$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer File: 145bac4b-d098-4846-b4b1-ac1761209cd4.cer (raw, json) Hash identifier: uj3xBxYxe5GMLw7+0tp/ryKNFJzr+/eH1lmD9jCrgpg= Subject key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584EEBE526A9CDB9E3E0ABB73F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 192.86.21.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:a9:cd:b9:e3:e0:ab:b7:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=145bac4b-d098-4846-b4b1-ac1761209cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:c7:a6:31:02:6f:9a:93:8f:87:4c:8c:04: f2:b3:a8:8a:0a:39:48:3b:59:8e:3f:30:c1:be:98: 53:42:26:66:86:3a:64:27:09:98:71:77:96:af:61: ab:bb:07:f8:6a:6f:60:7c:4d:62:9d:d9:e0:06:ef: ed:f9:c5:f3:46:2a:85:3f:81:2b:39:4b:b2:ae:fe: 70:4b:4a:80:6f:cf:11:db:5f:4b:62:d8:18:22:fc: 24:de:87:c1:89:da:73:c7:26:27:a6:d0:91:c8:f5: 78:f2:0c:0b:2a:bf:5d:5f:71:ae:62:11:fb:b7:51: 58:8d:91:63:e6:c6:cd:23:8b:8f:5c:0c:93:de:ff: 54:fc:07:4d:9e:79:e7:81:cb:26:83:a1:aa:37:c7: 86:fd:f9:1c:d1:2f:de:58:3b:18:85:df:bc:81:5d: b0:be:f4:87:96:35:96:32:ff:2c:3a:3b:7f:0a:52: b9:5c:37:65:2d:f0:17:aa:b0:a8:af:a6:2a:56:c4: 77:3d:d4:a5:0a:95:96:d6:07:f4:55:4f:12:be:f9: 0e:18:0f:44:50:78:67:3a:2b:a7:d1:0c:36:3f:a9: cc:0b:6e:ef:05:5e:34:52:12:c6:f2:6c:bc:0e:25: ff:bf:fc:f2:db:3f:45:31:e7:cc:49:e4:8e:73:28: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 192.86.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:da:2e:2f:5f:42:36:ac:9c:64:db:8a:8a:c8:6c:eb:c9:2f: 85:76:c5:6e:14:a2:a4:aa:09:6a:4d:87:f8:c9:b4:d5:37:6e: 2c:27:23:d2:0b:18:c1:c4:f5:cf:75:db:84:fb:f5:b2:d9:63: aa:ed:19:5b:24:de:49:65:a9:66:46:46:f1:0d:a7:4a:76:70: c1:8b:30:b3:b6:da:8c:82:d2:b7:3b:91:be:60:32:3f:33:5d: a1:b9:e0:88:a3:08:b3:41:18:51:4a:dd:7e:c4:2f:e4:8d:d8: aa:0d:80:25:77:b7:a1:37:d9:ee:72:48:80:f8:ce:83:ae:c9: f7:5b:d5:54:6b:2a:c7:6d:6f:c7:46:5f:43:c5:b6:dd:31:7d: 30:9c:4c:82:70:cd:f0:2a:18:fc:5f:a0:7b:af:83:76:bf:8a: 97:64:92:5a:85:d6:53:81:a4:2a:14:a9:05:7d:af:9b:50:a1: ff:c2:08:28:c5:f3:a7:a0:dc:de:87:95:e7:60:0a:00:e5:35: 42:ad:59:f2:9d:52:98:57:3d:dc:68:c3:67:8a:a3:6e:9f:e7: 88:19:26:e7:7e:25:0e:3b:f1:e5:5a:dd:db:e9:cb:c1:9f:b5: 50:5b:44:1b:e2:9e:53:d0:54:92:5a:ec:80:86:52:e7:01:52: 59:ff:ca:8f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7r5Sapzbnj4Ku3PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk MTQ1YmFjNGItZDA5OC00ODQ2LWI0YjEtYWMxNzYxMjA5Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrHpjECb5qTj4dMjATys6iKCjlIO1mOPzDB vphTQiZmhjpkJwmYcXeWr2Gruwf4am9gfE1indngBu/t+cXzRiqFP4ErOUuyrv5w S0qAb88R219LYtgYIvwk3ofBidpzxyYnptCRyPV48gwLKr9dX3GuYhH7t1FYjZFj 5sbNI4uPXAyT3v9U/AdNnnnngcsmg6GqN8eG/fkc0S/eWDsYhd+8gV2wvvSHljWW Mv8sOjt/ClK5XDdlLfAXqrCor6YqVsR3PdSlCpWW1gf0VU8SvvkOGA9EUHhnOiun 0Qw2P6nMC27vBV40UhLG8my8DiX/v/zy2z9FMefMSeSOcyjxFwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKv8aQSq9ZSFDsj7x6EiBx0gzu2xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x NDViYWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3NjEyMDljZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE0NWJhYzRiLWQwOTgtNDg0Ni1i NGIxLWFjMTc2MTIwOWNkNC8xNDViYWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3NjEy MDljZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAVhUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAotouL19CNqycZNuKishs 68kvhXbFbhSipKoJak2H+Mm01TduLCcj0gsYwcT1z3XbhPv1stljqu0ZWyTeSWWp ZkZG8Q2nSnZwwYsws7bajILStzuRvmAyPzNdobngiKMIs0EYUUrdfsQv5I3Yqg2A JXe3oTfZ7nJIgPjOg67J91vVVGsqx21vx0ZfQ8W23TF9MJxMgnDN8CoY/F+ge6+D dr+Kl2SSWoXWU4GkKhSpBX2vm1Ch/8IIKMXzp6Dc3oeV52AKAOU1Qq1Z8p1SmFc9 3GjDZ4qjbp/niBkm534lDjvx5Vrd2+nLwZ+1UFtEG+KeU9BUklrsgIZS5wFSWf/K jw== -----END CERTIFICATE-----Generated at Sun Sep 20 18:40:47 2026 by rpki-client