:98:d2:c3:ee:a1:26:23: 7c:89:c0:d9:ff:e9:ae:cf:ea:a2:6e:37:f6:f2:7d: 4f:f0:b8:06:d3:00:b6:52:2c:f9:0b:d0:e6:02:60: 27:38:cc:e7:4c:5e:4d:5f:4a:b9:d1:cd:66:f7:97: f0:a3:d6:6f:ec:18:89:aa:99:25:44:7f:91:7f:27: 64:3d:c8:6f:fe:ed:fa:84:5a:9c:39:21:fa:52:08: cc:d4:e3:ad:6e:92:f3:b1:78:08:17:5c:86:cd:8e: 76:13:57:19:5d:45:b0:c3:5f:3b:b1:5c:9b:99:08: 5e:b7:35:47:1a:81:a3:a2:5f:e4:c6:cb:7f:0e:33: ea:f7:05:0a:9e:32:ce:1f:b9:5d:54:fa:38:7f:21: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.129.232.0/24 23.140.88.0/24 104.193.212.0/22 142.147.96.0/22 162.251.120.0/22 172.96.8.0/21 192.188.88.0/24 204.10.160.0/22 207.174.9.0/24 208.70.8.0/22 IPv6: 2602:fb24::/40 2604:1740::/32 2606:9940::/32 2606:99c0::/32 2606:9a40::/32 2606:9ac0::/32 2606:f280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ca:d6:ac:a0:ef:dd:96:a9:87:b5:a2:fb:ab:73:c6:ab:fd: bb:d2:a2:99:52:1c:31:66:60:e0:74:b7:51:78:4e:fb:48:3c: 23:90:d5:0e:71:e8:3a:fa:76:37:63:88:25:c1:71:25:5d:4d: b3:e8:30:23:41:cc:8d:84:41:0d:0c:96:61:f2:d1:5c:03:90: 1d:e0:13:66:d4:90:df:bb:8f:54:18:bd:91:11:c6:12:45:35: a8:46:7f:5e:02:41:e4:c3:82:28:f6:c7:8d:9a:a8:d1:c1:62: 61:64:3a:70:7d:4e:91:d1:7e:57:62:ff:54:6a:54:a7:60:39: a3:58:65:d1:cd:4b:70:f5:d0:ba:d9:cd:c0:dd:47:e2:56:7e: 5d:46:c8:e8:53:47:c3:cf:94:6a:e8:a0:3f:87:7e:8f:90:ff: 04:c8:7a:c2:fe:fd:50:67:15:0d:fa:1e:06:86:63:22:43:ef: 16:d3:3b:53:94:e4:3e:e9:68:b4:70:e5:fe:55:20:36:1d:49: 12:37:fe:d5:5a:92:72:5a:fd:1e:85:3d:94:f2:fb:44:02:b4: b6:07:09:90:31:c2:c8:33:c4:39:e0:6d:2f:21:73:b7:d5:54: ac:c0:a0:43:f7:81:79:f1:bc:72:b7:cc:fe:b2:34:9b:44:d8: 9a:71:04:da -----BEGIN CERTIFICATE----- MIIHXzCCBkegAwIBAgIUAQ0Mn0MoWEsIpGii9n+01m/DawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgzMTAwNDUyNVoXDTI3MTIwNDAxNDUyNVowLzEtMCsGA1UEAxMk MjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEyNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWB9VQjCVQSWtFvshpB8blu0XA6FlB99SzNl m0EKRWh7HoFYaf8AccCio6DA6G2dv+/tVZfutdKlAdMQLhnSywe4Out620kRl314 CNxRrxMtQgQtu/Jhh2SG8PnuDGiLj/oVUJCo+4HK9CZnms1MGJjSw+6hJiN8icDZ /+muz+qibjf28n1P8LgG0wC2Uiz5C9DmAmAnOMznTF5NX0q50c1m95fwo9Zv7BiJ qpklRH+RfydkPchv/u36hFqcOSH6UgjM1OOtbpLzsXgIF1yGzY52E1cZXUWww187 sVybmQhetzVHGoGjol/kxst/DjPq9wUKnjLOH7ldVPo4fyEAxwIDAQABo4IEcTCC BG0wHQYDVR0OBBYEFMcAWnZCYBGf7Xpvf2eUYmTsLWtUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y MzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzIzOWUyYTcyLTkzNDctNDMxNi05 YmU3LTIwYmRmNjUxMjcxMS8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1 MTI3MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZAGCCsGAQUF BwEHAQH/BIGAMH4wQgQCAAEwPAMEABeB6AMEABeMWAMEAmjB1AMEAo6TYAMEAqL7 eAMEA6xgCAMEAMC8WAMEAswKoAMEAM+uCQMEAtBGCDA4BAIAAjAyAwYAJgL7JAAD BQAmBBdAAwUAJgaZQAMFACYGmcADBQAmBppAAwUAJgaawAMFACYG8oAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAS8rWrKDv3Zaph7Wi+6tzxqv9u9KimVIcMWZg4HS3UXhO+0g8I5DVDnHoOvp2 N2OIJcFxJV1Ns+gwI0HMjYRBDQyWYfLRXAOQHeATZtSQ37uPVBi9kRHGEkU1qEZ/ XgJB5MOCKPbHjZqo0cFiYWQ6cH1OkdF+V2L/VGpUp2A5o1hl0c1LcPXQutnNwN1H 4lZ+XUbI6FNHw8+UauigP4d+j5D/BMh6wv79UGcVDfoeBoZjIkPvFtM7U5TkPulo tHDl/lUgNh1JEjf+1VqSclr9HoU9lPL7RAK0tgcJkDHCyDPEOeBtLyFzt9VUrMCg Q/eBefG8crfM/rI0m0TYmnEE2g== -----END CERTIFICATE-----Generated at Sat Oct 25 00:22:58 2025 by rpki-client