$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069.cer File: d46bff86-8800-464d-8b12-5b1e18a49069.cer (raw, json) Hash identifier: 8cDL6Lv9jmTVkT1gwb/G+8kmbMEvfjlG74sQMY/9R0Q= Subject key identifier: C8:A5:79:0C:10:37:CF:92:20:88:7B:F6:69:BE:0C:B5:DA:B8:4B:4C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858486D88C2CCBCE65B06A2643DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/d46bff86-8800-464d-8b12-5b1e18a49069.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Jan 2025 01:45:33 +0000 Certificate not after: Fri 09 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 20036 IP: 204.126.18.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:88:c2:cc:bc:e6:5b:06:a2:64:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 4 01:45:33 2025 GMT Not After : Apr 9 00:45:33 2027 GMT Subject: CN=d46bff86-8800-464d-8b12-5b1e18a49069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:83:a2:7f:d8:62:85:d5:88:47:47:52:df: ec:7c:7d:5f:39:7d:86:29:d6:19:6d:86:ca:80:04: 71:86:4a:0c:16:e0:2d:f9:4e:a9:65:7e:91:92:e0: f3:ca:cd:ba:9c:9c:f4:ac:f2:fa:23:3b:8f:d4:c4: 39:99:5f:a3:8f:83:79:bf:d3:db:7a:ae:3a:f3:88: 07:da:51:aa:3c:a6:c4:a1:a7:d8:2f:a7:77:9b:04: 44:bc:c6:44:fe:fb:de:94:49:3f:75:b5:ce:2a:a0: da:39:7e:3e:5d:91:57:d8:f9:c4:24:b7:fb:3d:f4: 4e:e9:13:2e:8d:d7:be:d1:2e:b4:92:4a:a4:ba:c3: 0a:dc:48:c1:e7:96:32:b9:0b:b5:8f:d8:d1:98:4b: de:9c:e2:da:a7:e9:0e:9c:c3:94:f3:8c:2e:21:24: 48:6f:e5:54:6a:7d:59:62:0e:3c:90:1a:8e:85:81: 60:da:ad:a0:81:aa:af:d9:d0:c3:84:7a:a7:b3:eb: 9b:ed:11:0e:fb:93:49:a3:ae:da:b7:9b:c0:98:35: 56:95:3f:94:20:56:ad:79:7e:ad:d1:7c:b2:e2:18: 4d:9b:78:31:b4:08:01:7f:8f:95:e5:01:82:ae:c2: 70:c1:0c:c0:cf:16:d9:72:fe:14:ff:81:32:16:6d: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:79:0C:10:37:CF:92:20:88:7B:F6:69:BE:0C:B5:DA:B8:4B:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/d46bff86-8800-464d-8b12-5b1e18a49069.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.126.18.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20036 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:bd:ef:62:62:c1:40:43:80:98:65:0f:75:fc:ee:59:6e:15: cb:03:7f:93:58:78:34:e3:74:68:11:e5:98:78:f2:ca:e4:a6: 14:a1:97:25:ac:71:3a:25:ea:bd:ce:6d:5c:ff:58:aa:b6:9e: b0:39:14:97:79:9c:9e:54:5c:ed:12:d1:5f:0a:07:ef:f2:e6: f1:d8:03:f9:75:3e:57:ee:6c:e2:23:9a:99:4b:d9:c5:29:9a: dc:3c:0d:d6:60:55:f4:5d:cb:41:90:21:e9:07:a3:34:74:da: 96:5d:ba:66:0f:b0:70:8c:d3:dc:c0:4d:c3:eb:e0:48:12:13: d9:43:95:ac:76:51:91:77:71:ab:92:98:a8:02:6c:97:db:82: 65:de:c7:50:46:60:19:22:56:59:91:c1:c0:8c:f5:3b:be:5f: 50:16:98:dc:64:cf:fa:97:cf:15:cc:b1:a6:7d:71:fc:a3:4e: d6:8e:f9:fb:21:c3:c3:5b:c3:1f:76:0d:dc:33:9b:3b:fd:0c: 8a:07:99:60:3f:c0:a8:3d:fb:5c:68:4b:47:13:f0:af:62:8c: b7:75:b7:86:b5:99:66:4b:8a:b2:3a:06:7f:3c:0d:0a:f6:2e: c4:8c:60:ba:13:89:9b:54:44:54:f2:9a:6a:34:92:90:f8:99: b0:fc:3d:4d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEhtiMLMvOZbBqJkPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEwNDAxNDUzM1oXDTI3MDQwOTAwNDUzM1owLzEtMCsGA1UEAxMk ZDQ2YmZmODYtODgwMC00NjRkLThiMTItNWIxZTE4YTQ5MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rWDon/YYoXViEdHUt/sfH1fOX2GKdYZbYbK gARxhkoMFuAt+U6pZX6RkuDzys26nJz0rPL6IzuP1MQ5mV+jj4N5v9Pbeq4684gH 2lGqPKbEoafYL6d3mwREvMZE/vvelEk/dbXOKqDaOX4+XZFX2PnEJLf7PfRO6RMu jde+0S60kkqkusMK3EjB55YyuQu1j9jRmEvenOLap+kOnMOU84wuISRIb+VUan1Z Yg48kBqOhYFg2q2ggaqv2dDDhHqns+ub7REO+5NJo67at5vAmDVWlT+UIFateX6t 0Xyy4hhNm3gxtAgBf4+V5QGCrsJwwQzAzxbZcv4U/4EyFm0dXQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFMileQwQN8+SIIh79mm+DLXauEtMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k NDZiZmY4Ni04ODAwLTQ2NGQtOGIxMi01YjFlMThhNDkwNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q0NmJmZjg2LTg4MDAtNDY0ZC04 YjEyLTViMWUxOGE0OTA2OS9kNDZiZmY4Ni04ODAwLTQ2NGQtOGIxMi01YjFlMThh NDkwNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMfhIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TkQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAk73vYmLBQEOAmGUPdfzuWW4VywN/k1h4NON0aBHlmHjyyuSm FKGXJaxxOiXqvc5tXP9YqraesDkUl3mcnlRc7RLRXwoH7/Lm8dgD+XU+V+5s4iOa mUvZxSma3DwN1mBV9F3LQZAh6QejNHTall26Zg+wcIzT3MBNw+vgSBIT2UOVrHZR kXdxq5KYqAJsl9uCZd7HUEZgGSJWWZHBwIz1O75fUBaY3GTP+pfPFcyxpn1x/KNO 1o75+yHDw1vDH3YN3DObO/0MigeZYD/AqD37XGhLRxPwr2KMt3W3hrWZZkuKsjoG fzwNCvYuxIxguhOJm1REVPKaajSSkPiZsPw9TQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:36 2025 by rpki-client