$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer File: 55e7b8e0-0df5-4481-84e4-83619b05f966.cer (raw, json) Hash identifier: 4UtGj2C4j5mGycj8rmW1OGeRrrpnFEtelXB9VDk6iKQ= Subject key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B05D9B882893E0D4695841600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 Aug 2025 00:45:25 +0000 Certificate not after: Fri 03 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 395970 IP: 23.170.112.0/24 IP: 2606:ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:d9:b8:82:89:3e:0d:46:95:84:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 30 00:45:25 2025 GMT Not After : Dec 3 01:45:25 2027 GMT Subject: CN=55e7b8e0-0df5-4481-84e4-83619b05f966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:75:19:01:5b:9e:bb:42:b3:7f:86:1c:c4: a1:3a:bb:93:a9:18:0a:23:9d:29:e7:dc:12:98:37: 2b:a3:dc:f3:ad:9a:96:48:c0:1c:07:8a:31:e8:52: c8:dd:3f:0f:40:a1:1d:58:13:7f:89:50:e4:ae:68: 7a:fc:d2:ff:ad:70:ef:93:eb:7f:8d:c3:56:e8:56: 14:b3:c8:e1:98:75:fe:2a:13:23:db:9c:e5:e5:29: ce:be:dd:41:5a:97:9e:d2:e1:47:2d:f5:cd:bc:31: 0c:e9:a4:c7:f1:f8:93:1e:59:ba:80:a5:41:4f:c7: e4:bc:ba:17:ea:01:5b:32:8f:de:03:7a:74:9e:c5: 52:0c:c9:aa:f1:bf:f3:1a:ee:20:23:7c:da:61:a5: 49:45:34:1d:d4:15:7c:89:61:01:76:aa:fb:4a:fb: 36:d0:b1:bd:1a:a3:1e:f5:21:74:6c:cf:40:f2:9e: 5d:5a:07:1d:35:94:a3:b3:d8:97:1b:f4:d1:f3:c9: f4:66:26:6d:9f:6b:f3:c9:d1:61:d3:f7:27:c5:9f: 1c:e7:44:e0:d5:bc:22:f7:96:1b:2d:d1:7e:0e:6b: b0:8c:e9:0d:b6:2c:69:b4:83:ef:7f:a7:6a:a3:c2: 1a:5e:7f:22:3a:54:a9:13:c6:f6:1c:b7:05:e2:bd: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.170.112.0/24 IPv6: 2606:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a2:f9:57:3d:38:18:76:28:d9:cf:f8:c1:ec:3b:ba:a6:54: fd:7b:2b:73:b9:a3:0b:52:ad:4d:aa:b3:27:97:7c:f7:72:51: 89:e3:51:13:c0:9a:0f:13:a1:0b:fe:11:4e:21:f8:79:24:71: 43:8b:ca:14:26:60:de:70:6f:8b:14:21:47:58:9e:23:1e:ef: 31:d8:01:bd:9f:18:0d:f5:12:38:00:f1:91:d4:1e:a3:e2:98: d2:70:20:9e:e7:cf:22:f9:3e:87:3b:97:e1:e8:d6:9e:44:5a: 7e:ab:8c:db:06:4e:ba:87:1d:0a:6d:1f:c9:6c:48:db:c1:87: aa:6d:ea:f2:01:37:47:2f:62:c5:e9:be:d4:81:80:fd:c6:11: 4c:d5:34:d2:b9:b3:95:c1:d9:7e:6a:84:3c:a7:4a:50:b5:52: f3:33:b2:11:84:58:ed:9d:fa:0e:59:d6:55:a3:ec:2a:5c:72: af:66:e5:e5:a9:e9:aa:1a:a0:99:eb:22:9c:4f:f2:1e:55:ce: 5d:36:7b:10:02:eb:20:1e:7d:00:f8:88:04:87:27:3c:a2:8f: b1:c4:1f:ce:6d:5d:45:21:d5:4e:f8:43:d5:dd:da:2c:66:a0: 8d:78:ee:fe:dd:2e:87:4a:22:5d:49:50:bd:c0:ec:f3:96:3d: 3c:d5:8a:50 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEsF2biCiT4NRpWEFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgzMDAwNDUyNVoXDTI3MTIwMzAxNDUyNVowLzEtMCsGA1UEAxMk NTVlN2I4ZTAtMGRmNS00NDgxLTg0ZTQtODM2MTliMDVmOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzx1GQFbnrtCs3+GHMShOruTqRgKI50p59wS mDcro9zzrZqWSMAcB4ox6FLI3T8PQKEdWBN/iVDkrmh6/NL/rXDvk+t/jcNW6FYU s8jhmHX+KhMj25zl5SnOvt1BWpee0uFHLfXNvDEM6aTH8fiTHlm6gKVBT8fkvLoX 6gFbMo/eA3p0nsVSDMmq8b/zGu4gI3zaYaVJRTQd1BV8iWEBdqr7Svs20LG9GqMe 9SF0bM9A8p5dWgcdNZSjs9iXG/TR88n0ZiZtn2vzydFh0/cnxZ8c50Tg1bwi95Yb LdF+DmuwjOkNtixptIPvf6dqo8IaXn8iOlSpE8b2HLcF4r2qFwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGGqkHIKvDij7uKiVYrBwGN2JmfYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 NWU3YjhlMC0wZGY1LTQ0ODEtODRlNC04MzYxOWIwNWY5NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU1ZTdiOGUwLTBkZjUtNDQ4MS04 NGU0LTgzNjE5YjA1Zjk2Ni81NWU3YjhlMC0wZGY1LTQ0ODEtODRlNC04MzYxOWIw NWY5NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqnAwDQQCAAIwBwMFACYGDsAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgrCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHGi+Vc9OBh2KNnP+MHsO7qmVP17 K3O5owtSrU2qsyeXfPdyUYnjURPAmg8ToQv+EU4h+HkkcUOLyhQmYN5wb4sUIUdY niMe7zHYAb2fGA31EjgA8ZHUHqPimNJwIJ7nzyL5Poc7l+Ho1p5EWn6rjNsGTrqH HQptH8lsSNvBh6pt6vIBN0cvYsXpvtSBgP3GEUzVNNK5s5XB2X5qhDynSlC1UvMz shGEWO2d+g5Z1lWj7Cpccq9m5eWp6aoaoJnrIpxP8h5Vzl02exAC6yAefQD4iASH Jzyij7HEH85tXUUh1U74Q9Xd2ixmoI147v7dLodKIl1JUL3A7POWPTzVilA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:10 2025 by rpki-client