$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer File: 7f1c958a-c540-4699-8a42-ad625fc751f3.cer (raw, json) Hash identifier: qYsuVhmNEpXN1sLxgCaYrf1+xu0MjONWv17H8NI4lqs= Subject key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A268318B9C8490577F30FBEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 00:45:37 +0000 Certificate not after: Tue 14 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 209.160.100.0/22 IP: 2605:6540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:83:18:b9:c8:49:05:77:f3:0f:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 11 00:45:37 2025 GMT Not After : Sep 14 00:45:37 2027 GMT Subject: CN=7f1c958a-c540-4699-8a42-ad625fc751f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:0f:fa:9d:53:50:db:5a:75:2e:cb:35:43: 40:33:97:b3:3a:1c:ad:e5:51:64:e3:34:d1:df:70: 90:55:d7:aa:81:30:a2:98:20:b8:99:d4:00:3e:40: 0a:2b:bb:4f:06:47:66:7e:8d:e0:c2:2d:35:6b:78: fa:5b:a5:14:4e:8f:26:3b:d9:6f:91:9a:8b:02:ec: d6:45:7a:30:45:d9:19:4b:cf:6e:66:96:ad:95:ae: ac:1f:db:04:20:f6:54:82:14:0d:f1:e6:e5:c4:f5: 88:84:84:06:4b:53:3d:e5:d6:7c:2c:f9:26:99:b0: 1a:41:2a:61:bb:e9:d4:33:08:f1:ce:05:95:3b:c6: bf:3b:6b:4c:1e:13:9d:29:85:18:e9:f1:96:0e:93: 38:a2:92:3e:da:c1:8d:e5:2b:10:17:2e:6c:05:68: 9f:26:53:67:72:6a:15:de:cf:ef:f9:68:44:4f:6b: 5d:c6:f5:25:82:e3:4a:ec:44:10:7e:16:dc:77:94: aa:b2:ed:26:80:be:b9:79:48:a2:b8:7d:64:68:be: eb:c6:b9:d5:c4:48:3f:3a:62:39:1a:1c:29:8f:f0: 57:ba:31:e7:37:8b:2d:29:55:af:ef:29:0c:23:78: c7:1b:09:99:55:62:ac:7b:70:25:7c:1f:b5:b8:96: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 209.160.100.0/22 IPv6: 2605:6540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bb:0f:c2:2f:80:b5:e9:28:17:44:57:f0:83:94:6a:93:03: f2:9b:c4:b8:0c:80:41:61:ea:03:ba:07:13:c4:68:b3:00:f7: e8:7a:7e:15:77:7d:73:cd:6b:f6:9e:37:1d:9b:a2:58:29:45: c5:91:1b:90:09:24:7c:9d:eb:aa:38:1b:22:85:f4:0a:34:7e: 85:2b:e3:96:ae:62:75:37:3a:01:c6:4f:4a:20:30:36:75:35: b0:2a:44:26:de:20:a3:3b:92:fc:56:f4:f7:5b:2d:32:18:fa: 46:b7:5f:7f:e4:31:81:83:f4:30:1c:b0:6c:ab:14:2c:99:b3: 97:41:bc:b2:de:5d:ba:54:9a:2a:a3:19:77:21:b9:00:4d:3f: 09:6d:73:f3:7c:bc:8e:f2:13:aa:e3:41:f0:a1:a6:2c:c4:3d: 09:ed:c5:42:de:b7:54:1d:75:17:20:9b:c2:eb:47:4e:9a:53: 62:84:75:fe:54:8b:a9:a0:e6:7e:68:20:19:8e:e2:cc:7a:ce: 33:87:23:7f:04:1c:7f:c1:15:f2:67:75:5f:52:95:4c:b3:e6: de:fc:ee:0e:34:0d:c5:6a:9c:51:f2:c4:c2:34:ed:74:89:e3: 20:c5:57:3c:13:b7:eb:49:fc:99:97:ea:98:ad:61:d2:88:e1: e0:90:5c:d1 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEomgxi5yEkFd/MPvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYxMTAwNDUzN1oXDTI3MDkxNDAwNDUzN1owLzEtMCsGA1UEAxMk N2YxYzk1OGEtYzU0MC00Njk5LThhNDItYWQ2MjVmYzc1MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAP+p1TUNtadS7LNUNAM5ezOhyt5VFk4zTR 33CQVdeqgTCimCC4mdQAPkAKK7tPBkdmfo3gwi01a3j6W6UUTo8mO9lvkZqLAuzW RXowRdkZS89uZpatla6sH9sEIPZUghQN8eblxPWIhIQGS1M95dZ8LPkmmbAaQSph u+nUMwjxzgWVO8a/O2tMHhOdKYUY6fGWDpM4opI+2sGN5SsQFy5sBWifJlNncmoV 3s/v+WhET2tdxvUlguNK7EQQfhbcd5Sqsu0mgL65eUiiuH1kaL7rxrnVxEg/OmI5 Ghwpj/BXujHnN4stKVWv7ykMI3jHGwmZVWKse3AlfB+1uJaG8wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFMQcMl3dOA9X2EsE9AG4nGHaUlkpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 ZjFjOTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYyNWZjNzUxZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdmMWM5NThhLWM1NDAtNDY5OS04 YTQyLWFkNjI1ZmM3NTFmMy83ZjFjOTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYyNWZj NzUxZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALRoGQwDQQCAAIwBwMFACYFZUAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA R7sPwi+AtekoF0RX8IOUapMD8pvEuAyAQWHqA7oHE8RoswD36Hp+FXd9c81r9p43 HZuiWClFxZEbkAkkfJ3rqjgbIoX0CjR+hSvjlq5idTc6AcZPSiAwNnU1sCpEJt4g ozuS/Fb091stMhj6Rrdff+QxgYP0MBywbKsULJmzl0G8st5dulSaKqMZdyG5AE0/ CW1z83y8jvITquNB8KGmLMQ9Ce3FQt63VB11FyCbwutHTppTYoR1/lSLqaDmfmgg GY7izHrOM4cjfwQcf8EV8md1X1KVTLPm3vzuDjQNxWqcUfLEwjTtdInjIMVXPBO3 60n8mZfqmK1h0ojh4JBc0Q== -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:56 2025 by rpki-client