$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer File: e25d686e-0b40-4450-bc73-6a20b06135f1.cer (raw, json) Hash identifier: tFOB0jLG0TpJpKfrMRSrmLSHZl7xH2e0d28c3YRR2Jo= Subject key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B4344C5ACAD67D4C068377C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Sep 2025 00:45:25 +0000 Certificate not after: Sat 25 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 40871 IP: 74.115.88.0/21 IP: 108.59.32.0/20 IP: 199.83.184.0/21 IP: 208.90.224.0/22 IP: 2605:5600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:44:c5:ac:ad:67:d4:c0:68:37:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 21 00:45:25 2025 GMT Not After : Dec 25 01:45:25 2027 GMT Subject: CN=e25d686e-0b40-4450-bc73-6a20b06135f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2d:ff:30:29:5e:d5:47:1b:c8:bc:2a:24:47: 13:3f:ca:7b:9a:60:a0:39:83:28:c2:b4:dc:8b:5f: d3:48:7d:d1:d3:cd:b5:cc:df:3d:27:df:f2:07:9b: 2e:ab:23:9b:18:0a:cb:b3:5f:35:c9:a9:74:93:50: 4a:e0:2c:db:80:40:94:18:3e:bb:bb:b7:6f:2f:aa: 76:32:a3:bb:fc:e4:3b:cc:4a:1e:27:31:c2:f4:68: 7a:7f:81:74:be:10:3c:58:0e:de:d5:dc:0d:2b:13: 0c:28:81:09:ef:a6:05:c1:e8:25:fd:c2:b7:09:6a: 9e:6e:02:f0:e0:e7:87:a8:12:2e:a4:25:f7:70:a8: f2:b7:55:1d:52:c1:95:64:27:46:82:f1:1f:1e:e4: 68:15:90:54:88:62:67:c2:12:df:2a:9e:ac:6a:2a: 29:2d:24:7d:36:03:74:51:c9:fa:f8:26:40:01:21: 82:9e:23:11:b6:72:60:f8:83:dd:8d:93:65:72:db: 52:d6:1f:c2:65:37:e4:f7:fe:50:a4:41:d8:75:ed: 08:2b:ff:68:68:a7:5f:14:26:38:f8:ca:ea:c0:d1: 9f:b4:0e:95:9d:9b:42:be:03:10:74:f2:3d:f7:22: 13:2b:29:7a:e8:22:2f:06:5f:59:4b:9d:36:ec:86: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 74.115.88.0/21 108.59.32.0/20 199.83.184.0/21 208.90.224.0/22 IPv6: 2605:5600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40871 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6c:a3:a2:12:7a:3d:76:92:f0:5f:64:7a:f1:10:0a:58:6b: a8:d6:b9:e3:61:ad:05:c3:60:7a:0b:11:3d:8f:65:8c:27:23: 72:08:78:26:46:6e:bb:1d:c7:e8:b2:5a:b8:41:79:d8:ea:44: ff:7e:61:8e:bc:dc:76:73:11:d4:c8:d7:4c:9e:fd:ed:23:0d: 06:c7:d5:de:84:de:26:72:a3:ad:63:67:45:14:d9:2c:49:31: 20:24:bc:6b:f3:90:a5:86:1c:e3:5e:b1:3a:6c:7d:3c:c8:a0: 83:07:2a:fd:6a:58:74:3c:59:91:c7:43:75:26:e2:f6:53:d1: 6c:3b:63:5b:eb:ab:e3:9a:ef:cc:76:ca:8b:49:08:5b:60:94: 0b:01:02:eb:d4:6d:ef:92:be:e7:46:3f:c8:33:af:3a:1c:69: b0:a6:0b:88:87:17:7a:d1:90:ec:e4:87:55:01:1c:37:9f:b1: 14:0f:87:3a:30:91:aa:38:60:dd:65:fc:de:5d:4b:77:8c:3b: 92:19:07:b0:74:b1:f4:5b:1b:0f:96:ea:fc:b0:60:e0:29:c0: 3b:e2:bb:82:a5:d6:49:54:21:f5:c8:99:b1:63:be:5c:9f:fe: 18:7f:6b:97:48:f4:47:c6:e5:45:d2:e4:d8:a8:c8:16:90:9b: 29:9b:f4:b5 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEtDRMWsrWfUwGg3fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkyMTAwNDUyNVoXDTI3MTIyNTAxNDUyNVowLzEtMCsGA1UEAxMk ZTI1ZDY4NmUtMGI0MC00NDUwLWJjNzMtNmEyMGIwNjEzNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i3/MCle1UcbyLwqJEcTP8p7mmCgOYMowrTc i1/TSH3R0821zN89J9/yB5suqyObGArLs181yal0k1BK4CzbgECUGD67u7dvL6p2 MqO7/OQ7zEoeJzHC9Gh6f4F0vhA8WA7e1dwNKxMMKIEJ76YFwegl/cK3CWqebgLw 4OeHqBIupCX3cKjyt1UdUsGVZCdGgvEfHuRoFZBUiGJnwhLfKp6saiopLSR9NgN0 Ucn6+CZAASGCniMRtnJg+IPdjZNlcttS1h/CZTfk9/5QpEHYde0IK/9oaKdfFCY4 +MrqwNGftA6VnZtCvgMQdPI99yITKyl66CIvBl9ZS5027IaVsQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMgm+wdx3eY91u8R4h+NzIU3OsxFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l MjVkNjg2ZS0wYjQwLTQ0NTAtYmM3My02YTIwYjA2MTM1ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2UyNWQ2ODZlLTBiNDAtNDQ1MC1i YzczLTZhMjBiMDYxMzVmMS9lMjVkNjg2ZS0wYjQwLTQ0NTAtYmM3My02YTIwYjA2 MTM1ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBANKc1gDBARsOyADBAPHU7gDBALQWuAwDQQCAAIw BwMFACYFVgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ+nMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD5s o6ISej12kvBfZHrxEApYa6jWueNhrQXDYHoLET2PZYwnI3IIeCZGbrsdx+iyWrhB edjqRP9+YY683HZzEdTI10ye/e0jDQbH1d6E3iZyo61jZ0UU2SxJMSAkvGvzkKWG HONesTpsfTzIoIMHKv1qWHQ8WZHHQ3Um4vZT0Ww7Y1vrq+Oa78x2yotJCFtglAsB AuvUbe+SvudGP8gzrzocabCmC4iHF3rRkOzkh1UBHDefsRQPhzowkao4YN1l/N5d S3eMO5IZB7B0sfRbGw+W6vywYOApwDviu4Kl1klUIfXImbFjvlyf/hh/a5dI9EfG 5UXS5NioyBaQmymb9LU= -----END CERTIFICATE-----Generated at Sat Oct 25 00:23:59 2025 by rpki-client