$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c.cer File: c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c.cer (raw, json) Hash identifier: iVA+lWbrxwjgzHzJhgnw4RmE1CboA6R2Edfagyj4cos= Subject key identifier: 7C:B2:8F:8D:8E:77:88:56:FB:DB:97:55:96:DA:6A:01:A2:7B:BF:79 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A4ACDFA23B41DDEB14B5E7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Jun 2025 00:45:35 +0000 Certificate not after: Mon 27 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 40773 IP: 108.175.112.0/20 IP: 208.89.96.0/22 IP: 2620:4f:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:cd:fa:23:b4:1d:de:b1:4b:5e:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 24 00:45:35 2025 GMT Not After : Sep 27 00:45:35 2027 GMT Subject: CN=c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:ef:f4:ac:7c:07:03:9b:14:06:75:be:38: 33:1e:94:0a:30:ac:ab:50:22:cf:17:1e:8e:cd:56: 86:ba:36:7f:58:95:53:48:4b:c2:58:f6:95:2b:40: b4:a3:6a:d7:78:a1:f1:30:01:d8:62:28:6b:b9:b8: c4:8d:f2:41:15:15:d3:c1:10:73:49:38:37:32:ab: 10:95:b5:e4:73:01:f4:71:43:81:57:b4:39:31:70: 0c:23:52:57:1b:95:a8:71:65:0a:86:c8:50:6b:15: 79:b3:b6:55:79:ac:92:b8:b3:af:1f:89:12:b6:a5: 4f:bb:42:2d:2a:38:92:33:b1:b7:17:fd:ab:ba:fc: 0e:61:2b:6c:ed:60:5f:0c:d3:47:a6:b8:26:83:a4: 5d:ab:84:ae:8e:62:ad:48:02:73:f4:ac:d3:ac:b2: 58:f7:6d:b2:f8:0e:ec:10:17:44:3c:43:f9:30:30: 07:6b:aa:81:42:a7:ed:2a:af:31:c1:21:25:fd:1b: a2:96:e1:1a:b9:6c:f1:c3:a7:40:e3:7b:a5:a0:31: 2b:38:7a:21:b0:e3:89:f2:50:57:aa:cf:44:32:73: 89:d1:35:ea:20:fe:fb:31:27:8c:39:6f:20:89:23: 75:b0:e8:e0:60:ab:7e:7d:1a:a9:16:b1:2d:5f:56: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:8F:8D:8E:77:88:56:FB:DB:97:55:96:DA:6A:01:A2:7B:BF:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c/c8db0da9-1e1c-4fc0-bb71-39347b6a9e9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 108.175.112.0/20 208.89.96.0/22 IPv6: 2620:4f:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40773 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1d:39:eb:77:60:38:e8:b7:63:53:d1:5f:b5:83:b4:75:3b: 37:cf:af:88:f3:66:0c:55:8e:92:71:c6:8d:78:91:bf:fb:c3: fc:8b:e1:02:00:58:7a:00:6e:86:df:0a:e7:81:8e:c3:0a:67: 02:e7:70:81:05:ed:e8:42:0c:03:f1:33:96:ff:5a:c1:00:29: 6e:06:d7:08:af:4e:7d:d5:91:3b:af:15:db:2d:5c:64:b8:8c: cf:91:02:25:16:83:20:a0:32:88:27:2b:36:fa:b5:b5:bc:c4: 70:7a:43:50:9d:8b:db:04:56:8f:b6:00:f6:b5:6b:89:b1:59: 45:e9:c4:24:e1:7b:92:ec:85:72:8a:10:71:ad:5e:23:d6:ee: cc:18:11:a2:a3:ec:4f:1b:9c:50:3f:db:60:ef:f5:95:ae:77: e7:2a:5a:60:83:41:cd:48:6c:22:51:2c:fb:c5:ef:25:f0:33: 47:7b:5a:ea:86:1e:9a:8d:8d:d0:6b:70:c8:3f:6b:83:f0:68: 4d:2b:96:0b:34:36:e5:08:79:af:44:3b:8b:46:27:2a:1f:d7: 6e:d8:d9:1e:bd:ac:0b:34:5f:52:25:29:50:6e:3d:e1:26:b5: 19:b8:cb:a6:18:4d:8d:1c:62:e2:ca:b7:64:3b:1a:6d:93:08: 72:4f:3e:1b -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEpKzfojtB3esUtedwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYyNDAwNDUzNVoXDTI3MDkyNzAwNDUzNVowLzEtMCsGA1UEAxMk YzhkYjBkYTktMWUxYy00ZmMwLWJiNzEtMzkzNDdiNmE5ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/v9Kx8BwObFAZ1vjgzHpQKMKyrUCLPFx6O zVaGujZ/WJVTSEvCWPaVK0C0o2rXeKHxMAHYYihrubjEjfJBFRXTwRBzSTg3MqsQ lbXkcwH0cUOBV7Q5MXAMI1JXG5WocWUKhshQaxV5s7ZVeaySuLOvH4kStqVPu0It KjiSM7G3F/2ruvwOYSts7WBfDNNHprgmg6Rdq4SujmKtSAJz9KzTrLJY922y+A7s EBdEPEP5MDAHa6qBQqftKq8xwSEl/RuiluEauWzxw6dA43uloDErOHohsOOJ8lBX qs9EMnOJ0TXqIP77MSeMOW8giSN1sOjgYKt+fRqpFrEtX1YK9QIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFHyyj42Od4hW+9uXVZbaagGie795MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j OGRiMGRhOS0xZTFjLTRmYzAtYmI3MS0zOTM0N2I2YTllOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2M4ZGIwZGE5LTFlMWMtNGZjMC1i YjcxLTM5MzQ3YjZhOWU5Yy9jOGRiMGRhOS0xZTFjLTRmYzAtYmI3MS0zOTM0N2I2 YTllOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARsr3ADBALQWWAwDwQCAAIwCQMHACYgAE8gADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAn0UwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArR0563dgOOi3Y1PR X7WDtHU7N8+viPNmDFWOknHGjXiRv/vD/IvhAgBYegBuht8K54GOwwpnAudwgQXt 6EIMA/Ezlv9awQApbgbXCK9OfdWRO68V2y1cZLiMz5ECJRaDIKAyiCcrNvq1tbzE cHpDUJ2L2wRWj7YA9rVribFZRenEJOF7kuyFcooQca1eI9buzBgRoqPsTxucUD/b YO/1la535ypaYINBzUhsIlEs+8XvJfAzR3ta6oYemo2N0GtwyD9rg/BoTSuWCzQ2 5Qh5r0Q7i0YnKh/XbtjZHr2sCzRfUiUpUG494Sa1GbjLphhNjRxi4sq3ZDsabZMI ck8+Gw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:54 2025 by rpki-client