$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer File: f8424ff1-5313-4a68-a60f-9d8217567420.cer (raw, json) Hash identifier: 3RU1E3bp4rdR+iQpwqdOh3MFekf1ea96ADz/fGvf9mA= Subject key identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858493ECC4927D422A0429F810360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Mar 2025 00:45:33 +0000 Certificate not after: Wed 23 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 397731 IP: 66.245.172.0/22 IP: 104.225.132.0/23 IP: 104.238.228.0/24 IP: 104.238.234.0/24 IP: 158.120.255.0/24 IP: 165.140.236.0/22 IP: 192.206.41.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:cc:49:27:d4:22:a0:42:9f:81:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 20 00:45:33 2025 GMT Not After : Jun 23 00:45:33 2027 GMT Subject: CN=f8424ff1-5313-4a68-a60f-9d8217567420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:de:05:7f:9c:8e:f8:a5:18:45:e7:0f:ce: 42:81:fd:07:5c:20:71:5f:65:52:cd:5e:cb:c7:17: 1a:df:a8:79:1b:18:7b:85:46:91:40:23:eb:47:ec: 69:f2:df:e2:f6:ef:0a:fe:e1:f6:47:a5:8c:99:f3: 41:69:c0:ea:ff:91:ff:3b:07:c4:74:f4:ee:0b:9e: 56:2b:33:f5:32:11:de:7f:a7:77:4a:1b:d7:ac:2e: 24:40:f3:f2:1a:23:0e:fb:61:d0:c4:f2:ac:44:83: 9e:5a:61:1f:cc:60:b9:ef:29:5e:9d:c3:51:12:d2: 71:ea:5a:da:2e:06:9e:a0:ab:c4:c0:f1:58:75:5d: e5:48:c3:1a:40:bf:21:30:30:34:0c:7a:82:7b:b8: 94:dd:0d:1d:85:94:4a:51:ca:71:48:b8:a3:fc:83: 74:6c:fd:fe:55:ca:6d:26:d9:1d:67:7d:1d:70:87: d4:bf:b8:41:bf:71:10:02:fa:64:63:7b:aa:a9:59: 63:75:b7:14:b6:55:a2:53:fe:d5:b5:d0:6f:48:3e: 33:df:3e:b1:98:0d:a5:22:57:5f:49:7a:81:de:35: 6a:a5:cc:73:30:cb:0e:cf:b3:d4:d5:04:93:5f:c3: e0:d2:14:3c:21:03:87:01:49:d6:6d:df:ab:3d:ae: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.245.172.0/22 104.225.132.0/23 104.238.228.0/24 104.238.234.0/24 158.120.255.0/24 165.140.236.0/22 192.206.41.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397731 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:68:39:fd:93:cc:c6:d2:86:be:f8:fa:70:46:a9:ca:04:12: 57:61:44:e3:8e:3c:ab:78:f0:b4:ed:27:d9:48:e1:03:2b:e4: ca:c4:ab:61:f7:83:2a:92:cc:9b:38:dc:62:44:5b:82:03:71: c6:14:71:1e:fd:13:c7:9a:f8:1b:c2:05:fd:2f:59:1d:d4:b3: 0a:4b:08:5f:fb:d2:6a:1c:7d:e1:ef:a4:61:0a:66:a3:c3:7a: bf:e2:9f:81:05:72:e6:68:b7:b3:23:cd:f8:0e:d9:37:95:b5: 80:f6:95:7c:c0:a3:50:28:08:ae:a7:03:17:1a:47:99:4f:7b: c6:80:35:9a:29:f7:df:03:25:88:07:ee:52:6f:14:af:28:2c: 4c:0a:a9:55:ea:29:d9:89:dc:d3:f6:c3:16:4c:68:71:62:6a: 64:6b:6a:29:0e:00:5c:bf:3d:35:23:27:90:28:0d:f5:95:61: 71:6a:1d:95:85:0c:d4:66:dd:96:13:16:71:89:29:50:0e:33: 52:36:00:47:62:01:ae:61:94:a0:e7:2c:37:1b:8a:62:50:2b: 7d:ca:84:14:87:ed:dd:80:63:b0:f1:c9:a2:0a:5e:82:48:df: f3:c5:09:c9:46:82:cb:31:93:71:44:b7:fc:66:d4:98:c1:af: de:df:1a:b2 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEk+zEkn1CKgQp+BA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMyMDAwNDUzM1oXDTI3MDYyMzAwNDUzM1owLzEtMCsGA1UEAxMk Zjg0MjRmZjEtNTMxMy00YTY4LWE2MGYtOWQ4MjE3NTY3NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtveBX+cjvilGEXnD85Cgf0HXCBxX2VSzV7L xxca36h5Gxh7hUaRQCPrR+xp8t/i9u8K/uH2R6WMmfNBacDq/5H/OwfEdPTuC55W KzP1MhHef6d3ShvXrC4kQPPyGiMO+2HQxPKsRIOeWmEfzGC57ylencNREtJx6lra LgaeoKvEwPFYdV3lSMMaQL8hMDA0DHqCe7iU3Q0dhZRKUcpxSLij/IN0bP3+Vcpt JtkdZ30dcIfUv7hBv3EQAvpkY3uqqVljdbcUtlWiU/7VtdBvSD4z3z6xmA2lIldf SXqB3jVqpcxzMMsOz7PU1QSTX8Pg0hQ8IQOHAUnWbd+rPa5mLQIDAQABo4IEPzCC BDswHQYDVR0OBBYEFLah0YJy/bE2eRfbYnXOF3A3IF2qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m ODQyNGZmMS01MzEzLTRhNjgtYTYwZi05ZDgyMTc1Njc0MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y4NDI0ZmYxLTUzMTMtNGE2OC1h NjBmLTlkODIxNzU2NzQyMC9mODQyNGZmMS01MzEzLTRhNjgtYTYwZi05ZDgyMTc1 Njc0MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBAJC9awDBAFo4YQDBABo7uQDBABo7uoDBACeeP8D BAKljOwDBADAzikwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhGjMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJpoOf2TzMbShr74+nBGqcoEEldhROOOPKt48LTtJ9lI4QMr5MrEq2H3gyqSzJs4 3GJEW4IDccYUcR79E8ea+BvCBf0vWR3UswpLCF/70mocfeHvpGEKZqPDer/in4EF cuZot7MjzfgO2TeVtYD2lXzAo1AoCK6nAxcaR5lPe8aANZop998DJYgH7lJvFK8o LEwKqVXqKdmJ3NP2wxZMaHFiamRraikOAFy/PTUjJ5AoDfWVYXFqHZWFDNRm3ZYT FnGJKVAOM1I2AEdiAa5hlKDnLDcbimJQK33KhBSH7d2AY7DxyaIKXoJI3/PFCclG gssxk3FEt/xm1JjBr97fGrI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:31 2025 by rpki-client