$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer File: ae425633-e238-4a95-9c23-f41543ed4ad0.cer (raw, json) Hash identifier: WArJ1Er/+W5JFXOP5CevE0/+yv7O50JZYJkB/3aOKu0= Subject key identifier: FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A4538A1780E77F244793CE020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 6638 IP: 204.209.13.0 -- 204.209.15.255 IP: 204.209.48.0/22 IP: 207.153.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:a1:78:0e:77:f2:44:79:3c:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=ae425633-e238-4a95-9c23-f41543ed4ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:1e:10:40:7f:5a:8b:15:31:e7:78:e2:8d: 6b:60:26:83:f4:63:6d:59:5d:9d:42:52:95:ed:1e: bf:d7:72:e0:c8:d2:41:69:40:79:87:21:a8:9c:11: 7f:20:db:94:74:23:ca:c0:ce:25:33:3a:30:72:5e: 33:4c:dd:f1:fc:be:fb:63:5e:d0:0e:7f:10:7f:e5: f5:f5:dd:e4:08:3f:0a:24:bb:58:ba:a8:26:f0:ea: fb:59:b1:8c:63:ef:74:df:dc:e9:f8:41:1d:5c:95: d2:f2:d3:0b:47:b4:0e:b2:e0:a2:a6:75:14:8d:1b: 79:44:01:89:8d:7d:48:f2:d2:25:15:49:92:be:78: 29:9b:f0:4d:54:4a:fc:49:2a:e3:db:73:88:63:b4: ce:97:cc:f0:f4:c4:c8:bc:ee:42:72:c5:d5:8c:bd: 59:ad:de:d4:a8:cc:2a:f0:c9:80:16:fb:c2:3b:b2: ba:82:1d:5c:97:7e:0f:78:a2:5e:0f:bd:79:d0:5c: 14:da:59:83:08:1b:cc:8d:20:95:55:86:13:75:73: 1e:5c:88:bb:1a:ed:c6:32:86:bc:d0:c7:00:f3:87: 2e:99:8b:c4:ad:63:e3:7a:21:87:92:49:64:26:be: eb:8e:0b:dd:ab:f2:ca:b8:94:f5:f3:bf:a2:29:7a: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 204.209.13.0-204.209.15.255 204.209.48.0/22 207.153.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:b8:a0:62:45:7a:2a:1e:3f:90:46:a3:67:4c:2b:44:71:74: 87:27:5a:d4:2f:72:fc:d0:50:fb:66:19:f3:62:b3:38:97:ca: 32:a1:c2:5e:7b:ac:e2:66:5a:2f:86:4e:79:91:14:10:5e:1a: 02:bb:00:fd:9f:cc:5b:3b:fc:39:4d:2b:a3:a1:ce:c0:ea:26: 7f:95:0b:a4:81:3a:1a:9a:88:60:a7:53:db:33:76:90:85:b6: dd:ef:d7:1c:91:a6:ca:eb:3b:9e:26:8b:66:7d:b1:a0:ec:ea: fa:a1:9f:3f:4a:ea:7b:09:3b:af:de:d7:aa:a9:94:5a:66:6f: 6b:3d:4f:0e:ac:ac:de:f7:0b:46:0b:62:74:ab:f0:ee:fb:6b: 35:a2:8a:be:ad:91:33:14:f2:33:7a:d5:91:a7:cf:25:6b:86: 7a:d4:fd:68:f2:25:b6:f0:ec:d7:1a:53:9f:03:f5:2c:7c:f8: 17:28:4d:c1:5a:61:7e:c3:d6:43:07:35:b9:79:16:fe:ba:6b: 63:06:7f:0e:d9:ff:06:c1:22:49:ed:cc:51:5c:8f:8c:67:93: 88:87:9b:59:3b:5a:86:81:7b:a9:29:88:ac:03:84:25:e9:64: 57:e6:38:14:f7:9e:00:5a:3e:db:f2:29:78:58:46:53:3a:98: 7c:10:a8:8b -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEpFOKF4DnfyRHk84CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk YWU0MjU2MzMtZTIzOC00YTk1LTljMjMtZjQxNTQzZWQ0YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/EeEEB/WosVMed44o1rYCaD9GNtWV2dQlKV 7R6/13LgyNJBaUB5hyGonBF/INuUdCPKwM4lMzowcl4zTN3x/L77Y17QDn8Qf+X1 9d3kCD8KJLtYuqgm8Or7WbGMY+9039zp+EEdXJXS8tMLR7QOsuCipnUUjRt5RAGJ jX1I8tIlFUmSvngpm/BNVEr8SSrj23OIY7TOl8zw9MTIvO5CcsXVjL1Zrd7UqMwq 8MmAFvvCO7K6gh1cl34PeKJeD7150FwU2lmDCBvMjSCVVYYTdXMeXIi7Gu3GMoa8 0McA84cumYvErWPjeiGHkklkJr7rjgvdq/LKuJT187+iKXowVwIDAQABo4IELjCC BCowHQYDVR0OBBYEFP4vGhXNZDnnWx4iY8c7sxlGH2TnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h ZTQyNTYzMy1lMjM4LTRhOTUtOWMyMy1mNDE1NDNlZDRhZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FlNDI1NjMzLWUyMzgtNGE5NS05 YzIzLWY0MTU0M2VkNGFkMC9hZTQyNTYzMy1lMjM4LTRhOTUtOWMyMy1mNDE1NDNl ZDRhZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBowDAMEAMzRDQMEBMzRAAMEAszRMAMEBs+ZADAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIZ7jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvuKBiRXoqHj+QRqNnTCtE cXSHJ1rUL3L80FD7ZhnzYrM4l8oyocJee6ziZlovhk55kRQQXhoCuwD9n8xbO/w5 TSujoc7A6iZ/lQukgToamohgp1PbM3aQhbbd79cckabK6zueJotmfbGg7Or6oZ8/ Sup7CTuv3teqqZRaZm9rPU8OrKze9wtGC2J0q/Du+2s1ooq+rZEzFPIzetWRp88l a4Z61P1o8iW28OzXGlOfA/UsfPgXKE3BWmF+w9ZDBzW5eRb+umtjBn8O2f8GwSJJ 7cxRXI+MZ5OIh5tZO1qGgXupKYisA4Ql6WRX5jgU954AWj7b8il4WEZTOph8EKiL -----END CERTIFICATE-----Generated at Sat Oct 25 00:25:58 2025 by rpki-client