$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer File: 18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer (raw, json) Hash identifier: VP0RYEj+N1Se+9KKzfIAq7TYh+PKHrURRMGCZBY+tDA= Subject key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849B9A2669C4AD41140047C5E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 May 2025 00:45:35 +0000 Certificate not after: Fri 06 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 398960 IP: 23.168.144.0/23 IP: 2602:808:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a2:66:9c:4a:d4:11:40:04:7c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 3 00:45:35 2025 GMT Not After : Aug 6 00:45:35 2027 GMT Subject: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:c1:f0:54:53:66:47:93:66:f8:dd:1b:20: d1:9b:12:ba:f3:56:51:8e:ba:3c:6e:58:1e:73:b8: 3c:ae:45:58:cc:11:a2:9e:30:18:89:da:c1:2e:b4: d8:4a:f6:44:65:22:39:d0:93:96:0c:1d:ae:f1:c3: 16:fa:c6:d3:da:02:d7:a8:aa:fd:37:c0:05:ee:e6: 7a:75:b7:e3:53:74:38:92:8d:cc:8f:c9:96:ba:45: ac:1e:09:64:2a:1e:5f:60:69:57:25:83:34:c3:c7: f9:7e:1d:c9:47:04:40:2a:ee:4c:1d:cf:ab:21:38: 5c:97:5f:27:72:42:56:84:50:8d:b8:27:a9:2d:2c: 51:01:9a:ab:5d:b3:cf:75:f5:49:d5:26:6a:e8:7a: 8c:c3:9c:8e:4a:85:19:3e:5a:6e:2f:6c:d0:23:26: ab:34:e2:d0:39:c7:04:50:a7:a6:eb:9f:13:81:13: c7:5d:00:dc:78:35:54:26:42:be:17:1e:2a:b8:c3: 73:dc:63:db:32:89:cc:dc:f1:d1:73:b1:78:59:e4: 0d:bb:55:db:4b:66:73:81:31:de:d7:56:ba:93:0c: 94:28:2a:25:17:31:cc:93:96:f6:11:65:72:e8:db: ee:98:da:4f:63:a5:36:12:fe:31:ca:e7:20:6c:9f: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.168.144.0/23 IPv6: 2602:808:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d5:0c:31:61:f3:52:11:f0:fb:21:df:43:f9:32:ac:dd:f6: 8a:17:9b:3c:a7:3b:fb:ca:0c:5f:ba:ca:f2:05:cb:c0:29:e3: 8a:f2:6f:5c:12:7a:a6:13:4d:6c:d5:84:54:02:4d:f2:89:96: 33:14:8b:72:c4:8d:cd:5f:7b:36:b8:08:a8:0a:81:ad:b5:9d: ef:26:1c:a9:ef:34:97:64:61:c5:e1:91:77:96:43:7d:ec:95: bd:9b:c9:50:d6:09:2b:9f:7a:af:37:eb:9c:50:98:f3:0b:f4: 8f:ab:39:9b:da:31:86:6d:1a:50:9d:9b:c8:77:ac:09:44:80: f5:c9:ba:f8:89:b8:c9:cf:07:67:ef:11:c8:58:50:91:3e:1d: fb:29:ec:58:cc:76:42:5b:01:f1:82:6d:4f:52:12:be:c6:69: ec:ea:ef:d6:d1:21:a0:7d:fb:ee:b9:43:48:30:3c:61:ab:7c: c8:fd:fb:aa:43:4a:cb:3b:7c:f0:51:87:0a:56:f7:2c:47:f9: aa:0e:63:01:46:2e:80:11:d4:89:31:c4:ac:be:75:13:fc:45: 16:b5:75:7a:5d:dc:0b:cd:e3:23:dd:3e:2c:59:9e:66:28:18: 95:1d:4b:68:41:06:e3:21:2e:5d:90:90:64:b1:75:e3:0a:5a: 16:51:e3:5d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEm5omacStQRQAR8XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDUwMzAwNDUzNVoXDTI3MDgwNjAwNDUzNVowLzEtMCsGA1UEAxMk MThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYyM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW3B8FRTZkeTZvjdGyDRmxK681ZRjro8blge c7g8rkVYzBGinjAYidrBLrTYSvZEZSI50JOWDB2u8cMW+sbT2gLXqKr9N8AF7uZ6 dbfjU3Q4ko3Mj8mWukWsHglkKh5fYGlXJYM0w8f5fh3JRwRAKu5MHc+rIThcl18n ckJWhFCNuCepLSxRAZqrXbPPdfVJ1SZq6HqMw5yOSoUZPlpuL2zQIyarNOLQOccE UKem658TgRPHXQDceDVUJkK+Fx4quMNz3GPbMonM3PHRc7F4WeQNu1XbS2ZzgTHe 11a6kwyUKColFzHMk5b2EWVy6NvumNpPY6U2Ev4xyucgbJ9ZFwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFAPQjYWv1WDtYfsquamKkk7+vP6wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x OGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE4ZTI2NDhlLTg4NjktNGFmZC1h MGJkLWExYWM3YzFmMjNkYi8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2Mx ZjIzZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAEXqJAwDwQCAAIwCQMHBCYCCAhAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGFnAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAt9UMMWHzUhHw+yHfQ/kyrN32 ihebPKc7+8oMX7rK8gXLwCnjivJvXBJ6phNNbNWEVAJN8omWMxSLcsSNzV97NrgI qAqBrbWd7yYcqe80l2RhxeGRd5ZDfeyVvZvJUNYJK596rzfrnFCY8wv0j6s5m9ox hm0aUJ2byHesCUSA9cm6+Im4yc8HZ+8RyFhQkT4d+ynsWMx2QlsB8YJtT1ISvsZp 7Orv1tEhoH377rlDSDA8Yat8yP37qkNKyzt88FGHClb3LEf5qg5jAUYugBHUiTHE rL51E/xFFrV1el3cC83jI90+LFmeZigYlR1LaEEG4yEuXZCQZLF14wpaFlHjXQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:27 2025 by rpki-client