$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934.cer File: 2e2d1d1b-4362-4fc0-8497-9e8fa4ead934.cer (raw, json) Hash identifier: To25j8ULuzdkFH0L4JZRtgoYbwbhiel0kWa/F/ie4Ek= Subject key identifier: 54:97:B7:30:B6:45:77:EB:92:39:69:02:A7:09:44:81:12:8F:01:4B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B030F0845EEE21B90B4F1E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Aug 2025 00:45:25 +0000 Certificate not after: Thu 02 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 20344 IP: 216.152.76.0/24 IP: 2620:84:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:0f:08:45:ee:e2:1b:90:b4:f1:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 29 00:45:25 2025 GMT Not After : Dec 2 01:45:25 2027 GMT Subject: CN=2e2d1d1b-4362-4fc0-8497-9e8fa4ead934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:2a:bc:e8:aa:ef:84:a9:b2:40:77:0e:02: 69:82:76:1c:d3:34:b6:9f:2a:54:f4:36:8e:dc:24: b0:50:0e:0a:85:b4:86:0a:b2:de:57:81:6f:27:11: c7:28:22:88:18:ff:62:c6:8b:8e:0f:e7:79:45:b3: 0c:b2:e6:6b:89:80:39:90:9a:b8:ea:de:fb:d8:43: 2d:46:6f:52:ed:74:a8:ac:09:86:eb:03:df:76:e5: 88:f0:f6:23:fa:2b:d5:b0:03:6a:2f:62:4a:e9:57: f8:42:18:f2:01:73:cc:5a:c3:6f:dd:0a:60:4b:4a: c9:56:88:61:e8:33:ff:91:ce:04:4c:8b:f0:86:eb: 05:cf:fd:6d:b0:35:0e:52:cf:03:56:fc:fb:91:d5: 88:83:1d:54:6e:8c:c3:eb:2c:c3:24:8e:e8:5d:4c: bc:f0:76:88:df:59:f4:39:83:97:07:44:dd:ce:af: e3:6c:d3:6e:00:26:a5:29:6c:47:f6:63:5f:f8:66: 85:9d:f6:1e:04:7c:b2:54:b0:26:de:b7:45:c7:35: ef:dd:0d:26:ce:12:cf:e8:17:33:96:b8:58:b6:ef: 0b:9c:c8:9b:5d:69:da:c6:68:a1:c6:a5:d2:e7:31: 36:aa:8c:13:bc:c8:31:a9:cd:82:dd:7e:ac:d6:64: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:97:B7:30:B6:45:77:EB:92:39:69:02:A7:09:44:81:12:8F:01:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934/2e2d1d1b-4362-4fc0-8497-9e8fa4ead934.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 216.152.76.0/24 IPv6: 2620:84:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20344 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f8:5e:e1:75:8e:ca:d0:05:08:5e:8d:2f:f2:01:30:36:be: f1:22:65:ff:50:f7:c0:77:94:54:48:6a:c4:bf:be:70:b8:7a: 04:b4:64:de:be:10:ba:e0:9c:65:d3:64:de:46:dc:d2:95:b3: 3b:60:a4:2d:64:1f:1f:44:92:40:7c:c7:c5:ce:24:e3:93:95: a3:6f:63:af:05:b3:be:e3:9d:fd:16:d1:d9:4e:4a:f7:69:38: 6f:99:a7:a4:78:ac:f5:34:d4:b8:bf:03:64:53:00:c6:97:62: 71:a7:18:87:67:d0:06:d2:fa:c8:32:7e:93:90:c4:bc:a3:8a: fa:f4:dc:de:96:ac:b0:ce:b7:d1:b6:5f:de:d9:5e:17:d0:9e: 22:06:1f:4b:0e:14:33:71:e9:2d:ea:87:38:8e:d2:d2:91:55: eb:3d:ad:ae:91:26:fd:71:64:f7:e2:64:3f:b3:dc:f6:c8:9c: f1:55:c4:88:ef:fc:1b:b5:70:42:32:43:1d:dd:9b:c0:9f:f1: b7:1c:17:9e:c0:a5:ca:84:b1:4c:2f:34:54:40:76:2c:7d:2c: 09:b7:69:9d:60:3b:1a:b4:fd:da:8d:29:5b:41:4f:71:70:5d: a9:22:4d:5e:3b:0b:17:90:be:71:e3:8a:71:4a:08:22:62:fb: 4f:12:1a:93 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsDDwhF7uIbkLTx4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgyOTAwNDUyNVoXDTI3MTIwMjAxNDUyNVowLzEtMCsGA1UEAxMk MmUyZDFkMWItNDM2Mi00ZmMwLTg0OTctOWU4ZmE0ZWFkOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWQqvOiq74SpskB3DgJpgnYc0zS2nypU9DaO 3CSwUA4KhbSGCrLeV4FvJxHHKCKIGP9ixouOD+d5RbMMsuZriYA5kJq46t772EMt Rm9S7XSorAmG6wPfduWI8PYj+ivVsANqL2JK6Vf4QhjyAXPMWsNv3QpgS0rJVohh 6DP/kc4ETIvwhusFz/1tsDUOUs8DVvz7kdWIgx1UbozD6yzDJI7oXUy88HaI31n0 OYOXB0Tdzq/jbNNuACalKWxH9mNf+GaFnfYeBHyyVLAm3rdFxzXv3Q0mzhLP6Bcz lrhYtu8LnMibXWnaxmihxqXS5zE2qowTvMgxqc2C3X6s1mTT3wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFSXtzC2RXfrkjlpAqcJRIESjwFLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ZTJkMWQxYi00MzYyLTRmYzAtODQ5Ny05ZThmYTRlYWQ5MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJlMmQxZDFiLTQzNjItNGZjMC04 NDk3LTllOGZhNGVhZDkzNC8yZTJkMWQxYi00MzYyLTRmYzAtODQ5Ny05ZThmYTRl YWQ5MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADYmEwwDwQCAAIwCQMHACYgAIQgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJPeDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt+F7hdY7K0AUIXo0v8gEwNr7x ImX/UPfAd5RUSGrEv75wuHoEtGTevhC64Jxl02TeRtzSlbM7YKQtZB8fRJJAfMfF ziTjk5Wjb2OvBbO+4539FtHZTkr3aThvmaekeKz1NNS4vwNkUwDGl2JxpxiHZ9AG 0vrIMn6TkMS8o4r69NzelqywzrfRtl/e2V4X0J4iBh9LDhQzcekt6oc4jtLSkVXr Pa2ukSb9cWT34mQ/s9z2yJzxVcSI7/wbtXBCMkMd3ZvAn/G3HBeewKXKhLFMLzRU QHYsfSwJt2mdYDsatP3ajSlbQU9xcF2pIk1eOwsXkL5x44pxSggiYvtPEhqT -----END CERTIFICATE-----Generated at Mon Sep 15 06:03:51 2025 by rpki-client