$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25fba62b-9876-43d0-92aa-560a0e2cd104.cer File: 25fba62b-9876-43d0-92aa-560a0e2cd104.cer (raw, json) Hash identifier: eoHrjLgf9lvBLs6DkmqYR+aMCIR1z1H2dpw2fQPXE28= Subject key identifier: 60:B5:61:23:1B:9D:D4:41:A1:D1:F7:C9:33:75:D0:D7:97:EF:54:DC Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849F9D826AAD2147BBAA940B1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25fba62b-9876-43d0-92aa-560a0e2cd104/25fba62b-9876-43d0-92aa-560a0e2cd104.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25fba62b-9876-43d0-92aa-560a0e2cd104/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 May 2025 00:45:37 +0000 Certificate not after: Sun 29 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 4906 AS: 11551 AS: 11778 AS: 32065 IP: 66.59.64.0/20 IP: 68.170.144.0/20 IP: 2606:3b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:d8:26:aa:d2:14:7b:ba:a9:40:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 26 00:45:37 2025 GMT Not After : Aug 29 00:45:37 2027 GMT Subject: CN=25fba62b-9876-43d0-92aa-560a0e2cd104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:a1:2d:27:aa:22:26:7e:ae:f6:6a:83:13: 95:30:53:3a:74:fa:db:fe:d7:b0:01:0a:64:7f:74: 2f:19:c0:f1:b6:c7:c0:51:bd:15:8e:ce:1b:8d:2e: 56:9a:fc:dc:63:b6:74:ac:9f:b1:53:28:35:40:e4: e8:8c:e8:59:c1:ca:b2:71:80:16:40:32:10:4c:4c: 40:6e:ff:f3:5d:95:32:02:8b:56:e1:ed:bb:c5:33: 10:14:0c:69:82:c0:86:31:a0:ac:44:01:24:65:e8: 48:d4:b8:d9:14:4d:1e:a2:e6:c1:77:43:6e:ef:41: 10:69:16:da:e1:53:db:26:fc:e1:e7:50:2a:53:15: d6:f3:8a:5b:1c:bb:2c:ab:2c:f6:bf:3d:23:23:9b: 2a:c5:e9:07:af:d6:a2:73:84:49:e4:05:e4:c2:15: 20:a3:d5:24:71:ec:6d:1d:7b:1f:c8:24:91:03:0c: d3:3d:7f:9d:70:bd:03:14:cf:3d:a4:f5:c0:ae:f0: 1d:16:cc:75:1f:fb:2c:b7:a4:1f:42:08:34:d4:6d: 7a:0c:69:79:c0:ba:26:ec:fc:c6:6d:f6:73:50:c1: d0:4b:99:d0:df:7d:57:67:fc:a1:25:6b:e7:c9:67: f9:04:b3:62:ff:37:82:72:b8:c7:ae:86:cb:0e:02: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:61:23:1B:9D:D4:41:A1:D1:F7:C9:33:75:D0:D7:97:EF:54:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25fba62b-9876-43d0-92aa-560a0e2cd104/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25fba62b-9876-43d0-92aa-560a0e2cd104/25fba62b-9876-43d0-92aa-560a0e2cd104.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.59.64.0/20 68.170.144.0/20 IPv6: 2606:3b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4906 11551 11778 32065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:16:0d:b9:62:d2:37:77:b2:1a:48:9d:cf:80:58:a3:fd:74: 3e:f3:2a:87:8f:a2:10:2c:ef:f3:c9:84:5a:13:8f:78:a3:ec: 59:88:6e:bc:45:7d:99:61:a3:f5:ad:5d:0c:2c:1c:39:7e:70: 9e:57:dd:a4:25:57:98:2b:2e:2d:b8:cd:1d:4a:de:c8:1f:7d: 7f:2b:e7:01:d2:93:09:55:12:8b:bc:70:23:d5:df:8d:31:e5: c9:fd:1d:3a:2c:35:30:9e:f2:3a:02:7a:6c:8e:09:0f:7e:1b: 70:32:bf:58:ac:e6:63:22:6b:c3:e9:e4:b5:05:93:0e:e9:4e: 8a:d9:47:54:a2:68:ad:e0:34:3c:61:35:58:4e:e1:17:c5:1a: cf:40:3e:e0:65:a8:fe:bf:34:00:b7:78:46:7a:c5:c7:9b:13: 78:ed:37:18:ee:95:34:62:f8:16:d9:df:e6:10:ea:29:83:9d: ba:b6:f4:a5:47:d3:e1:a6:65:2e:2a:77:65:9e:0e:23:50:69: 3f:0d:eb:b4:50:ad:76:70:30:4d:48:ab:50:36:3d:28:b0:8e: 7f:6d:60:cd:ae:5b:29:db:a7:1c:6a:42:ce:75:0d:0b:dd:0d: 36:ea:e9:55:84:04:d6:ae:64:6b:c0:30:12:68:d5:1e:4e:10: 9d:a0:22:5d -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEn52Caq0hR7uqlAseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDUyNjAwNDUzN1oXDTI3MDgyOTAwNDUzN1owLzEtMCsGA1UEAxMk MjVmYmE2MmItOTg3Ni00M2QwLTkyYWEtNTYwYTBlMmNkMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JahLSeqIiZ+rvZqgxOVMFM6dPrb/tewAQpk f3QvGcDxtsfAUb0Vjs4bjS5WmvzcY7Z0rJ+xUyg1QOTojOhZwcqycYAWQDIQTExA bv/zXZUyAotW4e27xTMQFAxpgsCGMaCsRAEkZehI1LjZFE0eoubBd0Nu70EQaRba 4VPbJvzh51AqUxXW84pbHLssqyz2vz0jI5sqxekHr9aic4RJ5AXkwhUgo9Ukcext HXsfyCSRAwzTPX+dcL0DFM89pPXArvAdFsx1H/sst6QfQgg01G16DGl5wLom7PzG bfZzUMHQS5nQ331XZ/yhJWvnyWf5BLNi/zeCcrjHrobLDgLCnQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFGC1YSMbndRBodH3yTN10NeX71TcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y NWZiYTYyYi05ODc2LTQzZDAtOTJhYS01NjBhMGUyY2QxMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI1ZmJhNjJiLTk4NzYtNDNkMC05 MmFhLTU2MGEwZTJjZDEwNC8yNWZiYTYyYi05ODc2LTQzZDAtOTJhYS01NjBhMGUy Y2QxMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCO0ADBAREqpAwDQQCAAIwBwMFACYGOwAwJQYI KwYBBQUHAQgBAf8EFjAUoBIwEAICEyoCAi0fAgIuAgICfUEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjRYN uWLSN3eyGkidz4BYo/10PvMqh4+iECzv88mEWhOPeKPsWYhuvEV9mWGj9a1dDCwc OX5wnlfdpCVXmCsuLbjNHUreyB99fyvnAdKTCVUSi7xwI9XfjTHlyf0dOiw1MJ7y OgJ6bI4JD34bcDK/WKzmYyJrw+nktQWTDulOitlHVKJoreA0PGE1WE7hF8Uaz0A+ 4GWo/r80ALd4RnrFx5sTeO03GO6VNGL4Ftnf5hDqKYOdurb0pUfT4aZlLip3ZZ4O I1BpPw3rtFCtdnAwTUirUDY9KLCOf21gza5bKdunHGpCznUNC90NNurpVYQE1q5k a8AwEmjVHk4QnaAiXQ== -----END CERTIFICATE-----Generated at Sat Oct 25 00:23:56 2025 by rpki-client