$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14.cer File: 7dda8dca-7b6b-4daf-b2f4-528a74748b14.cer (raw, json) Hash identifier: 0JFO9NMnJYG1uiXugDMO/BClysF53U65U9rfF1yXpFA= Subject key identifier: 86:F2:48:AA:33:31:A3:0A:CB:12:1C:83:F3:D9:8B:5F:E6:A0:6F:EE Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584AFAAEFD5DEC2BAD937F053100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/7dda8dca-7b6b-4daf-b2f4-528a74748b14.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Aug 2025 00:45:26 +0000 Certificate not after: Mon 29 Nov 2027 01:45:26 +0000 Subordinate resources: AS: 994 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:ae:fd:5d:ec:2b:ad:93:7f:05:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 26 00:45:26 2025 GMT Not After : Nov 29 01:45:26 2027 GMT Subject: CN=7dda8dca-7b6b-4daf-b2f4-528a74748b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:02:ed:e2:c0:ce:f1:1f:0f:39:a6:21:03: 79:08:91:d0:b6:1a:96:eb:ec:d8:58:8c:29:15:de: c9:07:d4:ee:4c:bb:eb:c2:73:81:c0:7a:a8:27:70: 53:2f:16:79:ff:6e:93:ef:d6:0b:7e:72:2b:f1:77: b4:6b:17:c4:bb:90:b7:ed:8b:74:63:82:3d:d4:ea: 42:58:04:7b:29:15:85:31:de:83:52:35:d7:b7:ea: 2f:d7:a3:89:d4:d4:51:d1:df:0f:49:6f:41:1f:4a: c8:fd:01:4b:81:79:f9:be:7b:0d:da:e6:a3:ed:77: ef:e4:a3:17:82:43:65:3e:02:71:78:ba:16:69:ba: e2:ad:bc:4d:26:c9:69:4c:7f:66:81:50:df:ee:a9: 5d:d5:04:0b:83:4e:6c:3c:0c:35:32:67:db:1c:50: 25:99:cc:1a:2c:34:dc:2a:6c:32:0e:bf:46:28:5d: b6:03:e0:b5:64:c1:2b:3d:6b:5a:85:9a:d5:42:9f: ac:de:0f:a5:ce:17:66:1f:7c:31:00:79:b3:6b:f1: df:eb:ee:b2:eb:68:f0:47:ac:3b:5f:b2:5c:00:f4: 3a:2f:e2:d7:42:6b:1e:21:4e:ac:9a:06:92:be:a7: a6:92:63:fc:d7:50:c0:19:63:4e:0c:e8:78:c9:0b: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:48:AA:33:31:A3:0A:CB:12:1C:83:F3:D9:8B:5F:E6:A0:6F:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/7dda8dca-7b6b-4daf-b2f4-528a74748b14.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 994 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:03:eb:05:b2:39:89:8b:cc:f1:66:d8:81:7b:80:54:07:91: d5:0d:df:9d:d6:47:b0:d2:66:4e:b4:41:de:03:04:22:48:ea: 46:05:36:d7:ee:fe:e2:e6:23:eb:8e:bf:cb:ce:8a:90:3a:79: c8:69:c9:79:7c:69:09:54:45:b4:e8:e9:4b:3a:fe:6b:65:e0: 89:e4:a7:70:4a:13:f4:21:0e:80:dd:1d:19:e3:49:ef:4b:5d: 10:07:16:56:44:d6:b5:9c:90:b3:0d:5a:b5:34:51:fe:fe:c2: ec:9a:12:0f:f2:12:ec:00:f7:4c:2f:1d:00:71:00:d2:a7:59: d5:e3:99:e7:9c:40:ef:00:5d:fd:f3:ec:5b:38:0b:84:66:be: d1:26:a8:01:0f:28:83:71:45:e9:2b:89:f3:a9:96:aa:ae:5b: 1b:f4:c7:14:82:a7:c4:ce:92:34:41:1c:d4:36:be:c7:7c:29: d8:b2:9e:3e:b7:db:48:c5:04:73:5a:26:3f:5a:8f:8a:c0:47: 47:21:c2:ba:2a:b3:46:cf:30:95:3f:62:5a:c3:27:3b:d6:a8: 49:bd:b3:85:6c:95:56:b0:27:ef:19:8b:dc:08:f6:24:84:3a: fb:05:72:77:fd:2e:2e:07:9f:5a:88:62:c3:71:70:29:5e:bd: 10:bb:e8:16 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEr6rv1d7Cutk38FMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgyNjAwNDUyNloXDTI3MTEyOTAxNDUyNlowLzEtMCsGA1UEAxMk N2RkYThkY2EtN2I2Yi00ZGFmLWIyZjQtNTI4YTc0NzQ4YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8cC7eLAzvEfDzmmIQN5CJHQthqW6+zYWIwp Fd7JB9TuTLvrwnOBwHqoJ3BTLxZ5/26T79YLfnIr8Xe0axfEu5C37Yt0Y4I91OpC WAR7KRWFMd6DUjXXt+ov16OJ1NRR0d8PSW9BH0rI/QFLgXn5vnsN2uaj7Xfv5KMX gkNlPgJxeLoWabrirbxNJslpTH9mgVDf7qld1QQLg05sPAw1MmfbHFAlmcwaLDTc KmwyDr9GKF22A+C1ZMErPWtahZrVQp+s3g+lzhdmH3wxAHmza/Hf6+6y62jwR6w7 X7JcAPQ6L+LXQmseIU6smgaSvqemkmP811DAGWNODOh4yQs0qQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFIbySKozMaMKyxIcg/PZi1/moG/uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 ZGRhOGRjYS03YjZiLTRkYWYtYjJmNC01MjhhNzQ3NDhiMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdkZGE4ZGNhLTdiNmItNGRhZi1i MmY0LTUyOGE3NDc0OGIxNC83ZGRhOGRjYS03YjZiLTRkYWYtYjJmNC01MjhhNzQ3 NDhiMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICA+IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfwPrBbI5iYvM8WbYgXuAVAeR1Q3f ndZHsNJmTrRB3gMEIkjqRgU21+7+4uYj646/y86KkDp5yGnJeXxpCVRFtOjpSzr+ a2XgieSncEoT9CEOgN0dGeNJ70tdEAcWVkTWtZyQsw1atTRR/v7C7JoSD/IS7AD3 TC8dAHEA0qdZ1eOZ55xA7wBd/fPsWzgLhGa+0SaoAQ8og3FF6SuJ86mWqq5bG/TH FIKnxM6SNEEc1Da+x3wp2LKePrfbSMUEc1omP1qPisBHRyHCuiqzRs8wlT9iWsMn O9aoSb2zhWyVVrAn7xmL3Aj2JIQ6+wVyd/0uLgefWohiw3FwKV69ELvoFg== -----END CERTIFICATE-----Generated at Tue Oct 21 06:54:37 2025 by rpki-client