$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer File: 9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer (raw, json) Hash identifier: HSm9kka3pZuacZBerXyIZM2wUT2qhos/cRKSdxQLLbc= Subject key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584CE4BFCC3C939DA907C8339080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 13:45:23 +0000 Certificate not after: Mon 22 May 2028 12:45:23 +0000 Subordinate resources: IP: 64.250.128.0/20 IP: 104.145.16.0/20 IP: 130.51.44.0/22 IP: 2620:e6:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:bf:cc:3c:93:9d:a9:07:c8:33:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 17 13:45:23 2026 GMT Not After : May 22 12:45:23 2028 GMT Subject: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:f4:82:10:ba:37:fd:af:45:cd:2d:99:c4: 84:58:d1:7a:e3:18:c8:ce:2c:04:83:57:1e:a5:0f: 85:53:74:dc:75:0e:31:ef:26:50:75:0c:19:02:34: f2:5f:c5:b0:0b:bf:54:29:3a:77:d1:92:8c:1e:04: 39:3b:40:16:77:cc:36:7a:de:06:b4:04:50:be:45: 1b:6e:93:3e:bf:91:58:35:f6:67:c9:bc:b4:05:aa: 3e:d0:8e:6d:96:e5:d9:f1:c7:fc:54:38:4c:54:25: 7e:da:2f:fa:54:18:7e:bb:ad:3c:d7:0e:14:c2:a0: 7d:ca:6f:cd:24:5b:99:5a:28:cf:9a:9c:60:dd:21: ee:a0:8f:78:65:5d:88:24:b5:d9:5f:99:e1:2a:f6: b8:39:2f:a8:b4:84:34:2b:6b:4c:97:91:b3:5f:eb: 31:70:3d:50:0c:de:54:d9:d4:16:3e:de:5f:4d:8c: 77:03:ac:b7:94:30:55:ac:eb:14:d0:aa:83:ce:d0: b3:52:30:86:7d:6b:5c:69:49:cb:df:46:11:57:96: 3d:3c:21:46:47:c0:4e:f0:38:8c:99:df:73:c7:1c: a5:d7:e5:aa:51:eb:83:f4:16:22:88:b0:62:71:d3: 89:72:b6:99:22:d0:71:ac:87:1a:79:64:fd:d9:82: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.250.128.0/20 104.145.16.0/20 130.51.44.0/22 IPv6: 2620:e6:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:90:8a:cd:08:1d:ff:38:e0:38:39:dd:b9:c0:6d:b8:50:bf: ae:5e:84:e6:38:3b:8d:0a:b6:37:49:8c:4b:43:9a:2d:da:84: c7:1f:5d:cb:51:16:fa:49:9c:d2:f9:bf:8b:34:a1:47:90:c5: 49:a9:d1:55:3d:73:1d:aa:1c:cb:74:22:32:f6:de:d5:29:3b: 62:24:dc:fa:1e:5c:dd:be:d2:c8:f1:a2:27:11:74:71:af:9d: dc:10:c0:90:48:b9:48:5d:57:9f:c7:40:13:15:b7:ec:96:90: a4:0b:d3:3b:08:91:c8:44:91:3f:99:c1:99:70:be:5e:2f:39: 20:ba:52:92:e8:37:5b:07:9e:17:e9:1e:05:96:a9:04:0f:e5: 90:b3:bd:78:75:46:53:45:5d:48:a5:92:f0:eb:3d:a7:0c:0a: 02:13:39:70:8a:51:34:7b:be:fc:3c:79:92:8a:0c:ce:5d:27: 66:ab:8c:f5:bc:a8:98:3c:9c:03:c4:b6:91:88:08:49:12:6d: 9e:a8:8a:69:a4:1e:b3:d6:35:85:7f:3e:e0:12:fc:82:de:9b: 2e:29:40:8d:57:74:44:1c:f8:34:eb:0b:af:03:92:a5:0a:31: 5c:84:53:9d:39:3e:a6:99:03:83:1e:e2:70:0e:7d:90:ee:09: f9:49:77:ea -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEzkv8w8k52pB8gzkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDIxNzEzNDUyM1oXDTI4MDUyMjEyNDUyM1owLzEtMCsGA1UEAxMk OWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYyZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo70ghC6N/2vRc0tmcSEWNF64xjIziwEg1ce pQ+FU3TcdQ4x7yZQdQwZAjTyX8WwC79UKTp30ZKMHgQ5O0AWd8w2et4GtARQvkUb bpM+v5FYNfZnyby0Bao+0I5tluXZ8cf8VDhMVCV+2i/6VBh+u6081w4UwqB9ym/N JFuZWijPmpxg3SHuoI94ZV2IJLXZX5nhKva4OS+otIQ0K2tMl5GzX+sxcD1QDN5U 2dQWPt5fTYx3A6y3lDBVrOsU0KqDztCzUjCGfWtcaUnL30YRV5Y9PCFGR8BO8DiM md9zxxyl1+WqUeuD9BYiiLBicdOJcraZItBxrIcaeWT92YL1TwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFZFdabcmTkWiLzT/oaa/Zzp/XQbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzlmZjQzYWFiLWM4YzItNGYyMy05 MWU1LTM3M2JlMjQ2MmU5Zi85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0 NjJlOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBARA+oADBARokRADBAKCMywwDwQCAAIwCQMHACYg AObAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCRkIrNCB3/OOA4Od25wG24UL+uXoTmODuNCrY3SYxLQ5ot 2oTHH13LURb6SZzS+b+LNKFHkMVJqdFVPXMdqhzLdCIy9t7VKTtiJNz6HlzdvtLI 8aInEXRxr53cEMCQSLlIXVefx0ATFbfslpCkC9M7CJHIRJE/mcGZcL5eLzkgulKS 6DdbB54X6R4FlqkED+WQs714dUZTRV1IpZLw6z2nDAoCEzlwilE0e778PHmSigzO XSdmq4z1vKiYPJwDxLaRiAhJEm2eqIpppB6z1jWFfz7gEvyC3psuKUCNV3REHPg0 6wuvA5KlCjFchFOdOT6mmQODHuJwDn2Q7gn5SXfq -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:34 2026 by rpki-client