$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer File: 15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer (raw, json) Hash identifier: yk6YTPBdENtLT1Dcp0civ5fpqriR+WyPPYRAm4mJKzg= Subject key identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584AC00E9C3F959C22AD69D64460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 00:45:24 +0000 Certificate not after: Mon 08 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 23.143.136.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:0e:9c:3f:95:9c:22:ad:69:d6:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 5 00:45:24 2025 GMT Not After : Nov 8 01:45:24 2027 GMT Subject: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:9c:a9:58:7a:38:82:13:66:ed:53:bf:2f: 9a:4a:c3:06:b6:84:95:4a:ab:a9:8b:d9:d7:88:c7: c6:fc:76:01:07:71:af:38:02:23:12:65:60:70:47: 61:41:90:6a:aa:73:6c:4b:09:c7:b9:a7:73:9b:25: d7:f3:ee:e3:ea:e2:9c:82:a8:db:0b:00:7f:0b:d0: 4b:13:a6:25:95:3f:33:e5:21:44:2b:ee:5a:e7:ac: 1e:a9:a9:3b:f5:59:a3:c0:de:72:66:19:50:95:6a: d2:be:4f:2c:83:85:5f:38:8d:8c:32:9a:e2:db:8c: ec:45:2e:93:b0:c9:b0:f4:2f:91:4a:14:84:b1:a5: ff:df:7d:2d:1c:4c:3b:c2:ea:e4:eb:e1:ac:be:5a: 8c:32:0a:09:bb:2e:f8:58:31:2c:bc:ab:e4:c4:a5: 34:d7:20:9a:e8:71:8a:fa:43:61:22:4e:39:e9:5d: ce:f2:a3:bc:ec:12:61:6e:90:41:51:86:9d:4c:c0: 73:96:8e:a7:73:49:cc:b8:62:51:29:7c:a3:d3:b1: 00:a7:87:89:fe:a2:bf:7c:39:b7:10:dd:98:f5:7c: 8f:85:08:10:e3:d4:34:d0:69:75:62:4f:bd:0e:9f: e8:59:30:21:69:cf:59:d3:74:40:f5:ec:ae:90:05: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ab:83:17:62:4c:98:52:a1:d8:84:79:cd:94:a8:90:f9:fe: 41:b4:0b:6a:93:d9:ed:ea:0c:9a:e2:47:48:7f:1a:97:99:1a: a3:4d:3d:97:5d:7c:3c:f8:6b:80:32:e7:bc:eb:7e:2a:72:11: 66:d8:fa:3f:e7:99:7d:04:ea:98:67:e5:31:44:6b:63:46:06: d7:09:64:aa:94:8f:f8:37:df:ea:bc:26:ee:02:de:4a:36:c0: 42:17:cd:e8:f6:0e:ef:ab:87:7f:29:6a:7f:44:80:df:15:84: 89:3c:64:ae:b3:ad:09:27:1f:f9:33:ec:c2:66:29:0a:3e:8e: fb:5d:91:a0:96:31:fa:14:2a:d2:97:8f:73:05:7a:4e:ec:7d: a1:93:27:7b:0f:33:99:1a:56:bd:18:cf:eb:89:be:bf:0e:db: 76:59:6a:4b:c8:26:4e:59:82:90:b3:01:4e:bd:3e:5a:82:b6: c8:a2:fb:53:0b:66:c6:45:a9:14:19:1b:8a:61:f9:08:e8:ef: 5f:4e:bb:63:b9:57:34:b2:38:72:c9:f0:f4:5b:2c:bc:ad:5e: f6:08:2c:6b:67:70:4d:f5:e6:82:67:c3:69:f5:2e:59:13:a2: d3:5e:f5:83:44:a2:32:3f:7d:e9:b7:bb:77:65:03:0d:97:a5: 71:57:f8:3b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErADpw/lZwirWnWRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgwNTAwNDUyNFoXDTI3MTEwODAxNDUyNFowLzEtMCsGA1UEAxMk MTUwNDZmNmQtYmQ5Mi00M2ZlLWFhNmItMWMwNDY1MzYxYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06cqVh6OIITZu1Tvy+aSsMGtoSVSqupi9nX iMfG/HYBB3GvOAIjEmVgcEdhQZBqqnNsSwnHuadzmyXX8+7j6uKcgqjbCwB/C9BL E6YllT8z5SFEK+5a56weqak79VmjwN5yZhlQlWrSvk8sg4VfOI2MMpri24zsRS6T sMmw9C+RShSEsaX/330tHEw7wurk6+GsvlqMMgoJuy74WDEsvKvkxKU01yCa6HGK +kNhIk456V3O8qO87BJhbpBBUYadTMBzlo6nc0nMuGJRKXyj07EAp4eJ/qK/fDm3 EN2Y9XyPhQgQ49Q00Gl1Yk+9Dp/oWTAhac9Z03RA9eyukAUe5wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFL9OlYCABoEh8qG0poBI13Vb55U4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x NTA0NmY2ZC1iZDkyLTQzZmUtYWE2Yi0xYzA0NjUzNjFhMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE1MDQ2ZjZkLWJkOTItNDNmZS1h YTZiLTFjMDQ2NTM2MWExYi8xNTA0NmY2ZC1iZDkyLTQzZmUtYWE2Yi0xYzA0NjUz NjFhMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXj4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVKuDF2JMmFKh2IR5zZSo kPn+QbQLapPZ7eoMmuJHSH8al5kao009l118PPhrgDLnvOt+KnIRZtj6P+eZfQTq mGflMURrY0YG1wlkqpSP+Dff6rwm7gLeSjbAQhfN6PYO76uHfylqf0SA3xWEiTxk rrOtCScf+TPswmYpCj6O+12RoJYx+hQq0pePcwV6Tux9oZMnew8zmRpWvRjP64m+ vw7bdllqS8gmTlmCkLMBTr0+WoK2yKL7UwtmxkWpFBkbimH5COjvX067Y7lXNLI4 csnw9FssvK1e9ggsa2dwTfXmgmfDafUuWROi0171g0SiMj996be7d2UDDZelcVf4 Ow== -----END CERTIFICATE-----Generated at Sat Aug 23 14:15:21 2025 by rpki-client