$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer File: 429c38be-db51-4d91-a361-94ba3bfd9e9a.cer (raw, json) Hash identifier: Z4N0xS/Eab0Hf5tR2VJbW3gPLrQdfs+o1zZoj7sWVMU= Subject key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849DB229895EB854131FB697400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 394310 IP: 66.179.16.0/22 IP: 135.84.124.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:98:95:eb:85:41:31:fb:69:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:0c:fa:12:e3:8c:26:66:70:e4:56:ad:f2: f9:c5:90:c3:ae:e4:f2:ed:5e:6d:8f:41:e3:d0:17: f2:4a:6d:be:1c:49:54:cb:20:1b:fa:37:3f:6e:c1: c7:ca:7d:67:fc:82:51:41:d4:28:11:0f:a7:12:ab: aa:1f:b2:5e:23:e9:19:be:2b:1e:28:57:43:f5:68: 49:bd:03:7b:e3:4f:24:72:2a:e5:5a:10:a1:eb:ff: f4:70:49:92:80:43:ca:ac:6c:24:29:a3:9e:23:e3: ad:15:7f:12:68:22:a4:e7:ce:de:16:3d:3a:e1:ef: 6a:4a:11:87:03:c8:d8:bf:8b:f9:c1:30:dc:84:7c: 24:37:40:7a:6b:0a:91:c5:63:e7:0a:fb:95:19:bf: 5b:58:ed:35:b1:b4:51:98:db:a7:cd:01:34:e7:72: 24:75:83:b4:57:83:9f:00:b6:36:02:1e:88:eb:e7: dd:32:e8:89:72:00:5c:ea:d6:1a:b8:7c:90:c2:c4: 17:a7:63:cf:56:eb:1d:39:72:d7:52:6c:4e:19:8c: 2f:3c:33:ef:7e:14:a0:7d:d0:02:23:ad:a2:ad:02: 12:dc:fe:67:0c:a6:3a:7d:17:42:9b:e7:88:cb:3c: dc:1f:75:ca:3b:b5:32:97:67:95:40:eb:53:58:78: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.179.16.0/22 135.84.124.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394310 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0f:c7:37:17:ea:68:28:b9:41:dc:cd:2d:3d:a5:6d:af:b9: 53:06:64:c8:9a:49:ae:cd:8c:9b:52:1b:9a:cb:2e:25:07:c3: 1d:55:e6:db:6b:51:66:f0:ca:6d:d8:41:09:af:6e:f8:da:3c: f4:87:35:7e:7e:7a:85:48:80:d0:a1:ec:84:6d:60:3d:66:0e: b2:1f:92:b2:2d:f9:ed:8e:40:8f:ab:39:4a:b7:b5:50:e9:b6: 3f:83:c9:9c:93:2e:f6:ba:81:13:6f:13:25:c3:eb:88:73:90: de:7d:fb:56:13:01:d5:8b:b8:31:2d:d8:bc:8c:e4:65:d5:fa: f6:fb:da:95:04:9d:48:5c:de:db:c2:b6:69:b7:9b:c7:e2:ef: bd:60:cd:bd:b0:49:be:1c:ea:bd:7c:84:5d:4d:00:63:09:17: fe:b5:35:ff:63:27:25:88:3b:20:bd:b0:fa:d3:3a:3c:90:e2: f3:f8:28:94:28:73:f2:e4:05:c4:86:b5:cf:89:94:4f:c8:04: 0a:c1:85:84:34:17:b0:24:91:08:78:38:25:c0:0d:28:9f:2a: d4:e7:5a:6d:02:31:02:f2:7e:5c:f8:e4:f5:59:0b:34:e8:91: f1:37:96:10:10:30:9e:2a:13:cc:83:df:a0:36:7f:69:02:5f: 6f:6e:ca:23 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEnbIpiV64VBMftpdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk NDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjQM+hLjjCZmcORWrfL5xZDDruTy7V5tj0Hj 0BfySm2+HElUyyAb+jc/bsHHyn1n/IJRQdQoEQ+nEquqH7JeI+kZviseKFdD9WhJ vQN7408kcirlWhCh6//0cEmSgEPKrGwkKaOeI+OtFX8SaCKk587eFj064e9qShGH A8jYv4v5wTDchHwkN0B6awqRxWPnCvuVGb9bWO01sbRRmNunzQE053IkdYO0V4Of ALY2Ah6I6+fdMuiJcgBc6tYauHyQwsQXp2PPVusdOXLXUmxOGYwvPDPvfhSgfdAC I62irQIS3P5nDKY6fRdCm+eIyzzcH3XKO7Uyl2eVQOtTWHgvlwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDsK3gB1ciJo2v0nAPHIH4vKBZc8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQyOWMzOGJlLWRiNTEtNGQ5MS1h MzYxLTk0YmEzYmZkOWU5YS80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2Jm ZDllOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJCsxADBACHVHwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgRGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAYPxzcX6mgouUHczS09pW2vuVMGZMiaSa7NjJtS G5rLLiUHwx1V5ttrUWbwym3YQQmvbvjaPPSHNX5+eoVIgNCh7IRtYD1mDrIfkrIt +e2OQI+rOUq3tVDptj+DyZyTLva6gRNvEyXD64hzkN59+1YTAdWLuDEt2LyM5GXV +vb72pUEnUhc3tvCtmm3m8fi771gzb2wSb4c6r18hF1NAGMJF/61Nf9jJyWIOyC9 sPrTOjyQ4vP4KJQoc/LkBcSGtc+JlE/IBArBhYQ0F7AkkQh4OCXADSifKtTnWm0C MQLyflz45PVZCzTokfE3lhAQMJ4qE8yD36A2f2kCX29uyiM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:40 2025 by rpki-client