$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer File: 7276b2fa-548d-4970-8314-8d73945c34d8.cer (raw, json) Hash identifier: npxJq9lCquyKk37H/n5Wj/8TMdfqvdB3pHD95tkc4q0= Subject key identifier: B4:09:28:9B:1C:3F:37:08:7B:D0:1A:3A:7E:E6:DD:A7:A8:FC:4A:84 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B8BDA8A71965E0113B8BB6780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 00:45:23 +0000 Certificate not after: Thu 20 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 2605:c940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:da:8a:71:96:5e:01:13:b8:bb:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 17 00:45:23 2025 GMT Not After : Jan 20 01:45:23 2028 GMT Subject: CN=7276b2fa-548d-4970-8314-8d73945c34d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:6c:2c:9e:59:c5:d2:04:84:ac:d5:6f:c5: d3:61:61:51:b1:70:9d:b7:38:6f:a2:71:07:79:86: 7d:65:94:9d:f1:16:69:04:2d:bf:42:4e:0b:fc:5d: 92:94:d2:b1:0b:6f:58:dc:ff:94:27:1e:8b:96:4f: bd:92:fd:77:16:ef:47:51:09:36:51:a7:75:7f:bd: c1:80:e9:0d:08:e7:d2:d8:be:d2:1d:90:b3:04:c0: d1:8c:88:fb:7d:17:d3:cc:28:56:01:2c:f9:e9:ab: 74:b3:a3:80:60:05:18:18:9d:e5:fb:98:46:6d:50: f1:3d:4d:3c:ea:1e:c3:f9:f8:73:f0:d8:a7:0e:43: 76:8e:17:33:d7:e8:1a:e9:db:09:51:9d:95:fd:23: e6:37:9b:23:6f:e8:49:f4:db:b1:dc:72:31:14:c1: 1e:ce:b0:96:79:4e:8c:1d:a5:c9:d1:35:9f:ab:c6: 92:10:73:87:db:96:ae:fe:06:97:dd:49:bd:78:99: e0:05:de:f9:87:58:ad:23:8b:8f:ec:42:cc:81:e8: 39:18:98:ae:97:51:8b:0a:47:ab:74:f5:31:d8:cc: db:d2:78:8a:ef:bf:71:ad:9a:b2:c3:6c:ff:c6:e4: 8a:65:1d:03:c2:49:4b:94:18:a5:f5:db:e7:c0:4e: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:09:28:9B:1C:3F:37:08:7B:D0:1A:3A:7E:E6:DD:A7:A8:FC:4A:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv6: 2605:c940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a6:fa:f6:a7:7c:39:fe:53:82:74:20:8f:40:5e:82:43:29: 46:85:15:a5:f1:1e:25:dc:e1:3f:d1:f5:d3:19:93:e6:51:42: 48:ec:8a:a3:7d:b6:7a:b7:62:1d:aa:d1:2c:af:59:8d:9c:6e: 95:25:ae:1a:c7:fc:03:27:0d:d1:c2:4b:cd:9e:a8:47:06:a0: 33:5c:54:4f:0c:17:a1:f3:53:8a:e4:3a:87:84:ff:17:1a:3e: 90:de:77:98:1c:e7:a2:5f:bc:c1:70:c6:56:fb:38:27:92:b1: 1d:46:4b:46:07:5c:00:ad:f5:2e:bb:dd:2e:fd:c2:b0:be:38: 2e:a5:60:33:df:bd:5a:2e:fb:ca:4b:4a:c2:c3:9f:33:c3:e2: 52:fa:e9:70:af:9c:b8:66:ec:7e:b0:35:8f:b6:32:f8:e5:5c: 06:89:73:5f:40:f9:4d:3e:8f:3e:9c:87:7d:7a:c9:4d:8e:d8: 8c:b9:43:38:52:a8:94:74:f1:90:ee:3c:ef:f1:69:32:34:61: 97:ad:8d:03:1c:f0:49:66:fa:f9:81:80:59:36:5b:68:15:4f: 00:22:fd:3a:1a:63:17:fb:f5:2a:c0:4d:e0:99:ff:16:15:ff: 61:d1:dd:bf:71:4c:0d:55:03:15:88:ff:08:e5:37:19:38:a0: 2e:19:16:fd -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEuL2opxll4BE7i7Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAxNzAwNDUyM1oXDTI4MDEyMDAxNDUyM1owLzEtMCsGA1UEAxMk NzI3NmIyZmEtNTQ4ZC00OTcwLTgzMTQtOGQ3Mzk0NWMzNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ZsLJ5ZxdIEhKzVb8XTYWFRsXCdtzhvonEH eYZ9ZZSd8RZpBC2/Qk4L/F2SlNKxC29Y3P+UJx6Llk+9kv13Fu9HUQk2Uad1f73B gOkNCOfS2L7SHZCzBMDRjIj7fRfTzChWASz56at0s6OAYAUYGJ3l+5hGbVDxPU08 6h7D+fhz8NinDkN2jhcz1+ga6dsJUZ2V/SPmN5sjb+hJ9Nux3HIxFMEezrCWeU6M HaXJ0TWfq8aSEHOH25au/gaX3Um9eJngBd75h1itI4uP7ELMgeg5GJiul1GLCker dPUx2Mzb0niK779xrZqyw2z/xuSKZR0DwklLlBil9dvnwE4znwIDAQABo4IEADCC A/wwHQYDVR0OBBYEFLQJKJscPzcIe9AaOn7m3aeo/EqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 Mjc2YjJmYS01NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzcyNzZiMmZhLTU0OGQtNDk3MC04 MzE0LThkNzM5NDVjMzRkOC83Mjc2YjJmYS01NDhkLTQ5NzAtODMxNC04ZDczOTQ1 YzM0ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBclAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKSm+vanfDn+U4J0II9A XoJDKUaFFaXxHiXc4T/R9dMZk+ZRQkjsiqN9tnq3Yh2q0SyvWY2cbpUlrhrH/AMn DdHCS82eqEcGoDNcVE8MF6HzU4rkOoeE/xcaPpDed5gc56JfvMFwxlb7OCeSsR1G S0YHXACt9S673S79wrC+OC6lYDPfvVou+8pLSsLDnzPD4lL66XCvnLhm7H6wNY+2 MvjlXAaJc19A+U0+jz6ch316yU2O2Iy5QzhSqJR08ZDuPO/xaTI0YZetjQMc8Elm +vmBgFk2W2gVTwAi/ToaYxf79SrATeCZ/xYV/2HR3b9xTA1VAxWI/wjlNxk4oC4Z Fv0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:46 2025 by rpki-client