$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer File: 5ddde1fe-7525-49e3-9718-412c13cd42ca.cer (raw, json) Hash identifier: e9mGDPdOWS2VttQynl10nL8va7CjsqirKHetMUs0c5g= Subject key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B99CFF5EDE031EEB2081A09C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 3731 IP: 199.101.192.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:ed:e0:31:ee:b2:08:1a:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:01:b3:30:7b:8b:5e:e5:6c:e7:d6:27:d7:b1: fe:a2:73:6a:21:fd:b4:c0:c9:cc:3f:5c:79:91:73: 39:b5:fe:5f:13:d3:7c:20:3d:a1:f2:75:6b:05:4d: 41:8f:20:d4:4d:fe:82:c7:44:ec:40:18:8a:60:59: bf:60:ef:4f:12:1e:08:4b:cd:05:44:f5:c2:72:4b: 26:8d:ac:99:73:4b:c8:07:4f:b4:db:d3:bc:19:c8: 1b:46:2a:4f:0f:10:ae:b4:b3:1a:ab:22:94:bc:8b: 08:2a:82:96:b3:72:47:d1:60:78:69:69:b1:3a:d4: d9:2e:3b:8a:b4:c4:54:43:2a:08:ea:5c:dc:16:62: 2c:64:35:d7:31:20:82:93:2e:78:c6:b5:c5:21:f6: e5:aa:e4:e3:ce:dd:08:68:f9:8d:70:92:4f:d7:66: ba:67:c1:14:1c:89:24:0b:db:55:d3:6d:35:f7:6d: 09:d1:04:a2:c6:67:17:a9:a5:05:ec:55:ab:b9:81: 0b:2d:b7:9e:2a:39:7c:7c:7f:3d:34:e4:54:bb:52: 3b:7f:90:2a:b5:5e:d5:79:87:ed:a9:67:81:32:c5: 3d:81:b6:7e:0d:48:77:90:5e:47:7d:d1:79:e6:f6: e5:d2:8f:25:82:ec:19:e9:bc:cb:2f:6b:aa:cd:cf: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 199.101.192.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3731 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:73:02:2d:ff:27:f3:e8:84:78:83:f5:8d:62:62:59:93:99: 66:dc:f9:98:b5:cb:5e:9e:e1:bb:aa:56:a0:c3:20:34:31:8d: 38:bd:e0:23:8e:25:9f:ec:c8:1e:a0:55:bc:43:cf:c5:01:5a: 5f:44:2d:f8:30:f4:75:8e:6e:1a:46:46:90:83:f2:7f:29:09: 67:b0:4c:a8:24:ad:39:40:fb:b7:af:dc:8f:ef:6b:5d:2a:cd: 91:63:32:a8:d4:d9:2b:33:df:59:45:07:39:32:5e:56:da:16: 6f:d2:ca:7e:d8:f5:52:33:c3:25:a6:3e:e5:3f:c8:4e:83:d8: b5:79:f3:84:d8:29:b6:52:03:d1:ef:15:65:f6:2d:76:a4:2a: d5:0f:0e:f9:89:a6:d8:5e:a4:13:54:ad:e5:5d:b1:c9:6c:7f: a0:80:53:0d:61:43:8b:16:21:17:41:85:a9:b2:d4:76:c6:9c: 04:34:32:07:5f:59:fd:7d:10:42:24:5c:dc:7f:13:16:e3:e4: 62:6f:5a:d0:48:16:d5:85:dd:24:5a:a6:e7:f6:a6:f5:e3:b3: 88:29:f6:5d:1a:0c:e8:91:f3:f0:8f:2a:80:68:f9:5d:4f:d8: 0f:c5:92:f7:da:29:0f:b3:01:2d:60:27:70:a7:65:4d:39:96: b0:96:0a:c5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuZz/Xt4DHusggaCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk NWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgGzMHuLXuVs59Yn17H+onNqIf20wMnMP1x5 kXM5tf5fE9N8ID2h8nVrBU1BjyDUTf6Cx0TsQBiKYFm/YO9PEh4IS80FRPXCcksm jayZc0vIB0+029O8GcgbRipPDxCutLMaqyKUvIsIKoKWs3JH0WB4aWmxOtTZLjuK tMRUQyoI6lzcFmIsZDXXMSCCky54xrXFIfblquTjzt0IaPmNcJJP12a6Z8EUHIkk C9tV0201920J0QSixmcXqaUF7FWruYELLbeeKjl8fH89NORUu1I7f5AqtV7VeYft qWeBMsU9gbZ+DUh3kF5HfdF55vbl0o8lguwZ6bzLL2uqzc/ApwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFD8hF/gvdC673cHGaBumHI6KgWEhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzVkZGRlMWZlLTc1MjUtNDllMy05 NzE4LTQxMmMxM2NkNDJjYS81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNj ZDQyY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHZcAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC DpMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMXMCLf8n8+iEeIP1jWJiWZOZZtz5mLXLXp7hu6pWoMMgNDGN OL3gI44ln+zIHqBVvEPPxQFaX0Qt+DD0dY5uGkZGkIPyfykJZ7BMqCStOUD7t6/c j+9rXSrNkWMyqNTZKzPfWUUHOTJeVtoWb9LKftj1UjPDJaY+5T/IToPYtXnzhNgp tlID0e8VZfYtdqQq1Q8O+Ymm2F6kE1St5V2xyWx/oIBTDWFDixYhF0GFqbLUdsac BDQyB19Z/X0QQiRc3H8TFuPkYm9a0EgW1YXdJFqm5/am9eOziCn2XRoM6JHz8I8q gGj5XU/YD8WS99opD7MBLWAncKdlTTmWsJYKxQ== -----END CERTIFICATE-----Generated at Sat Oct 25 00:22:59 2025 by rpki-client