$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer File: aa033953-9752-479d-b9ee-4213cf648479.cer (raw, json) Hash identifier: tvy1fF6CnsOa3QeTodRUFs8dx4qGd/RQ/yp8nX0wtxw= Subject key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B13CF231B2B6C0AFB8E9E46C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 2381 -- 2382 IP: 140.189.0.0/16 IP: 198.150.0.0/16 IP: 205.213.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:23:1b:2b:6c:0a:fb:8e:9e:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=aa033953-9752-479d-b9ee-4213cf648479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:8e:ad:ee:20:57:a9:19:24:86:96:ce:15: ed:b1:9e:ab:7e:88:9f:1b:b9:fe:05:b5:18:54:ba: 03:ef:b4:d3:e3:50:43:68:28:ff:77:32:65:ac:0a: 06:fc:cc:c3:2e:16:68:89:2d:34:b8:83:78:96:ec: f3:3b:71:d1:e8:b7:3c:27:d2:e2:d9:09:ed:ba:89: af:c0:ae:ef:f6:1a:e9:53:ff:e5:db:36:d1:68:2c: af:ae:a2:95:08:6b:4c:e0:50:58:9f:69:a4:0b:30: a2:b4:2c:c5:64:39:7b:25:a4:ad:df:c1:e2:4d:f3: 3d:be:e7:57:6a:bb:44:20:c9:95:11:22:66:38:60: 1c:af:4a:76:73:0b:8b:e9:ea:be:49:f9:86:b2:45: 23:d7:bb:39:9e:e8:20:99:5e:d8:32:08:e4:a0:53: 3e:62:07:ee:56:4e:55:02:34:11:50:31:a3:c6:60: c6:3e:95:25:76:50:92:ef:1d:7c:c3:33:fe:38:97: 53:f7:1c:0b:b7:53:81:0a:5c:4d:09:ab:82:c5:14: 95:4f:49:98:b9:e7:9d:fe:d8:de:11:37:d7:df:15: 1c:3f:77:f4:75:e8:7f:85:84:ec:e3:5c:c3:2f:44: bf:a2:d7:01:94:4a:85:3a:b3:f9:ac:a9:2b:68:ed: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 140.189.0.0/16 198.150.0.0/16 205.213.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2381-2382 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:cb:13:ea:10:96:0b:5a:14:b1:47:d8:63:ad:ed:ed:76:be: db:aa:18:2b:77:39:59:63:14:82:96:72:ed:0e:30:92:35:2e: 74:2e:c4:7a:9f:ae:12:49:7c:25:f4:23:a7:26:fb:d4:c7:74: 7a:47:d3:1f:c8:44:94:a1:21:bc:8d:ed:e2:b2:59:b9:0b:fe: d1:c3:79:1f:0e:48:38:e6:cf:f6:bf:d3:a1:43:77:2c:b8:43: 1b:75:8e:31:c0:82:e5:f0:69:0f:76:f1:c3:f2:27:e6:5e:f7: 02:b5:30:a7:33:b1:21:2d:f4:c4:d2:27:49:75:65:3f:24:5b: 45:eb:8c:d8:bc:1d:50:67:30:f2:1d:62:76:73:9a:dd:5e:fc: df:30:3d:70:27:75:fb:76:93:67:d9:21:50:c9:05:f2:e9:30: 3a:2c:7f:c9:a2:f8:a9:71:d6:a9:62:94:34:53:38:d1:96:32: 5d:a1:87:b3:16:9b:20:5c:4f:81:00:8e:61:2c:48:e1:b4:0f: 7d:13:71:2e:36:6b:26:10:28:83:00:63:4d:66:bb:15:63:32: 8e:cd:64:31:4b:2d:31:71:91:db:93:14:87:7c:23:d8:85:06: dd:09:0b:b7:1f:16:c3:45:40:87:93:a5:92:e8:1b:f3:c1:cf: 28:56:2c:1c -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEsTzyMbK2wK+46eRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk YWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlyOre4gV6kZJIaWzhXtsZ6rfoifG7n+BbUY VLoD77TT41BDaCj/dzJlrAoG/MzDLhZoiS00uIN4luzzO3HR6Lc8J9Li2Qntuomv wK7v9hrpU//l2zbRaCyvrqKVCGtM4FBYn2mkCzCitCzFZDl7JaSt38HiTfM9vudX artEIMmVESJmOGAcr0p2cwuL6eq+SfmGskUj17s5nuggmV7YMgjkoFM+YgfuVk5V AjQRUDGjxmDGPpUldlCS7x18wzP+OJdT9xwLt1OBClxNCauCxRSVT0mYueed/tje ETfX3xUcP3f0deh/hYTs41zDL0S/otcBlEqFOrP5rKkraO2zowIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFIQmS47kLDpuf4PGMHpdjE045rizMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h YTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FhMDMzOTUzLTk3NTItNDc5ZC1i OWVlLTQyMTNjZjY0ODQ3OS9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2 NDg0NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwKAYIKwYBBQUH AQcBAf8EGTAXMBUEAgABMA8DAwCMvQMDAMaWAwMAzdUwHwYIKwYBBQUHAQgBAf8E EDAOoAwwCjAIAgIJTQICCU4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuMsT6hCWC1oUsUfYY63t7Xa+26oY K3c5WWMUgpZy7Q4wkjUudC7Eep+uEkl8JfQjpyb71Md0ekfTH8hElKEhvI3t4rJZ uQv+0cN5Hw5IOObP9r/ToUN3LLhDG3WOMcCC5fBpD3bxw/In5l73ArUwpzOxIS30 xNInSXVlPyRbReuM2LwdUGcw8h1idnOa3V783zA9cCd1+3aTZ9khUMkF8ukwOix/ yaL4qXHWqWKUNFM40ZYyXaGHsxabIFxPgQCOYSxI4bQPfRNxLjZrJhAogwBjTWa7 FWMyjs1kMUstMXGR25MUh3wj2IUG3QkLtx8Ww0VAh5Olkugb88HPKFYsHA== -----END CERTIFICATE-----Generated at Sun Oct 26 21:53:16 2025 by rpki-client