$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer File: ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer (raw, json) Hash identifier: r0loVwCCrnzczp9v1udNPMlTnBjCL+kqJI7HTzGsjTA= Subject key identifier: C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849C2027441B5A5E4E486903700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 35862 IP: 74.112.136.0/21 IP: 192.81.63.0/24 IP: 199.38.120.0/22 IP: 208.86.160.0/22 IP: 2604:7bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:74:41:b5:a5:e4:e4:86:90:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=ba9f4db7-00df-4d0a-a8e8-efdd20572e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:35:fe:2f:aa:f3:45:fb:7c:dc:10:16:cc:4b: c8:1d:5a:61:b0:b6:2f:b7:90:e9:07:e3:ec:51:0a: b3:9d:6a:e6:ea:bb:48:f7:0d:24:5e:c6:5e:d1:32: b6:23:5e:e3:b4:09:36:e0:97:29:65:cb:a5:39:40: ed:43:45:96:bf:8a:7a:73:50:b7:a9:a2:18:b2:ea: 83:73:5a:45:ed:2b:7a:f9:38:32:88:f9:b4:6b:e0: 0f:7c:52:64:8c:42:c7:cb:34:41:da:6f:e3:a8:f8: 83:a2:db:53:a1:59:9e:04:46:d8:8a:a5:a2:a4:8f: 70:3b:71:27:27:f4:2f:7b:24:5a:f8:6c:55:48:5b: 50:d6:97:ea:3a:5c:c4:c3:24:7f:78:87:a2:79:35: 17:73:2b:a0:7e:04:bc:91:c8:c9:fd:5b:48:3c:d4: aa:26:7e:c2:07:59:3c:f5:d8:f8:35:79:e2:71:39: e9:10:da:86:a6:c4:dc:2f:5b:ab:f3:31:e9:8e:0b: 04:e0:27:22:63:f1:0c:76:d6:fa:47:1a:aa:75:19: e6:6f:b9:52:cb:7c:dc:b6:e4:e3:78:73:88:56:ac: 72:12:41:f3:7a:1d:19:f1:61:00:94:c5:d8:8c:f8: 6e:2a:aa:62:07:80:00:3f:09:1a:d4:04:d2:03:32: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 74.112.136.0/21 192.81.63.0/24 199.38.120.0/22 208.86.160.0/22 IPv6: 2604:7bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35862 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9a:ff:f1:3c:f6:97:fb:fa:c8:1e:9c:ae:69:c0:4b:bc:33: ff:82:fe:1d:c4:37:6a:11:89:e3:b9:2e:40:ef:f1:f7:c4:93: d8:f9:98:8f:f8:3a:2b:de:ff:9d:48:fb:56:92:f8:71:dc:41: 30:06:6e:fa:5f:06:23:66:5d:3f:48:8f:b9:e4:5d:f5:f9:3b: c2:06:bc:1b:63:10:b4:11:12:a2:53:15:ec:fa:2d:d9:ae:bf: e8:f8:6e:11:a0:8d:f3:41:52:41:6a:0e:e7:eb:76:4e:b2:49: d4:6f:92:34:87:f0:4e:32:d1:07:b1:94:2d:33:f5:ac:98:e2: 73:4d:f7:2f:59:7c:c2:b6:d6:38:f9:a7:7d:95:a3:71:8c:cb: 6d:2e:9a:67:55:e1:27:84:af:0c:0f:90:d7:d4:52:7b:69:06: 1c:75:6c:e9:b4:e0:ed:bd:cd:0f:68:99:d4:11:e1:e6:02:aa: 09:b0:1f:79:2d:a9:f4:82:91:7a:c4:6b:9d:1e:98:8e:18:0f: a7:29:44:2a:fd:06:ea:1e:ad:72:ab:ed:04:33:86:a8:15:8b: c9:fe:7d:17:fa:6e:ac:89:27:d1:c0:05:cf:04:38:03:cb:80: 1e:23:e8:c1:66:7e:c0:69:66:79:16:26:2a:df:12:44:4d:fe: 9f:69:0a:8e -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEnCAnRBtaXk5IaQNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk YmE5ZjRkYjctMDBkZi00ZDBhLWE4ZTgtZWZkZDIwNTcyZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DX+L6rzRft83BAWzEvIHVphsLYvt5DpB+Ps UQqznWrm6rtI9w0kXsZe0TK2I17jtAk24JcpZculOUDtQ0WWv4p6c1C3qaIYsuqD c1pF7St6+TgyiPm0a+APfFJkjELHyzRB2m/jqPiDottToVmeBEbYiqWipI9wO3En J/QveyRa+GxVSFtQ1pfqOlzEwyR/eIeieTUXcyugfgS8kcjJ/VtIPNSqJn7CB1k8 9dj4NXnicTnpENqGpsTcL1ur8zHpjgsE4CciY/EMdtb6RxqqdRnmb7lSy3zctuTj eHOIVqxyEkHzeh0Z8WEAlMXYjPhuKqpiB4AAPwka1ATSAzJG9wIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMRBndVW9+ko8TG2ZnopnpvYe3SQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i YTlmNGRiNy0wMGRmLTRkMGEtYThlOC1lZmRkMjA1NzJlOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JhOWY0ZGI3LTAwZGYtNGQwYS1h OGU4LWVmZGQyMDU3MmU5Zi9iYTlmNGRiNy0wMGRmLTRkMGEtYThlOC1lZmRkMjA1 NzJlOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBANKcIgDBADAUT8DBALHJngDBALQVqAwDQQCAAIw BwMFACYEe8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIwWMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAya //E89pf7+sgenK5pwEu8M/+C/h3EN2oRieO5LkDv8ffEk9j5mI/4Oive/51I+1aS +HHcQTAGbvpfBiNmXT9Ij7nkXfX5O8IGvBtjELQREqJTFez6Ldmuv+j4bhGgjfNB UkFqDufrdk6ySdRvkjSH8E4y0QexlC0z9ayY4nNN9y9ZfMK21jj5p32Vo3GMy20u mmdV4SeErwwPkNfUUntpBhx1bOm04O29zQ9omdQR4eYCqgmwH3ktqfSCkXrEa50e mI4YD6cpRCr9BuoerXKr7QQzhqgVi8n+fRf6bqyJJ9HABc8EOAPLgB4j6MFmfsBp ZnkWJirfEkRN/p9pCo4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:10:00 2025 by rpki-client