$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json) Hash identifier: qV9aEY5v4pCCUxqt+W2mnlLLD7GV/0cg3JRe0xZKsJc= Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B837A7B6DE3F6BCE23EA03CCE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 00:45:23 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 14399 AS: 20376 AS: 27425 IP: 64.32.38.0/23 IP: 104.36.88.0/22 IP: 162.213.164.0/22 IP: 162.250.204.0/22 IP: 198.241.49.0/24 IP: 198.241.62.0/24 IP: 204.9.24.0/22 IP: 204.107.216.0/24 IP: 207.178.96.0/19 IP: 209.137.196.0 -- 209.137.201.255 IP: 209.137.203.0 -- 209.137.207.255 IP: 209.137.209.0 -- 209.137.219.255 IP: 209.137.222.0/23 IP: 213.170.146.0/24 IP: 2606:2600::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:7a:7b:6d:e3:f6:bc:e2:3e:a0:3c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 14 00:45:23 2025 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95: 81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b: 39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc: 91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30: 58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b: dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99: 54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7: 70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88: 4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f: c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47: 03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41: 3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4: 34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77: 6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b: 70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1: a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52: 8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 104.36.88.0/22 162.213.164.0/22 162.250.204.0/22 198.241.49.0/24 198.241.62.0/24 204.9.24.0/22 204.107.216.0/24 207.178.96.0/19 209.137.196.0-209.137.201.255 209.137.203.0-209.137.207.255 209.137.209.0-209.137.219.255 209.137.222.0/23 213.170.146.0/24 IPv6: 2606:2600::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14399 20376 27425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f8:30:01:e2:99:a4:73:69:49:88:04:24:84:07:b7:89:46: 27:95:ce:7b:d9:76:6d:31:d1:3b:6d:66:f9:12:0d:52:b2:a6: 01:5e:e8:8f:26:0f:88:a4:d4:60:4e:a9:3f:4f:d7:ac:b5:42: 68:28:f4:d6:33:7a:77:5b:3c:eb:ae:3f:d8:31:c9:b4:9d:c4: 61:49:5f:57:12:50:73:20:9b:78:e5:d0:8d:d3:c6:ea:91:db: 00:58:7a:ac:a0:e1:26:43:4e:76:63:f1:c5:71:7e:5f:b0:f6: 61:3c:8b:70:0a:bd:18:5b:37:18:a8:10:92:6d:23:68:4a:d6: 64:63:5e:84:6f:a9:0d:89:8c:9d:2d:bf:3a:06:76:14:6c:78: fb:79:d7:14:7a:29:5e:ac:0a:5c:e2:61:79:d2:ba:ef:f7:5d: ef:e9:11:24:0e:ce:53:1a:5c:fa:d4:a7:38:70:4c:06:91:5d: 6a:c5:ce:2a:c9:b2:b5:01:82:76:6b:12:83:f3:71:87:6d:ce: a6:77:16:e1:2f:4b:3f:75:14:42:b7:0d:b5:2e:a4:91:3a:93: 53:89:68:7f:ac:6d:e0:fd:4b:03:48:50:9a:41:f7:13:81:32: 69:a0:18:21:61:50:f0:13:63:7f:a4:24:6b:f3:c2:c6:a5:ea: 49:1a:64:37 -----BEGIN CERTIFICATE----- MIIHiDCCBnCgAwIBAgIUAQ0Mn0MoWEuDentt4/a84j6gPM4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAxNDAwNDUyM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk NDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUyYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+UuGa4xD2/MHFIL4ZWBN9ia60dDElXpJDJA 13s53Ci/+bl1im6nryM3vvyRPFzoQp5aBnBTawmRHzBYNsckEQpLMeXUWAFgwjvd 3FTB23UhT1IN8dfLpZlUtUDG6Wtlki9dbUhhltdwsgb5aiomcyOC8P/rQ4hMSc2M QdLxkgoKl6pvdI/AAAmwceoPRkktGxG6MEcDFAnTF3QCsx40A0r4VkE6WMk6xjbq YRTgEeRln9Q0zk3KrAApfD+mflqxt3dsN/o1engbYl3qwUvX8VtwV5gU/3RrrU55 1NzgcPGhXcHtIhHZmRVXQ99M71KKNQ41iMJewfoAKJIa7RAn+wIDAQABo4IEmjCC BJYwHQYDVR0OBBYEFMqiZBunt0x+imCDTw5Cu3ikUPCEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQyNzlkZGY4LTNlNjYtNDVjZi04 OTU1LTQ1MmZiZTY1MmMwYy80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2 NTJjMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZYGCCsGAQUF BwEHAQH/BIGGMIGDMHIEAgABMGwDBAFAICYDBAJoJFgDBAKi1aQDBAKi+swDBADG 8TEDBADG8T4DBALMCRgDBADMa9gDBAXPsmAwDAMEAtGJxAMEAdGJyDAMAwQA0YnL AwQE0YnAMAwDBADRidEDBALRidgDBAHRid4DBADVqpIwDQQCAAIwBwMFBCYGJgAw IQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICOD8CAk+YAgJrITBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCH+DAB 4pmkc2lJiAQkhAe3iUYnlc572XZtMdE7bWb5Eg1SsqYBXuiPJg+IpNRgTqk/T9es tUJoKPTWM3p3Wzzrrj/YMcm0ncRhSV9XElBzIJt45dCN08bqkdsAWHqsoOEmQ052 Y/HFcX5fsPZhPItwCr0YWzcYqBCSbSNoStZkY16Eb6kNiYydLb86BnYUbHj7edcU eilerApc4mF50rrv913v6REkDs5TGlz61Kc4cEwGkV1qxc4qybK1AYJ2axKD83GH bc6mdxbhL0s/dRRCtw21LqSROpNTiWh/rG3g/UsDSFCaQfcTgTJpoBghYVDwE2N/ pCRr88LGpepJGmQ3 -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:40 2025 by rpki-client