$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer File: 0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer (raw, json) Hash identifier: Mqt7UJpzFw+O0rZ74VwA/U3aO0m8NtZR3wvJmG5HSSo= Subject key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A34788131A3D991666E230180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 968 AS: 982 AS: 34553 IP: 45.59.140.0/22 IP: 2602:809:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:81:31:a3:d9:91:66:6e:23:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:89:33:15:16:1e:27:60:43:08:26:3a:b5:80: 21:da:bb:80:4f:11:f7:1c:77:b8:ee:c0:6e:8f:10: 51:d7:a3:3a:7d:3b:7c:77:b1:91:64:4c:6a:6e:98: 84:c8:7c:bb:d3:b8:c2:e9:33:9b:cb:98:b7:dd:a6: be:c4:b6:fd:03:7e:34:ee:e7:9a:ad:89:93:1a:41: 9f:67:b8:90:6a:c5:59:b1:80:b1:50:be:0a:d3:09: 1b:68:2f:1f:01:44:55:f7:5d:de:4c:44:7a:ef:40: 3f:7e:22:0c:41:35:2d:da:f1:5b:7b:0a:89:b8:13: 0e:33:c3:8a:25:5b:1d:e1:d9:c8:30:b0:08:4f:a6: c9:9d:41:29:f4:f2:5a:4e:0f:17:e9:88:55:88:74: 8f:30:2d:59:1e:aa:98:b4:9a:56:28:41:f4:b6:8f: cc:12:e0:95:1e:53:30:c5:63:26:03:29:0f:c6:44: be:69:4e:0c:3e:50:79:13:a0:a5:03:f0:da:5c:48: 5a:a4:d3:9c:8c:bc:32:ab:98:ec:40:c5:34:e6:79: d8:18:c7:64:38:4d:06:74:34:44:49:4d:2d:c6:ea: 4d:f1:61:20:fe:cd:00:b1:8c:c9:79:73:55:ee:d4: b2:c0:78:63:0f:07:f2:aa:85:85:3e:5e:b9:c7:5e: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 45.59.140.0/22 IPv6: 2602:809:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 968 982 34553 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:65:2f:fb:71:8e:58:d3:2b:0e:5f:ff:28:0c:15:e3:d3:62: 5c:84:d3:64:19:27:83:66:d1:41:79:cb:8f:13:30:0e:52:69: bc:3e:eb:bc:c3:3c:61:b5:43:34:7f:d0:61:ff:d4:f6:cb:89: cc:fa:78:4c:c8:83:2b:57:a6:7a:23:95:87:76:c6:0e:a9:5b: ab:a5:c2:58:b4:dd:be:a9:d9:d6:10:b7:dd:70:7e:5c:34:89: 46:69:6b:f0:e4:b1:80:fe:54:e4:9f:67:6f:0e:1f:7e:7d:c9: e3:c2:13:56:b2:75:3d:1b:96:bd:6a:bd:27:0c:6d:cc:ec:23: 64:16:a2:a1:f3:5a:49:e6:77:ac:42:4c:9d:dd:60:f8:b6:53: 21:fe:53:6b:b6:f5:9b:f3:4d:58:44:a2:d7:e6:ee:da:53:94: 18:4d:1c:a6:f2:ca:0a:7d:ad:0b:ae:6e:e9:e7:f5:39:a1:39: 82:3b:00:4a:82:c2:4a:ae:66:7f:d6:10:eb:ec:88:3b:2e:fc: 20:6a:7b:0e:68:a3:61:b5:1a:b1:b9:12:7d:a9:bf:55:39:c6: ef:3d:58:28:61:7d:f3:84:67:d4:89:e7:a1:23:5c:5b:98:01: b2:47:5a:71:8f:c9:0b:0b:f0:2f:80:3a:d5:e5:20:c7:b6:1c: 9d:c0:fd:8d -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEo0eIExo9mRZm4jAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk MGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFlOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IkzFRYeJ2BDCCY6tYAh2ruATxH3HHe47sBu jxBR16M6fTt8d7GRZExqbpiEyHy707jC6TOby5i33aa+xLb9A3407uearYmTGkGf Z7iQasVZsYCxUL4K0wkbaC8fAURV913eTER670A/fiIMQTUt2vFbewqJuBMOM8OK JVsd4dnIMLAIT6bJnUEp9PJaTg8X6YhViHSPMC1ZHqqYtJpWKEH0to/MEuCVHlMw xWMmAykPxkS+aU4MPlB5E6ClA/DaXEhapNOcjLwyq5jsQMU05nnYGMdkOE0GdDRE SU0txupN8WEg/s0AsYzJeXNV7tSywHhjDwfyqoWFPl65x14p/wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFPFFUszmIk4pThUtXOS93QU6CLVyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8w Yzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzBjNzcyYjRiLTE1ZmItNGIzOC1i NTA1LWRmZTkxNWRhZTljZC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVk YWU5Y2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAItO4wwDgQCAAIwCAMGACYCCAkwMCIGCCsGAQUF BwEIAQH/BBMwEaAPMA0CAgPIAgID1gIDAIb5MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKtlL/txjljTKw5f /ygMFePTYlyE02QZJ4Nm0UF5y48TMA5Sabw+67zDPGG1QzR/0GH/1PbLicz6eEzI gytXpnojlYd2xg6pW6ulwli03b6p2dYQt91wflw0iUZpa/DksYD+VOSfZ28OH359 yePCE1aydT0blr1qvScMbczsI2QWoqHzWknmd6xCTJ3dYPi2UyH+U2u29ZvzTVhE otfm7tpTlBhNHKbyygp9rQuubunn9TmhOYI7AEqCwkquZn/WEOvsiDsu/CBqew5o o2G1GrG5En2pv1U5xu89WChhffOEZ9SJ56EjXFuYAbJHWnGPyQsL8C+AOtXlIMe2 HJ3A/Y0= -----END CERTIFICATE-----Generated at Sun Jun 29 09:36:56 2025 by rpki-client