$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6.cer File: f44de4f5-78e4-42af-acca-8050ea182ff6.cer (raw, json) Hash identifier: 5gCmfzi1xDllRojwpqW2nMLtcH2iNh1u/RdLwkYLRRs= Subject key identifier: 09:24:28:80:A8:0E:AE:18:3F:45:BC:C7:3B:A7:F7:46:52:DD:E6:C3 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B0B6F1735859CAA033C90DC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/f44de4f5-78e4-42af-acca-8050ea182ff6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Sep 2025 00:45:25 +0000 Certificate not after: Sun 05 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 199.120.150.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:6f:17:35:85:9c:aa:03:3c:90:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 1 00:45:25 2025 GMT Not After : Dec 5 01:45:25 2027 GMT Subject: CN=f44de4f5-78e4-42af-acca-8050ea182ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:71:b7:a9:ee:de:76:19:58:6f:52:9c:ea: 47:4d:41:cb:23:3a:95:83:23:db:0a:73:14:cb:74: 47:0e:63:84:39:24:ed:58:23:1b:96:25:3d:a0:5d: 6b:59:c3:60:02:c8:99:f9:c4:cb:a5:fb:db:68:9c: f2:d1:e4:38:37:03:06:9e:6e:22:bb:1d:53:64:9e: 68:7a:d3:ec:58:c2:78:10:b1:c0:b3:90:70:bf:f4: b1:23:53:76:9a:03:d8:fc:eb:cd:fa:b4:66:b4:75: 5a:25:44:63:be:29:7a:5f:ec:0c:7c:9f:52:7f:3b: 3c:dd:6a:b7:78:fc:ba:cf:f7:6a:87:50:b7:46:10: 06:7f:4b:92:94:c0:46:fb:f4:14:cf:0b:25:46:dd: c6:05:28:ae:b0:72:34:4e:45:d1:5d:24:0a:62:e2: 4d:88:63:22:96:53:95:7e:97:f3:96:60:c4:e3:25: b0:60:25:42:0b:e8:97:2c:e7:23:d3:ba:f6:18:58: 17:e7:31:d6:37:48:7c:09:dc:1a:4e:ea:c7:60:77: f4:bd:77:4f:f2:8a:22:fb:2e:97:5e:36:38:62:ff: 41:3d:6f:61:bd:87:ef:e4:2d:80:c2:94:63:99:6c: 8e:54:15:7c:70:1e:c8:fc:74:eb:79:34:80:25:90: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:24:28:80:A8:0E:AE:18:3F:45:BC:C7:3B:A7:F7:46:52:DD:E6:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/f44de4f5-78e4-42af-acca-8050ea182ff6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 199.120.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1a:c6:2f:e3:7d:80:81:bb:5e:7c:68:4c:ff:1e:6c:24:d4: c0:22:db:a9:44:77:ad:c8:76:b6:57:ed:bf:52:d2:50:c3:14: fd:a4:1d:35:c5:76:94:6a:f2:1a:34:ac:61:6b:c3:88:21:c1: a8:9a:8c:e4:bc:4e:8c:00:b8:56:fe:f3:12:e9:40:6c:c5:46: ab:3e:56:0b:27:0c:80:98:5e:38:ea:4f:7d:04:0a:a3:27:40: 83:af:4b:f6:85:79:12:d7:ce:74:e3:aa:76:c2:08:be:8a:7d: 91:b2:d9:ca:e4:50:01:35:6d:5d:d7:71:ce:ef:24:91:90:da: a3:ef:1d:ef:e7:7b:fd:09:8b:2a:07:fb:6d:00:45:61:5d:22: ba:a5:e3:f5:f0:5c:fa:ff:33:ad:70:9d:7b:87:cb:a8:1a:6b: 48:d7:d6:c4:0c:2d:6c:a2:a6:af:a6:1b:72:5b:e3:0a:32:6f: 13:9e:77:be:cf:bf:ab:64:9f:b8:f4:5e:9a:1c:21:b9:c3:22: e9:39:e5:0f:65:b2:ef:46:55:c5:b3:0b:40:9f:b9:fc:56:ff: 4b:02:1d:47:18:9a:16:4e:89:d5:d0:75:07:23:77:23:2d:bb: 84:85:18:c8:94:cf:96:b4:a1:98:92:9c:d0:38:b6:17:d0:ad: 2e:a6:97:5a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsLbxc1hZyqAzyQ3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkwMTAwNDUyNVoXDTI3MTIwNTAxNDUyNVowLzEtMCsGA1UEAxMk ZjQ0ZGU0ZjUtNzhlNC00MmFmLWFjY2EtODA1MGVhMTgyZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt5xt6nu3nYZWG9SnOpHTUHLIzqVgyPbCnMU y3RHDmOEOSTtWCMbliU9oF1rWcNgAsiZ+cTLpfvbaJzy0eQ4NwMGnm4iux1TZJ5o etPsWMJ4ELHAs5Bwv/SxI1N2mgPY/OvN+rRmtHVaJURjvil6X+wMfJ9Sfzs83Wq3 ePy6z/dqh1C3RhAGf0uSlMBG+/QUzwslRt3GBSiusHI0TkXRXSQKYuJNiGMillOV fpfzlmDE4yWwYCVCC+iXLOcj07r2GFgX5zHWN0h8CdwaTurHYHf0vXdP8ooi+y6X XjY4Yv9BPW9hvYfv5C2AwpRjmWyOVBV8cB7I/HTreTSAJZCzEwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAkkKICoDq4YP0W8xzun90ZS3ebDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m NDRkZTRmNS03OGU0LTQyYWYtYWNjYS04MDUwZWExODJmZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y0NGRlNGY1LTc4ZTQtNDJhZi1h Y2NhLTgwNTBlYTE4MmZmNi9mNDRkZTRmNS03OGU0LTQyYWYtYWNjYS04MDUwZWEx ODJmZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHHeJYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFxrGL+N9gIG7XnxoTP8e bCTUwCLbqUR3rch2tlftv1LSUMMU/aQdNcV2lGryGjSsYWvDiCHBqJqM5LxOjAC4 Vv7zEulAbMVGqz5WCycMgJheOOpPfQQKoydAg69L9oV5EtfOdOOqdsIIvop9kbLZ yuRQATVtXddxzu8kkZDao+8d7+d7/QmLKgf7bQBFYV0iuqXj9fBc+v8zrXCde4fL qBprSNfWxAwtbKKmr6YbclvjCjJvE553vs+/q2SfuPRemhwhucMi6TnlD2Wy70ZV xbMLQJ+5/Fb/SwIdRxiaFk6J1dB1ByN3Iy27hIUYyJTPlrShmJKc0Di2F9CtLqaX Wg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:58 2025 by rpki-client