$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer File: 9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer (raw, json) Hash identifier: uvEQuyhARbGR9t6WaiwRIfZdTAKjl86NBTt+xb/UcQw= Subject key identifier: 68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B110473D7E7B06AACD9E07940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 398375 IP: 130.51.56.0/22 IP: 134.195.212.0/22 IP: 169.197.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:d7:e7:b0:6a:ac:d9:e0:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=9893f4f1-990f-4cc4-b5e1-b29cfb61eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:61:9a:e0:3f:ad:95:4a:80:f5:be:e4:09: 2d:c3:ac:36:dc:78:a8:4b:39:97:95:08:b7:f1:a3: 42:60:f2:f3:ba:29:68:2c:ac:19:c6:c5:8d:64:a9: 20:cb:36:57:55:5a:5a:b9:c4:1e:4c:88:58:d6:f7: b7:5b:18:a7:ff:ef:86:d6:b7:af:d8:82:e6:37:98: 00:96:80:53:4a:75:7b:7d:99:26:bb:20:c3:ed:98: 3e:7a:43:be:4d:df:c2:a3:56:7d:2f:21:c8:77:73: 80:ac:fd:53:ce:0a:62:1a:e5:ec:50:39:5c:d7:8b: ab:48:03:c5:62:6e:fd:a4:06:a2:27:c9:4d:87:96: a4:81:05:b1:bc:81:c0:30:2b:17:75:76:2e:f1:74: dc:93:de:dd:67:e3:0f:75:72:ae:5c:7d:7b:ce:dc: 70:c9:ef:1c:5e:d4:36:1c:82:2f:5a:71:e9:2f:c5: aa:38:03:ff:5c:2f:72:ff:f9:70:2b:ea:b2:f5:b8: 3a:e3:40:57:79:b4:1d:26:d3:d3:53:ed:8d:a8:38: 73:cf:5e:fd:3c:fc:48:49:1f:be:77:04:d7:d4:00: 22:52:f3:e7:6a:75:0f:56:b6:48:bf:7a:ff:10:89: b8:c7:e5:7d:5a:2b:11:39:09:1c:4f:a5:ba:d4:b7: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 130.51.56.0/22 134.195.212.0/22 169.197.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398375 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:90:ae:6c:2a:00:af:47:01:60:a5:59:59:64:0a:2f:c5:09: 01:97:e1:e8:37:6b:27:ca:8b:0f:ff:13:7a:8e:39:72:63:9f: 02:77:48:58:de:f4:da:6e:55:00:fe:7a:f8:2e:82:d5:c9:c8: 54:33:d4:dd:79:a6:a2:ce:61:43:34:00:65:96:2a:0d:ea:7f: 9e:a7:a4:de:87:a0:a2:01:13:5b:92:75:f8:5d:3f:a6:7f:52: 3b:77:7d:d7:a7:6d:33:e4:5e:59:60:db:54:38:22:c5:fc:9b: be:2a:bf:44:7f:18:42:2e:2d:78:75:9e:c3:89:a7:35:1a:26: 43:fa:dd:17:a7:99:86:cf:50:d0:ec:05:9c:71:f3:00:09:c9: 06:ee:56:e2:bf:7b:79:13:74:4c:f0:1a:16:12:81:1b:01:3b: 47:9d:54:d5:bf:c9:e2:5e:28:fd:2e:4b:eb:d8:58:ad:ee:c7: 80:a5:45:73:14:ce:14:4a:10:11:c2:60:5c:b7:b8:19:85:88: 82:25:4c:42:fd:75:12:7d:09:86:43:5b:21:cf:40:e0:26:7a: 44:92:1c:e9:bc:db:76:69:f6:e8:e7:a4:6c:91:62:27:b6:11: 8f:f4:2a:32:fe:24:0d:40:8f:6c:29:07:82:86:fd:eb:54:bb: 30:4a:e0:f9 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEsRBHPX57BqrNngeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk OTg5M2Y0ZjEtOTkwZi00Y2M0LWI1ZTEtYjI5Y2ZiNjFlYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEFhmuA/rZVKgPW+5Aktw6w23HioSzmXlQi3 8aNCYPLzuiloLKwZxsWNZKkgyzZXVVpaucQeTIhY1ve3Wxin/++G1rev2ILmN5gA loBTSnV7fZkmuyDD7Zg+ekO+Td/Co1Z9LyHId3OArP1TzgpiGuXsUDlc14urSAPF Ym79pAaiJ8lNh5akgQWxvIHAMCsXdXYu8XTck97dZ+MPdXKuXH17ztxwye8cXtQ2 HIIvWnHpL8WqOAP/XC9y//lwK+qy9bg640BXebQdJtPTU+2NqDhzz179PPxISR++ dwTX1AAiUvPnanUPVrZIv3r/EIm4x+V9WisROQkcT6W61LcOCwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFGhG6sVwRkh2FifLZOAFwWEtGx4qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 ODkzZjRmMS05OTBmLTRjYzQtYjVlMS1iMjljZmI2MWVhYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk4OTNmNGYxLTk5MGYtNGNjNC1i NWUxLWIyOWNmYjYxZWFiOS85ODkzZjRmMS05OTBmLTRjYzQtYjVlMS1iMjljZmI2 MWVhYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKCMzgDBAKGw9QDBAKpxbAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhQnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEqQrmwqAK9HAWClWVlkCi/FCQGX4eg3 ayfKiw//E3qOOXJjnwJ3SFje9NpuVQD+evgugtXJyFQz1N15pqLOYUM0AGWWKg3q f56npN6HoKIBE1uSdfhdP6Z/Ujt3fdenbTPkXllg21Q4IsX8m74qv0R/GEIuLXh1 nsOJpzUaJkP63RenmYbPUNDsBZxx8wAJyQbuVuK/e3kTdEzwGhYSgRsBO0edVNW/ yeJeKP0uS+vYWK3ux4ClRXMUzhRKEBHCYFy3uBmFiIIlTEL9dRJ9CYZDWyHPQOAm ekSSHOm823Zp9ujnpGyRYie2EY/0KjL+JA1Aj2wpB4KG/etUuzBK4Pk= -----END CERTIFICATE-----Generated at Wed Sep 17 08:53:22 2025 by rpki-client