$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer File: b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer (raw, json) Hash identifier: IzHFOfBMxsRsW6+9EKLQZqRYbg7/2NucRRZGOmVS3x4= Subject key identifier: 86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A28A3EC22B2EED0605EFC9580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 19:03:23 +0000 Certificate not after: Tue 14 Sep 2027 19:03:23 +0000 Subordinate resources: AS: 400779 IP: 66.132.212.0/22 IP: 2607:c440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:a3:ec:22:b2:ee:d0:60:5e:fc:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 11 19:03:23 2025 GMT Not After : Sep 14 19:03:23 2027 GMT Subject: CN=b5cf26ad-4d46-4540-80d9-8a26a8c8ac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:cd:03:c6:17:d3:4a:a2:65:d4:05:09:e5: 68:90:9e:21:d7:a9:67:91:66:02:d3:98:48:26:9d: ad:58:ee:ae:16:ec:7e:5d:5b:fe:2d:67:cf:05:15: f4:e7:30:28:e2:d0:c9:ef:15:fa:41:78:da:53:a6: ac:ac:44:26:0b:4d:50:00:ad:c3:06:64:13:f5:da: ea:da:b9:cd:48:fc:99:c3:f8:6b:18:58:2f:57:b6: 57:e3:0d:5c:1d:f4:22:ce:5d:4d:13:67:fe:e7:6a: dc:98:96:7e:4e:b6:ca:f4:4f:0c:51:35:3f:14:03: 9d:f5:ce:4a:b1:20:9e:e9:e2:69:cd:72:b3:f1:22: 78:29:b9:42:e1:1e:74:65:47:eb:2e:4b:2a:64:bd: 38:8d:c7:89:f0:ee:43:f9:0d:e7:2b:ad:07:fe:21: 94:6c:3c:d8:bb:ee:6a:25:36:15:ea:f5:dc:88:99: a8:f7:73:b7:3c:b7:20:67:d6:5b:a5:43:bb:d6:ba: 07:d6:76:1a:75:18:50:b6:4b:fe:65:53:40:0d:68: 77:2a:da:d8:f4:29:56:d4:16:7b:30:36:20:f1:93: e2:76:eb:6d:5b:29:ef:63:f8:16:93:8d:db:ef:6a: 44:d3:75:69:28:0c:c7:f7:f4:07:d5:01:96:92:29: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.132.212.0/22 IPv6: 2607:c440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400779 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b7:60:60:bc:d7:44:ed:bf:70:1b:ea:da:4f:d4:7d:f9:9b: 3a:3a:7e:1d:70:30:ca:6a:59:1f:79:6f:b8:84:bd:13:f7:af: 51:30:b4:e8:4a:e8:54:6a:18:ac:09:87:7b:ac:43:28:cd:e3: 95:66:b9:22:d9:d9:b0:6d:54:ed:f3:0b:61:e8:f7:08:1b:ac: 0d:00:09:de:40:0e:84:66:41:0c:4f:c9:40:a1:f7:bd:12:85: a4:99:67:17:4f:34:64:53:9b:17:17:e8:97:37:55:84:1c:19: b3:c2:1a:ca:42:a0:77:01:dc:cb:6a:a6:b5:e2:c2:3b:2f:cc: f6:aa:c5:e5:0b:54:58:73:fd:fd:50:b1:96:ce:6e:03:d9:9c: ad:fc:22:04:ee:cf:35:55:d0:e7:22:65:29:e8:73:20:a5:a3: 86:de:6e:e2:3f:79:2a:b8:52:1a:a0:d9:b8:66:7c:45:a8:98: 98:34:8e:ff:a5:e0:c8:92:4d:01:4f:97:35:b7:77:2a:31:20: 92:5f:f4:cf:10:57:3a:fe:30:81:29:a9:01:22:ab:21:de:95: c1:40:55:1f:c1:e6:1a:69:ed:f8:da:26:34:ce:37:0b:f0:63: c5:f1:d4:ae:b8:fb:26:b8:50:81:a4:17:72:81:35:92:b0:0a: 0d:6a:cd:67 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEooo+wisu7QYF78lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYxMTE5MDMyM1oXDTI3MDkxNDE5MDMyM1owLzEtMCsGA1UEAxMk YjVjZjI2YWQtNGQ0Ni00NTQwLTgwZDktOGEyNmE4YzhhYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rvNA8YX00qiZdQFCeVokJ4h16lnkWYC05hI Jp2tWO6uFux+XVv+LWfPBRX05zAo4tDJ7xX6QXjaU6asrEQmC01QAK3DBmQT9drq 2rnNSPyZw/hrGFgvV7ZX4w1cHfQizl1NE2f+52rcmJZ+TrbK9E8MUTU/FAOd9c5K sSCe6eJpzXKz8SJ4KblC4R50ZUfrLksqZL04jceJ8O5D+Q3nK60H/iGUbDzYu+5q JTYV6vXciJmo93O3PLcgZ9ZbpUO71roH1nYadRhQtkv+ZVNADWh3KtrY9ClW1BZ7 MDYg8ZPiduttWynvY/gWk43b72pE03VpKAzH9/QH1QGWkilRJQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIai3k4dVLk1l7h6jIKFIjNHzbC3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i NWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThjOGFjNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I1Y2YyNmFkLTRkNDYtNDU0MC04 MGQ5LThhMjZhOGM4YWM2MS9iNWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThj OGFjNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJChNQwDQQCAAIwBwMFACYHxEAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh2LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKG3YGC810Ttv3Ab6tpP1H35mzo6 fh1wMMpqWR95b7iEvRP3r1EwtOhK6FRqGKwJh3usQyjN45VmuSLZ2bBtVO3zC2Ho 9wgbrA0ACd5ADoRmQQxPyUCh970ShaSZZxdPNGRTmxcX6Jc3VYQcGbPCGspCoHcB 3MtqprXiwjsvzPaqxeULVFhz/f1QsZbObgPZnK38IgTuzzVV0OciZSnocyClo4be buI/eSq4Uhqg2bhmfEWomJg0jv+l4MiSTQFPlzW3dyoxIJJf9M8QVzr+MIEpqQEi qyHelcFAVR/B5hpp7fjaJjTONwvwY8Xx1K64+ya4UIGkF3KBNZKwCg1qzWc= -----END CERTIFICATE-----Generated at Sat Jun 14 03:47:15 2025 by rpki-client