$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer File: 550c917f-e2be-44dc-8c27-87cd6064aaa9.cer (raw, json) Hash identifier: rmyQYpL9dBcetNcNZy+CDmnnTtctXMfCT7WdWWxq9ic= Subject key identifier: DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B5C64EAF5E8A0172B4B196880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 00:45:24 +0000 Certificate not after: Mon 03 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 198.14.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:64:ea:f5:e8:a0:17:2b:4b:19:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 30 00:45:24 2025 GMT Not After : Jan 3 01:45:24 2028 GMT Subject: CN=550c917f-e2be-44dc-8c27-87cd6064aaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:90:48:f5:77:8a:7c:f7:0a:71:ac:b1:8f: 6e:95:93:f9:1e:59:e5:45:93:27:a4:5c:88:12:f4: aa:85:86:d2:e7:df:04:28:9e:a4:b8:4a:2d:95:84: 97:87:b4:89:4e:4b:ab:4c:70:da:e8:ee:29:da:36: b2:a4:a6:08:0d:aa:b7:d9:34:f5:7a:dd:24:88:a3: 56:2d:ab:6e:f0:71:d8:ba:7c:34:e0:f2:e5:48:6b: 41:d2:b0:19:7e:dc:c4:a2:26:06:0f:56:2d:16:26: cd:11:79:0f:4b:9c:27:22:c7:e6:a2:8f:d5:e4:f2: 5d:65:62:e5:1a:16:0d:6f:0e:84:74:4e:9a:6a:a6: fd:25:67:0b:31:67:d7:76:03:ff:af:a8:2f:8c:88: 3e:b0:5d:9c:8a:26:fe:45:c2:d4:c0:aa:10:5b:63: a7:b2:84:81:1a:52:69:ab:2a:f0:fc:e7:ea:12:df: da:54:dc:9b:53:86:4e:4e:63:7c:60:ff:da:42:52: c7:3f:d2:0b:db:01:79:3c:a6:f7:56:6c:b7:2b:74: 2c:24:6f:4d:6a:19:aa:d4:3c:91:e7:6f:08:e7:97: 02:fa:95:ea:a9:eb:ca:3d:03:9d:65:f0:89:34:d1: 56:78:4a:31:1a:bd:7b:07:8f:03:92:b2:54:c3:bb: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 198.14.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3a:9a:e8:75:67:b8:38:44:40:e2:3e:09:58:4a:16:30:f8: e4:0a:38:1d:f9:a9:a1:7e:3d:6b:9e:6d:f3:8d:2e:19:8e:07: 93:4d:ce:84:78:73:d2:29:98:6d:f1:0d:46:0e:e2:31:86:52: e9:40:13:d4:8a:bc:24:47:b5:3f:a2:03:2b:74:8b:88:1d:2d: 5a:58:68:3d:f7:b8:57:0e:c8:5b:aa:ea:22:e6:23:27:19:a0: 26:ca:96:bb:03:6b:f8:57:6f:f2:41:27:e2:3b:b6:b8:c2:c4: aa:c9:56:73:d9:f1:9e:81:fc:7a:05:75:cf:b3:1f:40:c9:c9: ed:02:07:e8:95:23:a2:e8:22:0e:c3:e1:7d:95:95:5b:56:33: e5:8d:60:d6:2a:60:ea:47:23:c4:1d:74:f1:0e:df:e6:13:2f: 75:23:b1:79:02:ec:b8:86:66:55:97:ab:f6:69:7d:98:6e:00: 4f:99:11:84:b3:d8:36:e5:00:88:e5:b4:84:ee:00:98:d0:35: 9f:d8:0e:e3:3f:d4:30:1b:a1:af:03:35:a0:49:06:da:89:6b: 0e:f8:b9:5d:f3:ac:38:5b:e6:da:ef:ef:b2:c6:a1:dc:12:9d: 47:94:cb:42:2c:29:d1:bb:11:d6:9a:bc:de:d4:2a:76:5a:70: 27:3f:24:77 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtcZOr16KAXK0sZaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkzMDAwNDUyNFoXDTI4MDEwMzAxNDUyNFowLzEtMCsGA1UEAxMk NTUwYzkxN2YtZTJiZS00NGRjLThjMjctODdjZDYwNjRhYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEeQSPV3inz3CnGssY9ulZP5HlnlRZMnpFyI EvSqhYbS598EKJ6kuEotlYSXh7SJTkurTHDa6O4p2jaypKYIDaq32TT1et0kiKNW Latu8HHYunw04PLlSGtB0rAZftzEoiYGD1YtFibNEXkPS5wnIsfmoo/V5PJdZWLl GhYNbw6EdE6aaqb9JWcLMWfXdgP/r6gvjIg+sF2ciib+RcLUwKoQW2OnsoSBGlJp qyrw/OfqEt/aVNybU4ZOTmN8YP/aQlLHP9IL2wF5PKb3Vmy3K3QsJG9Nahmq1DyR 528I55cC+pXqqevKPQOdZfCJNNFWeEoxGr17B48DkrJUw7v2cwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNsU8AtflZnora8aDWlROJN/m3RMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 NTBjOTE3Zi1lMmJlLTQ0ZGMtOGMyNy04N2NkNjA2NGFhYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU1MGM5MTdmLWUyYmUtNDRkYy04 YzI3LTg3Y2Q2MDY0YWFhOS81NTBjOTE3Zi1lMmJlLTQ0ZGMtOGMyNy04N2NkNjA2 NGFhYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbGDoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANDqa6HVnuDhEQOI+CVhK FjD45Ao4HfmpoX49a55t840uGY4Hk03OhHhz0imYbfENRg7iMYZS6UAT1Iq8JEe1 P6IDK3SLiB0tWlhoPfe4Vw7IW6rqIuYjJxmgJsqWuwNr+Fdv8kEn4ju2uMLEqslW c9nxnoH8egV1z7MfQMnJ7QIH6JUjougiDsPhfZWVW1Yz5Y1g1ipg6kcjxB108Q7f 5hMvdSOxeQLsuIZmVZer9ml9mG4AT5kRhLPYNuUAiOW0hO4AmNA1n9gO4z/UMBuh rwM1oEkG2olrDvi5XfOsOFvm2u/vssah3BKdR5TLQiwp0bsR1pq83tQqdlpwJz8k dw== -----END CERTIFICATE-----Generated at Tue Oct 21 06:48:25 2025 by rpki-client