$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer File: 3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer (raw, json) Hash identifier: zo008aThyX1IPCiy0ZEt679v7LKP34XGy+BD/SmSeps= Subject key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A0D62EC5AB83D196FA645E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 00:45:35 +0000 Certificate not after: Sun 05 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 14400 AS: 53756 IP: 203.96.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:62:ec:5a:b8:3d:19:6f:a6:45:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 2 00:45:35 2025 GMT Not After : Sep 5 00:45:35 2027 GMT Subject: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:82:a0:12:4c:71:d4:08:d8:f4:d7:27:e9: fb:93:97:4c:45:9b:af:a9:8f:2a:5a:97:e7:57:74: cf:8f:65:6a:39:f9:5e:88:7e:74:61:7b:c8:61:be: 04:e3:52:70:19:44:46:c8:79:84:4c:b9:2b:39:09: 40:db:e9:8c:d7:46:4e:b7:d3:aa:ab:9e:cd:72:73: 2f:79:05:af:d8:7c:7a:57:5e:46:61:32:9a:e8:ba: 70:be:53:e5:a1:fc:15:ed:74:c4:61:72:14:88:45: e9:6f:0b:34:fe:eb:4e:0b:c7:58:e2:26:b4:71:e9: fb:66:51:18:cd:28:5d:8d:34:2a:54:5b:b1:2b:33: 18:56:fa:9c:3e:2f:51:67:ef:ab:ad:ff:c0:a7:7a: 28:ff:4b:c6:8c:11:7f:c1:53:a4:0d:25:f3:b9:61: c6:81:7a:9a:ec:0e:1d:8d:17:03:74:7e:78:ec:37: 5a:58:79:79:54:5c:fe:91:2e:a6:6c:2a:a3:9a:d8: 61:ba:e1:08:09:80:f3:74:ad:48:f2:6c:26:f0:d0: cd:e0:4c:89:e3:8f:33:3c:8a:b1:5a:e5:3c:04:dd: a6:43:37:b7:1d:b7:22:c4:5a:60:1b:ed:80:75:f9: 94:b2:b1:51:7c:4f:65:d6:80:c2:d5:41:c6:0c:0a: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 203.96.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14400 53756 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d2:a7:f4:fe:f1:c6:43:1a:5b:74:61:53:b8:b8:ae:6e:6b: 53:2f:8b:9f:ee:01:61:b5:90:c6:c1:4d:80:a6:1e:ff:cb:cc: e0:1e:16:98:ff:bd:f1:14:8f:ae:54:7a:60:03:52:4f:44:6b: 2a:0e:39:ed:3b:20:10:de:51:f1:44:00:1b:6b:e4:e3:d1:e8: 4f:27:e8:8a:5c:cf:a4:20:3c:7f:0f:ac:76:1b:d9:84:23:2f: e3:ba:be:c3:8f:cb:ce:14:75:bf:05:7d:34:97:b2:01:29:b2: 5c:5f:4b:4c:6d:4f:b4:63:4d:a1:77:37:74:3f:3a:be:17:c9: c4:95:5b:b5:0d:46:70:41:d5:93:4a:42:45:95:bf:5b:1b:f7: 8e:d4:32:7a:20:e2:3a:98:59:7c:34:34:24:8e:1a:7d:bb:c6: 49:93:46:a3:0c:dc:d8:79:6f:9d:75:8c:80:8c:df:16:b7:90: 91:1f:75:c3:cd:8e:29:06:80:ef:17:6c:f1:ab:26:35:5e:c2: 48:22:9d:90:80:a0:f9:ca:02:ed:af:dc:f5:1c:d4:95:88:82: c6:9a:ee:30:eb:9d:f0:0c:f5:bc:b9:c4:8a:d8:e0:61:88:0d: ff:75:9c:e7:cf:1a:db:12:b5:c8:a9:62:b8:61:ed:4f:93:44: 0f:f8:57:9e -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEoNYuxauD0Zb6ZF5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYwMjAwNDUzNVoXDTI3MDkwNTAwNDUzNVowLzEtMCsGA1UEAxMk M2U2NjgzZmMtNWIxNS00NjYzLTlkYTMtMTljNWRlNWE4NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzGCoBJMcdQI2PTXJ+n7k5dMRZuvqY8qWpfn V3TPj2VqOfleiH50YXvIYb4E41JwGURGyHmETLkrOQlA2+mM10ZOt9Oqq57NcnMv eQWv2Hx6V15GYTKa6LpwvlPlofwV7XTEYXIUiEXpbws0/utOC8dY4ia0cen7ZlEY zShdjTQqVFuxKzMYVvqcPi9RZ++rrf/Ap3oo/0vGjBF/wVOkDSXzuWHGgXqa7A4d jRcDdH547DdaWHl5VFz+kS6mbCqjmthhuuEICYDzdK1I8mwm8NDN4EyJ448zPIqx WuU8BN2mQze3HbcixFpgG+2AdfmUsrFRfE9l1oDC1UHGDAr32QIDAQABo4IEHzCC BBswHQYDVR0OBBYEFEJVYhqMZA/awmCTv6jxK6btbtVJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8z ZTY2ODNmYy01YjE1LTQ2NjMtOWRhMy0xOWM1ZGU1YTg1YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzNlNjY4M2ZjLTViMTUtNDY2My05 ZGEzLTE5YzVkZTVhODVjMC8zZTY2ODNmYy01YjE1LTQ2NjMtOWRhMy0xOWM1ZGU1 YTg1YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALLYLgwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC OEACAwDR/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAo0qf0/vHGQxpbdGFTuLiubmtTL4uf7gFhtZDGwU2A ph7/y8zgHhaY/73xFI+uVHpgA1JPRGsqDjntOyAQ3lHxRAAba+Tj0ehPJ+iKXM+k IDx/D6x2G9mEIy/jur7Dj8vOFHW/BX00l7IBKbJcX0tMbU+0Y02hdzd0Pzq+F8nE lVu1DUZwQdWTSkJFlb9bG/eO1DJ6IOI6mFl8NDQkjhp9u8ZJk0ajDNzYeW+ddYyA jN8Wt5CRH3XDzY4pBoDvF2zxqyY1XsJIIp2QgKD5ygLtr9z1HNSViILGmu4w653w DPW8ucSK2OBhiA3/dZznzxrbErXIqWK4Ye1Pk0QP+Fee -----END CERTIFICATE-----Generated at Sat Jun 14 02:36:33 2025 by rpki-client