$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer File: 23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer (raw, json) Hash identifier: nCXa0i96jDllpfruKwRTP8zeG94K+j+pbbfkGEfDU8U= Subject key identifier: 79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A73F13BA87E4A47BAD4E5C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 18:24:47 +0000 Certificate not after: Mon 11 Oct 2027 18:24:47 +0000 Subordinate resources: AS: 401686 IP: 192.104.10.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:f1:3b:a8:7e:4a:47:ba:d4:e5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jul 8 18:24:47 2025 GMT Not After : Oct 11 18:24:47 2027 GMT Subject: CN=23d0180c-f5ee-4e4e-93f1-dbb120e04d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:e8:c1:20:78:0b:cb:04:bd:73:61:50:96: 6f:01:c5:02:f6:55:2b:31:dc:07:b7:8e:d1:bb:d4: b8:5e:6b:f4:99:fb:db:af:f2:04:09:10:7d:3f:b8: c1:24:e9:60:8b:87:f9:29:6d:e6:a8:c5:64:59:57: 3c:21:7c:01:72:58:2e:68:f6:81:b4:4e:46:a3:82: f1:cb:30:24:4b:51:8a:cb:22:11:d6:d1:51:0e:78: b9:56:85:a3:32:c8:5b:c9:75:b8:11:1f:11:a0:54: a7:69:74:28:61:fd:58:d7:8b:45:2f:b7:2f:97:72: cc:81:55:58:9f:f0:c7:cd:42:b1:00:8c:bb:26:28: d7:39:7a:d4:c4:3b:3a:76:fe:a7:fc:ec:1a:63:ef: 62:2c:34:2f:d2:30:f9:e7:c3:c6:37:f7:5a:41:e4: 86:61:f4:d9:f8:90:ce:d9:22:cc:d7:e1:56:94:91: 85:a4:46:63:25:a0:52:25:37:0e:78:cc:9a:02:57: c9:76:b3:b3:d7:95:62:ea:e3:50:2c:33:41:2c:78: 41:ca:72:ef:73:2c:4e:2c:c9:9c:f6:21:6e:2f:12: 3e:41:12:de:5c:25:e4:24:1f:e4:1a:85:f0:73:e8: 30:b6:25:5d:36:f3:08:2b:0c:d3:08:27:0f:3f:dd: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 192.104.10.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:59:64:3f:e2:6e:96:e0:f1:6f:de:f8:1e:aa:33:be:cd:81: a1:08:84:03:fe:e7:a6:c0:b7:9a:42:88:9b:f3:ac:c2:96:46: dd:19:df:fc:77:7d:f8:f5:b0:07:e1:4a:da:29:0e:23:c3:d4: 46:b2:0c:d6:96:7d:c7:04:8b:36:4b:e6:63:07:77:d9:1e:8c: a0:a3:57:e7:2a:74:59:2c:21:57:cd:af:13:79:f1:b7:b1:f0: a7:aa:61:a5:ec:06:b9:a8:2b:1a:ac:90:ab:52:ed:3d:75:b7: ee:4a:f5:53:1b:84:42:cb:7b:1d:b1:df:90:03:3c:0c:25:fb: b4:ba:e7:9a:0e:13:62:f9:e0:f6:ab:42:c5:66:a9:88:cc:c3: 87:21:60:38:51:a7:3e:f5:71:ef:dd:a2:80:8c:e3:be:f5:ce: ff:ec:20:a9:ee:d7:10:48:fa:f6:5f:22:53:ea:c7:01:e0:34: c9:21:00:8f:bf:86:5a:6f:9a:50:88:3f:d8:01:ce:40:ae:28: bb:1e:2c:b3:75:07:da:c5:fc:5a:11:58:38:ed:66:3b:22:3f: a0:e4:2b:9b:a2:d3:5a:c5:e2:e4:d8:7b:71:65:6a:27:f5:c1: d8:60:ad:5b:b1:06:64:80:c4:3a:54:8d:07:01:90:19:1b:3d: 38:04:d6:da -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpz8TuofkpHutTlyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDcwODE4MjQ0N1oXDTI3MTAxMTE4MjQ0N1owLzEtMCsGA1UEAxMk MjNkMDE4MGMtZjVlZS00ZTRlLTkzZjEtZGJiMTIwZTA0ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJfowSB4C8sEvXNhUJZvAcUC9lUrMdwHt47R u9S4Xmv0mfvbr/IECRB9P7jBJOlgi4f5KW3mqMVkWVc8IXwBclguaPaBtE5Go4Lx yzAkS1GKyyIR1tFRDni5VoWjMshbyXW4ER8RoFSnaXQoYf1Y14tFL7cvl3LMgVVY n/DHzUKxAIy7JijXOXrUxDs6dv6n/OwaY+9iLDQv0jD558PGN/daQeSGYfTZ+JDO 2SLM1+FWlJGFpEZjJaBSJTcOeMyaAlfJdrOz15Vi6uNQLDNBLHhBynLvcyxOLMmc 9iFuLxI+QRLeXCXkJB/kGoXwc+gwtiVdNvMIKwzTCCcPP93ibwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHktkzhsYUHj5Ljq6+AOFzdiJ7MIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y M2QwMTgwYy1mNWVlLTRlNGUtOTNmMS1kYmIxMjBlMDRkODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzIzZDAxODBjLWY1ZWUtNGU0ZS05 M2YxLWRiYjEyMGUwNGQ4NC8yM2QwMTgwYy1mNWVlLTRlNGUtOTNmMS1kYmIxMjBl MDRkODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAaAowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiEWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAANZZD/ibpbg8W/e+B6qM77NgaEIhAP+56bAt5pCiJvzrMKW Rt0Z3/x3ffj1sAfhStopDiPD1EayDNaWfccEizZL5mMHd9kejKCjV+cqdFksIVfN rxN58bex8KeqYaXsBrmoKxqskKtS7T11t+5K9VMbhELLex2x35ADPAwl+7S655oO E2L54ParQsVmqYjMw4chYDhRpz71ce/dooCM4771zv/sIKnu1xBI+vZfIlPqxwHg NMkhAI+/hlpvmlCIP9gBzkCuKLseLLN1B9rF/FoRWDjtZjsiP6DkK5ui01rF4uTY e3Flaif1wdhgrVuxBmSAxDpUjQcBkBkbPTgE1to= -----END CERTIFICATE-----Generated at Sat Oct 25 00:17:00 2025 by rpki-client