$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer File: 8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer (raw, json) Hash identifier: vNvT5Ra19XDMGrg4mlnPyvCEKILslDYhueXXHEZDT/M= Subject key identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584D80F847AD67A2EE314C662000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 12:45:18 +0000 Certificate not after: Mon 17 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 36506 IP: 199.204.92.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:f8:47:ad:67:a2:ee:31:4c:66:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 14 12:45:18 2026 GMT Not After : Jul 17 12:45:18 2028 GMT Subject: CN=8ef65c6b-019c-42a7-a13b-f51faf49a9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:89:5f:cb:20:11:3a:58:28:c3:4d:f9:31: 98:77:71:06:5d:07:14:0a:30:78:9b:b7:7a:05:47: 66:51:a0:0a:8f:bc:07:e7:57:7c:c1:7f:f0:18:33: 0a:f1:66:f2:41:c9:a8:f8:78:88:6a:9b:4f:f7:dc: 53:07:97:6c:40:9d:6d:8e:51:8b:c1:bd:c6:15:df: 17:55:3e:1d:9a:af:aa:e2:b3:35:e6:b1:15:0c:f7: b8:d7:ee:a0:ce:d6:7d:2b:21:69:e4:2d:0a:6d:2c: 88:95:60:6d:72:fd:01:a6:fd:72:28:69:3f:e2:c9: eb:13:cd:57:60:6d:6f:c1:56:58:84:f3:c6:d6:e2: da:97:eb:a3:24:fe:9b:25:06:55:60:f0:eb:41:de: 1d:a1:d3:4c:2f:59:9b:9b:0c:8f:75:c8:9a:02:b0: ac:27:0d:af:40:49:ef:56:98:9c:76:1c:01:94:ab: fe:97:b6:39:3f:7c:01:cc:41:3c:24:c4:9f:5c:58: 4f:47:08:92:b5:5f:a8:d9:94:c6:34:11:e9:88:d3: d0:0b:24:ff:c8:e2:82:4c:82:0a:23:ef:57:f1:16: e0:2c:54:08:b8:c5:4b:59:b0:ee:44:7a:6f:c5:2a: 20:49:67:c6:89:fa:cf:30:6b:9f:c1:36:13:f2:53: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 199.204.92.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36506 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:13:a9:a8:47:12:df:91:d5:20:10:1f:2d:89:a0:bf:26:55: cd:1f:b7:c9:44:35:8d:8f:17:9f:1a:76:ed:ec:5b:54:de:aa: 95:c9:8c:27:b8:b2:ec:8a:14:30:ad:68:ce:ba:e4:fa:2d:3f: 9c:25:e2:ee:90:9f:37:0a:b3:78:23:15:6b:77:39:d3:94:28: 9a:9c:00:03:b9:ab:aa:59:75:4e:c9:f1:8e:7a:9e:b3:cd:5e: 29:50:1d:41:91:e9:87:59:69:b6:95:00:fd:c8:39:a5:9e:5e: 6a:df:30:fa:d7:26:15:94:83:0d:fe:56:ed:89:35:e9:44:31: 2f:98:71:0e:04:4c:2a:c0:53:8f:40:a7:80:f4:62:93:c6:c1: a5:91:c9:ba:41:c7:05:9f:20:cc:4d:16:04:0d:ba:0a:02:ce: c2:08:b1:2a:73:e5:6a:11:9d:6d:eb:14:c4:e1:bb:03:15:60: f7:28:51:b2:55:a9:04:fe:36:03:32:6a:b4:03:06:6c:79:b6: e0:e8:74:7a:57:5c:17:28:b3:8f:b9:e1:de:67:c8:25:48:ce: e1:10:32:f1:8a:8c:96:a5:d0:95:ff:52:6a:b7:9b:57:d4:cc: f3:d4:77:2a:da:ec:82:d1:eb:48:fc:89:3c:b9:97:54:6f:49: c9:92:70:5e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2A+EetZ6LuMUxmIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDQxNDEyNDUxOFoXDTI4MDcxNzEyNDUxOFowLzEtMCsGA1UEAxMk OGVmNjVjNmItMDE5Yy00MmE3LWExM2ItZjUxZmFmNDlhOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyJX8sgETpYKMNN+TGYd3EGXQcUCjB4m7d6 BUdmUaAKj7wH51d8wX/wGDMK8WbyQcmo+HiIaptP99xTB5dsQJ1tjlGLwb3GFd8X VT4dmq+q4rM15rEVDPe41+6gztZ9KyFp5C0KbSyIlWBtcv0Bpv1yKGk/4snrE81X YG1vwVZYhPPG1uLal+ujJP6bJQZVYPDrQd4dodNML1mbmwyPdciaArCsJw2vQEnv VpicdhwBlKv+l7Y5P3wBzEE8JMSfXFhPRwiStV+o2ZTGNBHpiNPQCyT/yOKCTIIK I+9X8RbgLFQIuMVLWbDuRHpvxSogSWfGifrPMGufwTYT8lOOhwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAUHJQjozjT5OBT2oLYFV5K0/z5+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0OWE5YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhlZjY1YzZiLTAxOWMtNDJhNy1h MTNiLWY1MWZhZjQ5YTliMi84ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0 OWE5YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHHzFwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI6aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFYTqahHEt+R1SAQHy2JoL8mVc0ft8lENY2PF58adu3sW1Te qpXJjCe4suyKFDCtaM665PotP5wl4u6QnzcKs3gjFWt3OdOUKJqcAAO5q6pZdU7J 8Y56nrPNXilQHUGR6YdZabaVAP3IOaWeXmrfMPrXJhWUgw3+Vu2JNelEMS+YcQ4E TCrAU49Ap4D0YpPGwaWRybpBxwWfIMxNFgQNugoCzsIIsSpz5WoRnW3rFMThuwMV YPcoUbJVqQT+NgMyarQDBmx5tuDodHpXXBcos4+54d5nyCVIzuEQMvGKjJal0JX/ Umq3m1fUzPPUdyra7ILR60j8iTy5l1RvScmScF4= -----END CERTIFICATE-----Generated at Fri Apr 17 00:05:28 2026 by rpki-client