$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer File: 9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer (raw, json) Hash identifier: JUpbPbJr6Gzdh2TX2iA+mAvl4qdybhdFQYF83yIimdI= Subject key identifier: 68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B4DD029856B42DF71C5F5E490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 19:24:22 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 398375 IP: 130.51.56.0/22 IP: 169.197.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:d0:29:85:6b:42:df:71:c5:f5:e4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 24 19:24:22 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=9893f4f1-990f-4cc4-b5e1-b29cfb61eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:61:9a:e0:3f:ad:95:4a:80:f5:be:e4:09: 2d:c3:ac:36:dc:78:a8:4b:39:97:95:08:b7:f1:a3: 42:60:f2:f3:ba:29:68:2c:ac:19:c6:c5:8d:64:a9: 20:cb:36:57:55:5a:5a:b9:c4:1e:4c:88:58:d6:f7: b7:5b:18:a7:ff:ef:86:d6:b7:af:d8:82:e6:37:98: 00:96:80:53:4a:75:7b:7d:99:26:bb:20:c3:ed:98: 3e:7a:43:be:4d:df:c2:a3:56:7d:2f:21:c8:77:73: 80:ac:fd:53:ce:0a:62:1a:e5:ec:50:39:5c:d7:8b: ab:48:03:c5:62:6e:fd:a4:06:a2:27:c9:4d:87:96: a4:81:05:b1:bc:81:c0:30:2b:17:75:76:2e:f1:74: dc:93:de:dd:67:e3:0f:75:72:ae:5c:7d:7b:ce:dc: 70:c9:ef:1c:5e:d4:36:1c:82:2f:5a:71:e9:2f:c5: aa:38:03:ff:5c:2f:72:ff:f9:70:2b:ea:b2:f5:b8: 3a:e3:40:57:79:b4:1d:26:d3:d3:53:ed:8d:a8:38: 73:cf:5e:fd:3c:fc:48:49:1f:be:77:04:d7:d4:00: 22:52:f3:e7:6a:75:0f:56:b6:48:bf:7a:ff:10:89: b8:c7:e5:7d:5a:2b:11:39:09:1c:4f:a5:ba:d4:b7: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 130.51.56.0/22 169.197.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398375 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:77:87:48:a0:c9:ea:69:c3:6d:2f:49:3f:a9:0b:bc:6d:4c: f5:6a:5c:9b:25:de:41:ee:58:9a:7c:2d:da:2b:0e:0c:cf:9f: 63:12:e4:3d:72:b2:ae:8a:bc:23:af:28:23:09:e9:75:bc:2d: 52:f9:78:78:cb:53:9f:c0:bc:a5:27:7e:bd:c5:7f:1f:f7:92: 37:99:37:47:c1:57:7e:60:6b:ef:6b:7c:35:20:70:3b:fa:7f: e2:56:ce:97:0f:bc:01:16:39:34:d2:9a:10:04:c5:81:e2:e9: be:2a:af:95:af:42:fd:c9:b8:43:b4:38:ce:8c:fe:8c:c3:9b: a5:d1:25:03:3e:bf:0e:fc:12:cf:f8:a5:df:5f:9d:94:dc:5e: 8f:c0:ef:67:8e:cf:20:be:1f:7c:3c:91:e8:16:e6:9f:cb:b3: 14:4b:84:cb:76:99:1e:36:90:ff:b2:54:e4:6d:6d:d1:58:cb: b2:ad:7f:a7:10:be:ae:18:47:53:ac:4b:a8:d4:21:40:95:8f: e2:3c:92:a1:d0:54:e6:3a:f2:8d:1c:02:b4:3f:50:b2:28:e7: 3f:59:06:b1:11:ff:d0:62:4e:ee:f9:c9:6e:a1:32:1e:a2:be: 7f:44:dd:b3:a7:7a:b7:c9:13:fd:60:ab:15:06:09:a5:16:32: 06:13:ae:8d -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEtN0CmFa0LfccX15JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkyNDE5MjQyMloXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk OTg5M2Y0ZjEtOTkwZi00Y2M0LWI1ZTEtYjI5Y2ZiNjFlYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEFhmuA/rZVKgPW+5Aktw6w23HioSzmXlQi3 8aNCYPLzuiloLKwZxsWNZKkgyzZXVVpaucQeTIhY1ve3Wxin/++G1rev2ILmN5gA loBTSnV7fZkmuyDD7Zg+ekO+Td/Co1Z9LyHId3OArP1TzgpiGuXsUDlc14urSAPF Ym79pAaiJ8lNh5akgQWxvIHAMCsXdXYu8XTck97dZ+MPdXKuXH17ztxwye8cXtQ2 HIIvWnHpL8WqOAP/XC9y//lwK+qy9bg640BXebQdJtPTU+2NqDhzz179PPxISR++ dwTX1AAiUvPnanUPVrZIv3r/EIm4x+V9WisROQkcT6W61LcOCwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGhG6sVwRkh2FifLZOAFwWEtGx4qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 ODkzZjRmMS05OTBmLTRjYzQtYjVlMS1iMjljZmI2MWVhYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk4OTNmNGYxLTk5MGYtNGNjNC1i NWUxLWIyOWNmYjYxZWFiOS85ODkzZjRmMS05OTBmLTRjYzQtYjVlMS1iMjljZmI2 MWVhYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKCMzgDBAKpxbAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhQnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADl3h0igyeppw20vST+pC7xtTPVqXJsl3kHuWJp8 LdorDgzPn2MS5D1ysq6KvCOvKCMJ6XW8LVL5eHjLU5/AvKUnfr3Ffx/3kjeZN0fB V35ga+9rfDUgcDv6f+JWzpcPvAEWOTTSmhAExYHi6b4qr5WvQv3JuEO0OM6M/ozD m6XRJQM+vw78Es/4pd9fnZTcXo/A72eOzyC+H3w8kegW5p/LsxRLhMt2mR42kP+y VORtbdFYy7Ktf6cQvq4YR1OsS6jUIUCVj+I8kqHQVOY68o0cArQ/ULIo5z9ZBrER /9BiTu75yW6hMh6ivn9E3bOnerfJE/1gqxUGCaUWMgYTro0= -----END CERTIFICATE-----Generated at Tue Oct 21 06:54:47 2025 by rpki-client