$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer File: 3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer (raw, json) Hash identifier: OgmxESXasD+36j4f63zAK0UUL57E9z97rWj9jPgdu5I= Subject key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584D91B8615CCE8AF16ACEFA5D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 12:45:17 +0000 Certificate not after: Sun 23 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 393847 IP: 143.220.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:b8:61:5c:ce:8a:f1:6a:ce:fa:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 20 12:45:17 2026 GMT Not After : Jul 23 12:45:17 2028 GMT Subject: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:de:47:e6:e2:64:1c:7c:6b:0f:db:56:fa: 66:3c:ca:d4:78:03:24:cb:30:74:6a:40:58:ec:07: a1:06:41:dc:f1:9a:38:da:ca:82:dc:ec:34:61:c9: 84:5d:a6:f6:04:c2:f2:50:be:25:54:83:90:00:60: 7b:10:d7:1d:b2:eb:4f:f8:67:c8:71:41:2f:42:28: 32:af:7c:9b:ec:f3:e8:45:47:18:4f:11:63:b4:74: 52:a5:01:a3:00:a3:24:9d:a9:df:a4:b8:eb:44:d3: 27:36:84:44:f8:45:d5:30:66:a8:7d:72:74:c4:4d: bb:10:f2:b1:6e:37:4a:6b:5c:8d:8b:0e:0f:a1:6c: 68:13:38:51:be:f2:30:9c:87:54:22:a8:19:bd:ff: 3b:74:6c:3d:f5:af:88:cd:7c:05:b8:42:b9:11:5a: 33:77:21:b7:da:0d:19:f5:1f:59:d8:9e:1b:c8:31: 21:8d:79:8a:87:43:58:f0:00:76:47:48:91:0f:19: 75:50:bc:a2:32:a2:3a:0d:44:3d:00:ac:fe:dc:7f: a4:9e:40:ea:cf:91:1d:54:c1:1d:e4:ce:a3:f3:34: 55:53:c5:79:12:8c:46:0f:1f:34:73:de:fb:44:e2: 9a:d6:8b:d9:7e:1a:ca:29:26:07:1b:5c:b6:8c:38: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 143.220.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393847 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1c:33:36:e3:49:ce:cd:01:27:d8:e7:a8:6e:2e:61:c6:bc: d9:54:b6:83:40:c9:57:d0:1f:0b:e1:6d:07:50:ff:15:8f:dc: 92:65:87:4b:df:f4:13:ec:e4:a9:91:50:90:a4:d1:12:79:05: d5:70:1a:46:39:d7:5b:0d:8e:85:c0:e9:81:b9:39:20:3d:3d: 29:29:74:9c:97:f2:05:1a:0b:db:8c:ba:22:7f:1d:55:7b:e8: de:d3:b0:25:08:91:1b:b2:15:f1:e2:04:62:6f:8f:c3:d4:8a: 47:35:ea:55:d4:9a:ce:f7:fe:70:12:90:7f:65:27:1a:cd:8e: 95:51:3e:9d:cf:4d:39:8a:2f:5f:c3:59:5b:25:4b:5b:f5:8f: f2:c8:6c:48:a1:09:ff:45:ff:14:3c:d3:1d:d9:6c:81:55:cb: e8:74:52:8d:c7:7a:32:dd:19:f2:3f:7e:67:62:85:1c:5d:be: 23:c1:71:86:c2:56:3d:b9:10:36:e0:3f:8f:dc:ab:ad:5f:ed: 02:af:58:82:83:3c:f2:65:73:0a:73:bd:14:1a:8e:07:25:e7: 35:0e:b1:3d:e6:7f:a0:e0:4e:4a:db:9a:e4:8c:52:58:f3:ee: 6e:59:36:b5:66:cf:3f:da:e4:92:3c:06:98:ff:58:3d:18:cc: 99:e1:43:09 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2RuGFczorxas76XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDQyMDEyNDUxN1oXDTI4MDcyMzEyNDUxN1owLzEtMCsGA1UEAxMk M2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3ODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaTeR+biZBx8aw/bVvpmPMrUeAMkyzB0akBY 7AehBkHc8Zo42sqC3Ow0YcmEXab2BMLyUL4lVIOQAGB7ENcdsutP+GfIcUEvQigy r3yb7PPoRUcYTxFjtHRSpQGjAKMknanfpLjrRNMnNoRE+EXVMGaofXJ0xE27EPKx bjdKa1yNiw4PoWxoEzhRvvIwnIdUIqgZvf87dGw99a+IzXwFuEK5EVozdyG32g0Z 9R9Z2J4byDEhjXmKh0NY8AB2R0iRDxl1ULyiMqI6DUQ9AKz+3H+knkDqz5EdVMEd 5M6j8zRVU8V5EoxGDx80c977ROKa1ovZfhrKKSYHG1y2jDiBMwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFlUCQpjXvhYZRtYxh7EUBUvC1ocMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8z YTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzNhMWMzNGM4LTBlNTktNGU2MS04 MGNmLTE3YTE4NWYyNzg5Yi8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVm Mjc4OWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCP3DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMG AncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAtBwzNuNJzs0BJ9jnqG4uYca82VS2g0DJV9AfC+FtB1D/FY/c kmWHS9/0E+zkqZFQkKTREnkF1XAaRjnXWw2OhcDpgbk5ID09KSl0nJfyBRoL24y6 In8dVXvo3tOwJQiRG7IV8eIEYm+Pw9SKRzXqVdSazvf+cBKQf2UnGs2OlVE+nc9N OYovX8NZWyVLW/WP8shsSKEJ/0X/FDzTHdlsgVXL6HRSjcd6Mt0Z8j9+Z2KFHF2+ I8FxhsJWPbkQNuA/j9yrrV/tAq9YgoM88mVzCnO9FBqOByXnNQ6xPeZ/oOBOStua 5IxSWPPublk2tWbPP9rkkjwGmP9YPRjMmeFDCQ== -----END CERTIFICATE-----Generated at Sun May 3 17:08:59 2026 by rpki-client