$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer File: 98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer (raw, json) Hash identifier: JihkJJ6ELx7XQloDFbu3HIN6Ed5Rh8+lY2lDVyUVZ6w= Subject key identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858490CA9C0124FF5DEAFD336AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Mar 2025 01:45:33 +0000 Certificate not after: Sat 05 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 198.169.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:a9:c0:12:4f:f5:de:af:d3:36:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 2 01:45:33 2025 GMT Not After : Jun 5 00:45:33 2027 GMT Subject: CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:a8:86:a8:bb:88:6b:8d:37:99:8f:0a:69: e9:5b:b3:d4:b1:0e:e6:5d:3c:04:15:85:30:05:07: 60:82:eb:0b:bf:79:65:05:b8:45:57:be:6b:69:07: 57:c2:e4:a2:54:b9:8e:95:5e:90:35:2c:a4:19:21: cc:de:e6:a0:1e:11:b4:cb:4b:23:3b:7d:08:5f:85: 6d:f7:7c:84:b9:62:47:39:5e:a3:d0:e9:2a:52:cf: b3:61:63:37:55:a5:ac:ce:4d:09:2a:00:e2:47:18: 80:aa:1d:27:68:fe:09:a1:85:d5:cd:dd:0b:2d:84: 18:43:1f:bd:11:c0:80:80:7c:8c:3b:ad:1f:3b:cb: d9:15:83:66:2f:99:65:55:f0:13:ad:25:1a:f5:ad: 89:52:a4:ba:75:d7:ea:3d:94:8e:9f:be:01:c7:a3: 88:64:d7:a9:fd:fe:b2:cf:db:6e:1c:02:09:fd:58: 6a:40:e4:ee:e3:93:a1:2e:0a:36:f8:91:45:5a:e3: 8e:ba:dd:69:ba:4c:31:25:8b:0a:f4:9e:e6:08:95: 73:e6:f5:65:fc:a9:95:93:41:b4:b0:d7:84:b0:ae: fb:90:72:45:7d:23:87:87:4f:86:4e:1d:a9:c7:67: 72:db:97:92:d5:39:c4:b7:66:5b:40:8f:24:3c:1d: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 198.169.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:35:e5:eb:13:30:0a:18:73:c0:bb:8c:72:5b:65:60:ce:6d: b9:48:16:3d:bb:f2:58:eb:fc:c2:68:00:a8:fb:1f:c0:31:83: 60:c6:84:c8:9b:4d:88:d0:ff:da:71:d6:9f:94:08:d5:6c:0f: 37:d4:a7:d3:d4:9d:26:a5:6e:c2:60:ed:b5:29:d3:3a:bd:89: 3c:39:d7:53:71:26:23:9c:dd:11:0e:43:7b:ce:bd:c7:d3:54: d5:ee:af:d9:ac:d9:b7:47:7f:a1:a9:e8:65:42:fa:0a:c2:d9: 99:5e:20:79:51:54:d1:3e:70:b6:5b:ef:c3:16:84:f6:86:c2: be:a0:4c:1b:b2:a4:f3:4f:80:3c:af:6a:22:07:53:53:d4:7b: f3:59:59:e2:59:c2:42:e3:74:b2:77:ef:a2:1d:f5:40:f9:fc: 1f:b0:4a:2e:ea:6b:6a:9e:c8:37:28:e3:64:df:0d:53:48:20: 1a:ee:9b:58:41:48:40:ea:33:69:4c:29:d3:56:db:eb:1b:a6: fc:b0:0d:63:69:c4:12:1b:95:e2:fc:5c:00:e8:79:e6:d5:b2: 88:68:13:92:21:a3:74:b9:c5:45:3e:fc:a9:c9:73:f2:a6:9d: 16:40:31:9d:53:ec:42:eb:85:9c:25:86:33:40:a8:68:a9:c7: 0e:d6:f4:51 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEkMqcAST/Xer9M2r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMwMjAxNDUzM1oXDTI3MDYwNTAwNDUzM1owLzEtMCsGA1UEAxMk OThlMjBlZjktMTNhMS00MGZkLThjOGEtMWExYjFmNDA0ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb6ohqi7iGuNN5mPCmnpW7PUsQ7mXTwEFYUw BQdggusLv3llBbhFV75raQdXwuSiVLmOlV6QNSykGSHM3uagHhG0y0sjO30IX4Vt 93yEuWJHOV6j0OkqUs+zYWM3VaWszk0JKgDiRxiAqh0naP4JoYXVzd0LLYQYQx+9 EcCAgHyMO60fO8vZFYNmL5llVfATrSUa9a2JUqS6ddfqPZSOn74Bx6OIZNep/f6y z9tuHAIJ/VhqQOTu45OhLgo2+JFFWuOOut1pukwxJYsK9J7mCJVz5vVl/KmVk0G0 sNeEsK77kHJFfSOHh0+GTh2px2dy25eS1TnEt2ZbQI8kPB17tQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBuZL3GXQ/DcXUjvz7ioHG9Wxa3lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 OGUyMGVmOS0xM2ExLTQwZmQtOGM4YS0xYTFiMWY0MDQ4ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk4ZTIwZWY5LTEzYTEtNDBmZC04 YzhhLTFhMWIxZjQwNDg4Mi85OGUyMGVmOS0xM2ExLTQwZmQtOGM4YS0xYTFiMWY0 MDQ4ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGqQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjzXl6xMwChhzwLuMcltl YM5tuUgWPbvyWOv8wmgAqPsfwDGDYMaEyJtNiND/2nHWn5QI1WwPN9Sn09SdJqVu wmDttSnTOr2JPDnXU3EmI5zdEQ5De869x9NU1e6v2azZt0d/oanoZUL6CsLZmV4g eVFU0T5wtlvvwxaE9obCvqBMG7Kk80+APK9qIgdTU9R781lZ4lnCQuN0snfvoh31 QPn8H7BKLuprap7INyjjZN8NU0ggGu6bWEFIQOozaUwp01bb6xum/LANY2nEEhuV 4vxcAOh55tWyiGgTkiGjdLnFRT78qclz8qadFkAxnVPsQuuFnCWGM0CoaKnHDtb0 UQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:44 2025 by rpki-client