$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629.cer File: 0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629.cer (raw, json) Hash identifier: tShGpyBNxK15jBVE6Rv3TSpBpHQOp0fhFxtuDXVhhSw= Subject key identifier: 40:11:2C:19:84:99:9F:A0:44:DD:F7:00:C0:59:3D:D2:87:E4:A9:07 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B678FA77AD5BDA0182A65BDE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Oct 2025 00:45:24 +0000 Certificate not after: Fri 07 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 397760 IP: 134.195.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:8f:a7:7a:d5:bd:a0:18:2a:65:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 4 00:45:24 2025 GMT Not After : Jan 7 01:45:24 2028 GMT Subject: CN=0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:6e:8d:42:f4:0c:28:0c:c0:f7:85:a9:9e: 1e:b2:8c:3e:fc:a6:7f:03:25:f5:8f:66:0d:3f:e9: 11:10:9e:a0:cf:11:36:ca:11:69:3a:1e:c9:53:2d: 5a:bd:31:80:6a:43:ea:5b:51:20:5d:df:46:15:87: f4:22:07:b8:01:cd:87:d6:7c:2c:20:77:42:27:f6: 80:fe:ab:07:11:98:31:87:7d:9a:83:14:55:68:59: 65:77:be:05:38:64:a4:87:51:8d:77:60:81:c5:8d: 31:b3:df:a1:ef:a0:0d:18:e8:2d:50:8b:55:60:a9: d6:c3:3a:06:a2:72:b1:73:8f:2a:9f:9b:23:78:79: 6d:f0:cc:67:f2:ec:3a:b0:e3:69:83:dc:9e:cc:5b: 01:55:0b:9d:00:64:b5:77:ef:5f:2f:4a:35:eb:df: 5f:aa:eb:47:54:92:be:c0:30:f8:2b:7d:29:e5:ba: dc:be:33:f0:37:f6:aa:cc:22:cb:31:7f:6c:8f:8a: 84:85:ef:60:d6:8a:cc:eb:41:86:1c:b1:2b:3a:8f: 02:38:fa:fa:65:49:8c:6e:d7:6b:c9:81:c3:89:8c: d0:40:28:9b:27:cb:fb:20:f5:6b:4c:db:90:f5:e0: e1:0a:61:cc:db:18:f6:dd:01:ec:b1:d4:66:c3:86: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:11:2C:19:84:99:9F:A0:44:DD:F7:00:C0:59:3D:D2:87:E4:A9:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629/0dc6ef4c-3cba-4d9e-ab88-a5f7ff439629.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 134.195.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cf:b3:7d:54:da:8e:75:6b:13:b1:b7:52:5c:6e:3d:33:2b: d8:c5:f3:3a:51:c7:18:6e:cb:b3:45:60:46:8d:6d:c3:bf:ea: d9:3d:95:f8:17:52:96:d3:94:f7:6e:6c:c7:9e:f6:73:e3:47: 3f:14:84:db:74:7b:c8:01:d0:d3:0e:ac:04:8b:83:0a:64:8c: 2b:47:01:8c:c5:00:6b:7c:a8:63:bf:62:f9:28:95:84:f8:b9: 3d:2f:a8:e2:ea:d1:e8:53:f3:68:f1:47:22:f9:02:ef:7f:41: 34:c5:75:a8:ac:30:fa:bb:76:6f:67:ea:30:93:ef:8b:d4:a6: 4a:01:de:75:93:f1:e6:4d:b9:3d:76:a8:83:39:92:1d:5b:23: ac:62:87:d0:a5:d0:7c:9d:aa:26:d9:ff:b1:ca:ec:2e:b0:b2: f5:f3:ac:20:e5:cb:94:ee:5a:78:89:d0:dd:2b:81:98:ca:ad: 6f:35:50:94:ae:0b:8c:07:9f:4b:17:57:16:2f:7d:b2:3e:5d: 47:8b:34:5d:0e:23:00:20:31:02:0d:78:01:43:9f:93:b6:41: ea:c2:e2:aa:a1:d9:a7:1d:3c:96:49:59:97:85:bb:5c:b6:bf: a5:e8:75:04:46:f0:e6:8a:ee:69:80:ed:2f:14:7d:7a:52:d2: 65:f3:1a:bd -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtnj6d61b2gGCplveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAwNDAwNDUyNFoXDTI4MDEwNzAxNDUyNFowLzEtMCsGA1UEAxMk MGRjNmVmNGMtM2NiYS00ZDllLWFiODgtYTVmN2ZmNDM5NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhujUL0DCgMwPeFqZ4esow+/KZ/AyX1j2YN P+kREJ6gzxE2yhFpOh7JUy1avTGAakPqW1EgXd9GFYf0Ige4Ac2H1nwsIHdCJ/aA /qsHEZgxh32agxRVaFlld74FOGSkh1GNd2CBxY0xs9+h76ANGOgtUItVYKnWwzoG onKxc48qn5sjeHlt8Mxn8uw6sONpg9yezFsBVQudAGS1d+9fL0o1699fqutHVJK+ wDD4K30p5brcvjPwN/aqzCLLMX9sj4qEhe9g1orM60GGHLErOo8COPr6ZUmMbtdr yYHDiYzQQCibJ8v7IPVrTNuQ9eDhCmHM2xj23QHssdRmw4bogwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEARLBmEmZ+gRN33AMBZPdKH5KkHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8w ZGM2ZWY0Yy0zY2JhLTRkOWUtYWI4OC1hNWY3ZmY0Mzk2MjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzBkYzZlZjRjLTNjYmEtNGQ5ZS1h Yjg4LWE1ZjdmZjQzOTYyOS8wZGM2ZWY0Yy0zY2JhLTRkOWUtYWI4OC1hNWY3ZmY0 Mzk2MjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKGw+gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhHAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADvPs31U2o51axOxt1Jcbj0zK9jF8zpRxxhuy7NFYEaNbcO/ 6tk9lfgXUpbTlPdubMee9nPjRz8UhNt0e8gB0NMOrASLgwpkjCtHAYzFAGt8qGO/ YvkolYT4uT0vqOLq0ehT82jxRyL5Au9/QTTFdaisMPq7dm9n6jCT74vUpkoB3nWT 8eZNuT12qIM5kh1bI6xih9Cl0HydqibZ/7HK7C6wsvXzrCDly5TuWniJ0N0rgZjK rW81UJSuC4wHn0sXVxYvfbI+XUeLNF0OIwAgMQINeAFDn5O2QerC4qqh2acdPJZJ WZeFu1y2v6XodQRG8OaK7mmA7S8UfXpS0mXzGr0= -----END CERTIFICATE-----Generated at Tue Oct 21 06:47:15 2025 by rpki-client