$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer File: d170fca2-5f74-4408-8dc9-597ba031cfe2.cer (raw, json) Hash identifier: cYrMfRzbY+VbnzAvQsL7tk3XdAL9tDL+2tIxBLoz7qk= Subject key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B3AE4B7FBD5BC6335D9ABEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 00:45:25 +0000 Certificate not after: Wed 22 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 30097 IP: 66.178.128.0/19 IP: 199.87.44.0/22 IP: 204.10.92.0/22 IP: 2604:3c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:e4:b7:fb:d5:bc:63:35:d9:ab:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 18 00:45:25 2025 GMT Not After : Dec 22 01:45:25 2027 GMT Subject: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:5a:ac:ef:18:0b:2b:96:65:5f:d4:f2:89: da:9a:7b:19:79:d9:ea:2b:f1:36:a1:a7:c7:22:05: 1a:84:d9:07:93:45:68:c1:5b:65:4a:96:91:62:6e: e1:a1:04:1f:b5:82:62:7d:62:19:1f:54:81:ac:17: 99:8d:ca:a9:33:1f:ec:1d:55:c9:fe:06:6c:ef:d7: 57:c3:32:ac:55:f6:c3:37:5a:8a:29:c4:b0:8a:d5: d0:f2:a4:ee:9e:9b:eb:aa:a7:6d:bb:94:75:2a:d6: 75:32:73:d9:56:7e:38:c2:23:34:5c:c7:62:55:b3: 69:84:8a:0c:44:80:86:d9:a6:8a:22:0c:77:33:28: 68:72:d5:63:ea:a8:24:53:8a:c9:d6:7c:31:36:53: 09:9f:76:3b:4d:a8:27:26:24:07:88:d7:7c:ae:08: 67:de:15:70:d0:d2:6c:c5:4a:da:ba:56:59:4b:6a: 30:7a:d0:34:47:af:d8:84:08:23:38:64:42:22:47: 6d:88:d9:e4:03:c8:38:c0:76:32:b9:b3:5c:98:64: 76:d2:96:42:b8:44:e0:50:d1:21:46:fb:bb:03:ba: 0b:db:a6:76:00:de:a2:ab:9a:83:d6:bf:aa:50:2a: 63:e6:b5:43:6b:88:49:c9:1a:fe:21:3f:ff:28:5a: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.178.128.0/19 199.87.44.0/22 204.10.92.0/22 IPv6: 2604:3c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30097 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:24:1f:24:a5:7b:2b:b2:08:1d:8b:4a:fe:42:5c:4c:9e:87: 7c:28:be:f3:07:8d:c1:20:15:70:59:5b:69:c5:c3:96:5d:22: 1a:eb:8a:06:b3:b9:96:b1:85:b7:b2:5e:0c:0e:f4:c8:d8:89: 81:cd:c1:87:c7:8c:68:83:66:bd:ec:9a:4a:95:9d:49:b4:4e: f5:7a:88:18:51:5e:9a:af:f0:4e:c0:60:d0:f8:ec:05:75:cf: 86:ea:6a:31:29:d0:66:91:0d:15:a5:fe:ef:7f:fd:0c:ae:64: 64:37:81:66:f9:5d:e0:48:8d:49:80:43:31:7c:da:d9:48:0f: e3:59:d2:60:0f:3e:61:0e:a4:6c:b2:22:32:62:94:d7:dc:b8: ad:ce:75:54:1c:4e:87:98:3b:c5:9d:67:dd:94:33:5e:03:23: fc:e7:96:2c:7a:c9:11:6b:1a:df:ba:a9:b3:ed:1c:d1:22:55: 40:34:40:6e:13:4a:ef:d7:22:a2:34:bd:6f:c9:79:14:59:7e: 4f:e4:47:7e:30:56:47:05:85:b4:45:92:49:bd:52:0a:6c:29: a6:09:17:dd:fa:b9:aa:c0:90:81:15:2a:ab:0e:53:b3:34:94: 97:de:92:07:a6:e2:22:54:6b:eb:9a:82:ba:29:40:d1:8a:6d: 97:7c:43:73 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEs65Lf71bxjNdmr6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkxODAwNDUyNVoXDTI3MTIyMjAxNDUyNVowLzEtMCsGA1UEAxMk ZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFjZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mparO8YCyuWZV/U8onamnsZednqK/E2oafH IgUahNkHk0VowVtlSpaRYm7hoQQftYJifWIZH1SBrBeZjcqpMx/sHVXJ/gZs79dX wzKsVfbDN1qKKcSwitXQ8qTunpvrqqdtu5R1KtZ1MnPZVn44wiM0XMdiVbNphIoM RICG2aaKIgx3MyhoctVj6qgkU4rJ1nwxNlMJn3Y7TagnJiQHiNd8rghn3hVw0NJs xUraulZZS2owetA0R6/YhAgjOGRCIkdtiNnkA8g4wHYyubNcmGR20pZCuETgUNEh Rvu7A7oL26Z2AN6iq5qD1r+qUCpj5rVDa4hJyRr+IT//KFrjAwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFP8ouptCa3ok2aSrt5FNvbNvP2KeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k MTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2QxNzBmY2EyLTVmNzQtNDQwOC04 ZGM5LTU5N2JhMDMxY2ZlMi9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAz MWNmZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVCsoADBALHVywDBALMClwwDQQCAAIwBwMFACYE PAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdZEwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaCQfJKV7K7II HYtK/kJcTJ6HfCi+8weNwSAVcFlbacXDll0iGuuKBrO5lrGFt7JeDA70yNiJgc3B h8eMaINmveyaSpWdSbRO9XqIGFFemq/wTsBg0PjsBXXPhupqMSnQZpENFaX+73/9 DK5kZDeBZvld4EiNSYBDMXza2UgP41nSYA8+YQ6kbLIiMmKU19y4rc51VBxOh5g7 xZ1n3ZQzXgMj/OeWLHrJEWsa37qps+0c0SJVQDRAbhNK79ciojS9b8l5FFl+T+RH fjBWRwWFtEWSSb1SCmwppgkX3fq5qsCQgRUqqw5TszSUl96SB6biIlRr65qCuilA 0Yptl3xDcw== -----END CERTIFICATE-----Generated at Sat Nov 1 06:38:26 2025 by rpki-client