$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer File: 573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer (raw, json) Hash identifier: wi/9WbcWAx7fWw6k5qTBHdJwHECAv+3BG0p7zRS1Ixk= Subject key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B0E39C54670656A141B9FA4BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 00:45:25 +0000 Certificate not after: Mon 06 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 20249 IP: 169.196.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:39:c5:46:70:65:6a:14:1b:9f:a4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 2 00:45:25 2025 GMT Not After : Dec 6 01:45:25 2027 GMT Subject: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:c0:74:64:3d:cd:23:d0:15:62:68:c1:f2: 36:6c:b3:5d:aa:37:b1:7b:be:15:97:3e:b0:d0:b6: 50:9b:5a:5b:37:18:50:4c:4c:c8:93:4a:b0:dd:a2: 4f:63:64:69:27:05:bf:d5:01:2f:0a:d6:ad:12:04: fb:53:58:75:e8:05:d9:bc:df:57:f3:7a:2c:7f:13: b3:45:fb:62:0a:38:86:be:55:c8:31:90:ea:9d:f8: 98:80:53:46:5d:1b:95:c8:f9:8a:28:46:50:7b:0a: 6c:f6:16:4f:b4:e7:72:ab:97:0b:3a:b0:b5:04:a0: 9b:e9:93:bb:65:9c:b2:a3:69:7d:13:12:f4:d5:cf: c0:49:70:61:28:87:a9:cd:57:6c:03:ec:29:7f:b7: fc:ac:e6:1f:c2:cb:cf:74:a6:13:02:dc:e0:43:fd: 8c:ef:72:62:84:cf:cb:af:23:d3:7d:7d:db:c2:27: a3:bd:aa:bb:4e:c9:79:02:72:91:e2:45:c5:98:5b: 6e:0f:e1:72:d8:bf:23:01:af:1c:c2:d3:57:4e:be: 9b:a3:86:e6:98:f1:61:44:b7:2b:75:14:d0:0f:89: c7:fb:72:5f:f8:57:e7:b0:46:55:27:2e:ca:cc:46: 67:37:cf:a9:93:87:33:36:07:5a:b8:02:41:02:9b: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 169.196.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bf:7b:60:48:a3:1f:f3:ef:a2:c8:81:88:e0:41:0f:e7:22: 7d:60:68:a3:ed:18:13:0e:11:9d:ed:96:23:2f:f9:6e:4e:5b: 7f:88:31:7e:0e:ad:61:46:87:95:1c:c1:87:47:97:3b:cc:70: 7c:bd:ae:1f:66:84:52:ab:b0:b7:ea:98:1f:86:f3:e8:5b:94: 82:42:89:25:d1:87:56:24:08:c3:3c:3b:04:f3:b6:fc:ac:e2: c4:79:59:02:c7:6c:12:df:a0:13:1a:15:8d:4f:56:b9:3e:6d: cc:da:37:4c:53:56:7f:32:eb:27:09:be:07:91:bd:bd:c0:9d: 33:92:72:b3:82:44:3e:41:dd:06:83:71:65:d5:4d:f6:58:c1: f9:62:9e:0d:93:ff:63:ad:21:7b:c9:5c:e4:d8:82:f3:da:1f: 31:85:1a:fc:4b:0b:44:72:d2:08:b0:d8:1b:81:ae:b8:d9:b0: 23:2d:9f:c1:76:d5:df:20:ff:bf:a4:71:eb:f1:35:1d:1b:35: 89:d7:da:57:61:48:86:66:a0:ef:bb:a4:32:77:0a:be:28:08: b3:95:49:d2:5a:dd:0a:dc:6b:1a:2b:22:cc:e1:e2:67:2d:d4: fd:37:64:ac:82:d9:a5:6d:ad:fd:25:fd:c5:97:c3:50:c1:f6: dc:d8:23:9a -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEsOOcVGcGVqFBufpL4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkwMjAwNDUyNVoXDTI3MTIwNjAxNDUyNVowLzEtMCsGA1UEAxMk NTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTfAdGQ9zSPQFWJowfI2bLNdqjexe74Vlz6w 0LZQm1pbNxhQTEzIk0qw3aJPY2RpJwW/1QEvCtatEgT7U1h16AXZvN9X83osfxOz RftiCjiGvlXIMZDqnfiYgFNGXRuVyPmKKEZQewps9hZPtOdyq5cLOrC1BKCb6ZO7 ZZyyo2l9ExL01c/ASXBhKIepzVdsA+wpf7f8rOYfwsvPdKYTAtzgQ/2M73JihM/L ryPTfX3bwiejvaq7Tsl5AnKR4kXFmFtuD+Fy2L8jAa8cwtNXTr6bo4bmmPFhRLcr dRTQD4nH+3Jf+FfnsEZVJy7KzEZnN8+pk4czNgdauAJBApuGOQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOW3MJyCNaOu45O1bz4VTlFJLEPgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU3M2VlMWJiLWJiNmItNGNjNi1i Y2ExLTRjMTYyMmRjNGVkYi81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJk YzRlZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCpxDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJP GTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB2v3tgSKMf8++iyIGI4EEP5yJ9YGij7RgTDhGd7ZYjL/luTlt/ iDF+Dq1hRoeVHMGHR5c7zHB8va4fZoRSq7C36pgfhvPoW5SCQokl0YdWJAjDPDsE 87b8rOLEeVkCx2wS36ATGhWNT1a5Pm3M2jdMU1Z/MusnCb4Hkb29wJ0zknKzgkQ+ Qd0Gg3Fl1U32WMH5Yp4Nk/9jrSF7yVzk2ILz2h8xhRr8SwtEctIIsNgbga642bAj LZ/BdtXfIP+/pHHr8TUdGzWJ19pXYUiGZqDvu6Qydwq+KAizlUnSWt0K3GsaKyLM 4eJnLdT9N2Ssgtmlba39Jf3Fl8NQwfbc2COa -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:21 2025 by rpki-client