$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer File: 7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer (raw, json) Hash identifier: DosxhYzdW3Gk0uGpabXvyNvagDlWeZ7M8iMFs6OPCf4= Subject key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584ADEC424D1F379482E4BD4AE88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Aug 2025 00:45:25 +0000 Certificate not after: Fri 19 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 4250 AS: 13960 AS: 25745 IP: 64.40.144.0/20 IP: 204.19.238.0/23 IP: 208.123.209.0/24 IP: 208.123.220.0/22 IP: 216.177.128.0/20 IP: 216.185.32.0/19 IP: 2604:1880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:c4:24:d1:f3:79:48:2e:4b:d4:ae:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 16 00:45:25 2025 GMT Not After : Nov 19 01:45:25 2027 GMT Subject: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:38:f9:26:df:84:aa:c8:df:f6:3a:5d:d2: 9e:97:b9:11:7e:bd:55:5c:4a:5a:62:0f:c8:53:46: f9:63:fb:20:7b:51:a4:e7:91:30:80:c0:53:88:ef: 4f:6f:e7:9d:71:af:04:8e:1e:a5:9f:ec:32:f8:68: 02:76:49:81:14:3d:6b:3d:88:98:f9:57:97:60:94: 1d:95:c1:77:a2:dc:06:1a:34:91:b3:fc:a6:d8:08: 4b:3b:b3:62:72:fd:cc:2e:27:12:a3:b2:4c:cd:3d: bc:25:3c:f8:b1:1c:7f:ef:cc:35:7b:1a:f6:ec:5e: 35:76:c3:94:6f:ff:3a:5b:85:63:60:b8:10:58:57: bc:93:00:31:96:01:67:89:0a:f1:57:95:98:bd:db: 9a:6d:0b:68:0e:c4:53:59:7d:d3:d2:05:98:ba:56: 2a:52:63:df:4b:76:7a:13:e7:71:ae:c7:ce:c4:b1: 94:44:cc:44:6b:cd:b2:c0:6f:62:33:2f:33:af:e8: 93:65:ac:9d:66:49:f4:53:a1:44:5c:03:00:4d:a6: f0:7b:14:9e:43:f7:72:1a:47:7b:9a:1f:b1:27:9f: 04:dd:f0:22:07:c5:06:bc:83:a3:51:42:55:8a:eb: 68:4a:1d:1b:fd:e0:8e:ba:02:e9:e1:0a:52:b1:9d: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.40.144.0/20 204.19.238.0/23 208.123.209.0/24 208.123.220.0/22 216.177.128.0/20 216.185.32.0/19 IPv6: 2604:1880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4250 13960 25745 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8d:95:17:9d:68:7e:70:3f:84:ec:f4:6c:95:85:2e:c8:db: 11:bd:1f:da:ec:cb:a3:f2:e3:46:a1:9e:ce:cd:8b:81:89:4d: 03:07:73:5c:19:d0:0b:5e:5a:a8:22:6e:7d:cc:d5:15:fb:41: 7b:a1:6b:d1:b8:5a:85:05:a0:42:12:ed:ac:85:67:0e:e6:5f: 61:e9:62:4f:05:42:02:60:90:e3:d2:a8:98:2d:09:10:64:36: 78:0d:7c:de:f3:c2:e6:8b:92:a2:2f:b3:aa:67:e0:db:65:f1: 59:32:9d:2a:da:63:ec:fd:4e:80:86:be:27:49:2e:0b:64:5f: c6:aa:b5:61:9f:7e:56:3a:2f:f7:f2:38:a0:c5:fc:99:39:ad: 09:a5:f2:da:b3:83:38:c0:29:b1:28:df:64:3a:5a:20:bb:e2: 55:8e:d5:f8:a0:a4:59:d7:72:23:91:63:60:28:ee:7a:08:6b: 2b:e9:14:20:90:5d:5f:1b:ed:03:64:d3:7e:ad:5e:53:f2:7e: 6f:f6:f6:d1:5c:5d:c7:c5:60:ef:0d:0e:88:34:9e:63:7a:12: 15:0b:48:b8:31:97:b7:4a:33:ba:65:24:aa:08:32:b4:db:32: 93:a5:43:6e:a8:77:a5:53:ce:0e:7a:05:c1:3b:a2:3b:e5:32: 0f:41:59:74 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWErexCTR83lILkvUrogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgxNjAwNDUyNVoXDTI3MTExOTAxNDUyNVowLzEtMCsGA1UEAxMk N2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZkNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtI4+SbfhKrI3/Y6XdKel7kRfr1VXEpaYg/I U0b5Y/sge1Gk55EwgMBTiO9Pb+edca8Ejh6ln+wy+GgCdkmBFD1rPYiY+VeXYJQd lcF3otwGGjSRs/ym2AhLO7Nicv3MLicSo7JMzT28JTz4sRx/78w1exr27F41dsOU b/86W4VjYLgQWFe8kwAxlgFniQrxV5WYvduabQtoDsRTWX3T0gWYulYqUmPfS3Z6 E+dxrsfOxLGURMxEa82ywG9iMy8zr+iTZaydZkn0U6FEXAMATabwexSeQ/dyGkd7 mh+xJ58E3fAiB8UGvIOjUUJViutoSh0b/eCOugLp4QpSsZ2CPwIDAQABo4IETzCC BEswHQYDVR0OBBYEFOxWo8A2+NY6+aycD5ybe9+yN4KgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdiMzkwYTBlLTdkNTctNDEyZC1i OGNkLWQwNDViY2FmZDVlZS83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNh ZmQ1ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARAKJADBAHME+4DBADQe9EDBALQe9wDBATYsYAD BAXYuSAwDQQCAAIwBwMFACYEGIAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICEJoC AjaIAgJkkTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCUjZUXnWh+cD+E7PRslYUuyNsRvR/a7Muj8uNGoZ7O zYuBiU0DB3NcGdALXlqoIm59zNUV+0F7oWvRuFqFBaBCEu2shWcO5l9h6WJPBUIC YJDj0qiYLQkQZDZ4DXze88Lmi5KiL7OqZ+DbZfFZMp0q2mPs/U6Ahr4nSS4LZF/G qrVhn35WOi/38jigxfyZOa0JpfLas4M4wCmxKN9kOlogu+JVjtX4oKRZ13IjkWNg KO56CGsr6RQgkF1fG+0DZNN+rV5T8n5v9vbRXF3HxWDvDQ6INJ5jehIVC0i4MZe3 SjO6ZSSqCDK02zKTpUNuqHelU84OegXBO6I75TIPQVl0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:04:29 2025 by rpki-client