$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer File: 81da55c0-e4d8-4f54-a846-3081b08d8dad.cer (raw, json) Hash identifier: NUBqXnqhQGh2HEiZHjw9p9VKuMSpXhAgJqCVQOgf+C4= Subject key identifier: B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849FCA2D3F92B2654961B4B83A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 00:45:36 +0000 Certificate not after: Mon 30 Aug 2027 00:45:36 +0000 Subordinate resources: IP: 74.122.240.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:a2:d3:f9:2b:26:54:96:1b:4b:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 27 00:45:36 2025 GMT Not After : Aug 30 00:45:36 2027 GMT Subject: CN=81da55c0-e4d8-4f54-a846-3081b08d8dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:1b:aa:94:7e:24:d9:ac:04:5c:2e:96:1a: ad:1a:49:71:b8:15:f7:16:e4:ec:62:18:17:a9:42: b2:75:fc:d5:8e:c4:f0:86:c8:4a:d7:03:d5:e8:9e: 2c:80:6e:9d:e2:c3:cd:3f:83:4b:0c:83:b3:ab:51: 6f:13:d4:09:db:c5:f7:1e:93:3f:ae:a0:b7:b6:88: a5:26:a4:7e:93:7e:8c:39:8c:a5:2d:0a:85:69:2d: 51:19:cc:76:3b:7a:2c:7c:b6:97:b2:27:9f:23:ff: 0b:fe:bf:5f:01:c7:a2:02:da:fb:97:67:48:31:5f: 64:6a:f4:76:f7:31:84:43:da:c9:01:c6:82:a8:08: c2:ed:f5:39:34:e9:fc:b6:bf:bc:83:b5:81:ac:56: f1:2e:02:cf:01:d7:81:50:11:90:cd:ac:f7:19:89: 10:b0:3d:fe:15:03:f0:44:e8:b0:dd:87:88:cb:5e: fe:fd:ac:3a:f0:e8:12:e5:17:b2:b4:91:79:af:df: ad:46:e2:4a:39:e0:37:7a:48:32:08:fa:f2:31:24: 79:c6:68:57:b2:0f:6f:32:ad:4a:27:cd:62:b7:e6: 50:d2:c5:b4:21:d7:ac:a4:35:91:13:cd:80:73:06: 3f:38:54:ff:3f:0f:17:c9:30:45:c9:a6:ec:c6:7b: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 74.122.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1e:93:7e:f5:74:b1:e3:56:a3:54:a8:58:be:ac:28:9d:1f: 67:0b:22:72:8d:77:66:a8:f1:cb:c6:94:4e:d6:cd:24:d0:40: ac:47:bf:ba:d4:41:c0:4c:6e:2e:10:08:b4:f1:a5:56:83:c7: 9b:15:ad:35:70:27:a4:d3:86:23:b5:46:ed:78:42:58:26:51: 7d:86:90:4f:d8:09:0d:a3:c1:50:ae:6a:c5:ed:94:b5:11:99: c0:3c:61:ed:91:c1:b5:7f:21:ba:11:0b:3d:db:51:64:b7:c7: d4:4a:95:4c:77:2d:de:ab:fd:02:f9:be:1c:87:93:3b:c1:b1: 99:c2:45:f9:9b:56:e2:16:1e:ae:b8:d7:d6:08:84:8a:be:09: 87:18:b6:aa:df:3a:0b:e9:95:b4:cc:87:43:5c:d8:41:76:ab: c4:db:a8:02:29:ed:b4:17:9a:b3:6f:9e:57:f4:9b:bf:a5:a0: d1:b2:6f:a1:05:32:54:3e:23:30:e8:9e:fa:00:3c:e9:4e:0a: 67:24:fb:cb:3d:df:de:54:2b:de:20:8f:bc:9a:36:db:85:a0: 51:64:ef:77:5b:f9:bc:22:30:98:63:c7:b9:3b:d9:fe:97:ba: 6f:1b:e3:0f:ef:81:5a:9e:a2:0d:40:b9:e9:b0:83:71:04:60: 51:ce:4c:0a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEn8otP5KyZUlhtLg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDUyNzAwNDUzNloXDTI3MDgzMDAwNDUzNlowLzEtMCsGA1UEAxMk ODFkYTU1YzAtZTRkOC00ZjU0LWE4NDYtMzA4MWIwOGQ4ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XAbqpR+JNmsBFwulhqtGklxuBX3FuTsYhgX qUKydfzVjsTwhshK1wPV6J4sgG6d4sPNP4NLDIOzq1FvE9QJ28X3HpM/rqC3toil JqR+k36MOYylLQqFaS1RGcx2O3osfLaXsiefI/8L/r9fAceiAtr7l2dIMV9kavR2 9zGEQ9rJAcaCqAjC7fU5NOn8tr+8g7WBrFbxLgLPAdeBUBGQzaz3GYkQsD3+FQPw ROiw3YeIy17+/aw68OgS5ReytJF5r9+tRuJKOeA3ekgyCPryMSR5xmhXsg9vMq1K J81it+ZQ0sW0IdespDWRE82AcwY/OFT/Pw8XyTBFyabsxnuMpwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLKxgtjygvS8CIKe+6r0dqN//9FkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 MWRhNTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgxYjA4ZDhkYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzgxZGE1NWMwLWU0ZDgtNGY1NC1h ODQ2LTMwODFiMDhkOGRhZC84MWRhNTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgxYjA4 ZDhkYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABKevAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaR6TfvV0seNWo1SoWL6s KJ0fZwsico13Zqjxy8aUTtbNJNBArEe/utRBwExuLhAItPGlVoPHmxWtNXAnpNOG I7VG7XhCWCZRfYaQT9gJDaPBUK5qxe2UtRGZwDxh7ZHBtX8huhELPdtRZLfH1EqV THct3qv9Avm+HIeTO8GxmcJF+ZtW4hYerrjX1giEir4Jhxi2qt86C+mVtMyHQ1zY QXarxNuoAinttBeas2+eV/Sbv6Wg0bJvoQUyVD4jMOie+gA86U4KZyT7yz3f3lQr 3iCPvJo224WgUWTvd1v5vCIwmGPHuTvZ/pe6bxvjD++BWp6iDUC56bCDcQRgUc5M Cg== -----END CERTIFICATE-----Generated at Mon Nov 3 22:05:00 2025 by rpki-client