$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer File: 65249710-7b94-4fa1-9980-bf1dc5d20857.cer (raw, json) Hash identifier: lQ++M40MvOHkIXK1gNIabUi7u5W90iPFz9QaDNIputU= Subject key identifier: D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B460F747682949C0EB7CDA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 135.8.0.0/14 IP: 135.20.0.0/16 IP: 135.27.0.0/16 IP: 135.35.0.0/16 IP: 135.55.0.0 -- 135.56.255.255 IP: 135.60.0.0/16 IP: 135.64.0.0/16 IP: 135.74.0.0/16 IP: 135.105.0.0/16 IP: 135.122.0.0 -- 135.124.255.255 IP: 135.169.0.0/16 IP: 155.184.0.0/16 IP: 198.152.0.0/16 IP: 204.17.215.0/24 IP: 2620:38::/48 IP: 2620:116:1000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:74:76:82:94:9c:0e:b7:cd:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=65249710-7b94-4fa1-9980-bf1dc5d20857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:63:cc:ce:fb:26:b5:91:f6:13:51:68:7a: b4:70:89:06:5f:e1:66:44:ee:bf:79:0c:46:27:fd: cd:c2:f9:65:ff:62:65:f1:c3:e1:74:9a:92:7d:23: ec:a1:32:c6:ed:e8:ec:f7:d9:cf:16:0b:91:a3:dc: 3b:18:30:8a:9e:8b:6d:bd:4f:d3:51:aa:78:1d:ae: 5c:c7:3d:1b:04:b8:d8:b5:0e:b1:77:d6:7f:57:1d: 7c:30:2a:66:79:dc:ac:27:5c:97:db:b0:5e:fc:92: 0d:13:ea:d7:94:6b:1f:2f:ab:40:93:8b:79:36:0c: 43:2a:58:c1:68:53:42:eb:98:99:2d:15:0a:1e:c4: 96:4a:89:56:4d:95:4f:1b:eb:7f:2e:11:6b:d7:dc: 7a:d2:15:23:17:f3:96:43:63:5a:fa:27:ca:0e:46: 6c:74:ac:65:af:b1:d8:56:0b:0f:45:77:9f:7f:65: a1:ae:ee:d3:58:46:36:fb:bf:7e:e8:97:84:52:25: d5:6c:db:af:93:60:1d:1d:be:42:75:73:ad:49:6b: 98:0e:8f:0b:43:44:f4:7a:48:c1:d1:c3:08:4b:58: 9f:01:2d:8c:0a:b8:fd:1e:c9:a7:a5:08:a9:29:a5: 86:81:08:c3:6e:c8:5e:bb:be:08:1d:55:f1:bf:88: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 135.8.0.0/14 135.20.0.0/16 135.27.0.0/16 135.35.0.0/16 135.55.0.0-135.56.255.255 135.60.0.0/16 135.64.0.0/16 135.74.0.0/16 135.105.0.0/16 135.122.0.0-135.124.255.255 135.169.0.0/16 155.184.0.0/16 198.152.0.0/16 204.17.215.0/24 IPv6: 2620:38::/48 2620:116:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e5:1b:b9:55:d9:58:0d:0e:4a:40:2e:cc:29:e1:85:d4:6a: d3:f0:c8:fa:b9:73:ba:4d:b4:42:68:1f:53:a0:c0:0f:3b:c9: 0a:74:bd:88:58:2e:1e:d4:13:bd:8e:ba:75:f7:52:b8:e8:3c: 5f:76:7e:2a:a9:32:98:a9:94:2d:4c:bd:87:f0:0e:a9:f2:5d: 0d:82:f4:62:24:a2:59:b4:fd:b6:fa:71:01:f4:69:46:bd:3c: 59:50:f2:cf:ce:24:b2:2c:04:84:00:33:5a:13:db:60:fd:68: 35:6e:7a:8d:22:4c:6c:a8:c6:9a:6c:0f:2f:c7:66:9e:23:6d: d4:d3:51:14:41:08:7b:c6:8b:44:c5:c7:80:0c:6f:e2:6b:6c: 12:4c:bd:bc:75:86:f5:d3:cd:97:7d:53:15:5c:2a:79:4b:26: 80:43:32:1b:d7:50:4a:c3:c5:7d:c3:8c:c9:95:4e:ae:bb:91: 25:8f:b2:77:e7:59:bd:5b:6b:f9:cf:84:54:d9:83:ac:12:df: 95:89:56:d0:56:7a:f7:53:64:67:02:b0:f1:8e:d2:93:0a:22: e1:33:8b:a4:93:78:7a:74:07:47:57:75:03:90:78:31:5d:52: 3b:1b:de:25:e4:50:ce:4c:60:14:74:4a:58:4e:b8:43:ea:58: cd:75:47:da -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEtGD3R2gpScDrfNqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk NjUyNDk3MTAtN2I5NC00ZmExLTk5ODAtYmYxZGM1ZDIwODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZpjzM77JrWR9hNRaHq0cIkGX+FmRO6/eQxG J/3Nwvll/2Jl8cPhdJqSfSPsoTLG7ejs99nPFguRo9w7GDCKnottvU/TUap4Ha5c xz0bBLjYtQ6xd9Z/Vx18MCpmedysJ1yX27Be/JINE+rXlGsfL6tAk4t5NgxDKljB aFNC65iZLRUKHsSWSolWTZVPG+t/LhFr19x60hUjF/OWQ2Na+ifKDkZsdKxlr7HY VgsPRXeff2Whru7TWEY2+79+6JeEUiXVbNuvk2AdHb5CdXOtSWuYDo8LQ0T0ekjB 0cMIS1ifAS2MCrj9HsmnpQipKaWGgQjDbsheu74IHVXxv4hh6QIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFNPZWgS0nNrH3u31PpkdMmDW/AjEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82 NTI0OTcxMC03Yjk0LTRmYTEtOTk4MC1iZjFkYzVkMjA4NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzY1MjQ5NzEwLTdiOTQtNGZhMS05 OTgwLWJmMWRjNWQyMDg1Ny82NTI0OTcxMC03Yjk0LTRmYTEtOTk4MC1iZjFkYzVk MjA4NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgYcGCCsGAQUF BwEHAQH/BHgwdjBbBAIAATBVAwMChwgDAwCHFAMDAIcbAwMAhyMwCgMDAIc3AwMA hzgDAwCHPAMDAIdAAwMAh0oDAwCHaTAKAwMBh3oDAwCHfAMDAIepAwMAm7gDAwDG mAMEAMwR1zAXBAIAAjARAwcAJiAAOAAAAwYAJiABFhAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW+UbuVXZ WA0OSkAuzCnhhdRq0/DI+rlzuk20QmgfU6DADzvJCnS9iFguHtQTvY66dfdSuOg8 X3Z+KqkymKmULUy9h/AOqfJdDYL0YiSiWbT9tvpxAfRpRr08WVDyz84ksiwEhAAz WhPbYP1oNW56jSJMbKjGmmwPL8dmniNt1NNRFEEIe8aLRMXHgAxv4mtsEky9vHWG 9dPNl31TFVwqeUsmgEMyG9dQSsPFfcOMyZVOrruRJY+yd+dZvVtr+c+EVNmDrBLf lYlW0FZ691NkZwKw8Y7Skwoi4TOLpJN4enQHR1d1A5B4MV1SOxveJeRQzkxgFHRK WE64Q+pYzXVH2g== -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:34 2025 by rpki-client