$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer File: abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer (raw, json) Hash identifier: qmQ9ztpG5LSfksK1TAnzbpdmSKwx2LjFz9hLjpF0RpQ= Subject key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B961112D03578F369DAA1C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 16:33:21 +0000 Certificate not after: Sat 14 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 40755 IP: 64.49.96.0/20 IP: 67.14.176.0/20 IP: 144.89.80.0/20 IP: 172.98.4.0/24 IP: 174.136.252.0/24 IP: 2606:3040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:11:12:d0:35:78:f3:69:da:a1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 20 16:33:21 2025 GMT Not After : Aug 14 00:45:34 2027 GMT Subject: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:97:a3:22:34:08:f7:a1:86:f2:e2:56:c2: 48:e6:4e:29:a6:42:e3:5b:ac:27:f9:74:08:df:95: 61:1f:4d:2b:00:e0:29:83:1a:c8:bd:9e:8b:a9:2b: 0b:bf:40:72:4b:61:f7:52:38:55:63:1a:2b:14:e9: 6f:af:36:8c:7a:58:0e:76:ed:76:07:81:33:a0:4f: 2c:c4:2c:2e:3e:af:10:c9:30:66:78:69:d8:f7:78: 19:53:bb:98:ae:39:11:5f:c4:ec:bb:e6:ac:34:c4: ce:09:aa:6a:4c:e9:69:9d:b3:be:5b:46:99:e3:30: 16:79:e5:7b:0d:5c:8d:19:ec:87:31:68:a1:e0:44: 0e:f1:07:df:4b:e0:03:f0:27:b4:51:0c:00:3f:ba: 02:ee:76:68:52:d7:ee:1e:03:c9:da:6d:ef:2e:a1: ce:ae:a9:29:49:24:eb:67:fa:1b:98:e0:42:75:7b: 47:89:83:6b:d6:7d:35:5a:cd:96:82:ba:6e:90:e9: 39:b9:46:54:82:16:6a:b9:03:c3:56:54:9d:6f:cf: 87:b6:5b:2a:be:5e:c3:bc:89:a1:c5:58:94:98:5d: b2:d6:b7:0e:7f:cb:4e:16:5f:6e:c5:48:b6:a3:34: 1f:82:e5:b5:00:c8:ef:16:5c:db:81:78:83:04:8b: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.49.96.0/20 67.14.176.0/20 144.89.80.0/20 172.98.4.0/24 174.136.252.0/24 IPv6: 2606:3040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40755 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0f:0c:cd:25:5a:80:df:be:aa:f7:00:ad:52:8c:7b:ad:14: bf:fc:25:de:e0:09:48:b6:87:4e:6d:57:69:27:d1:83:56:09: a7:ae:5a:e7:67:b9:11:e8:7d:7c:bf:52:65:df:6c:4a:71:4e: 60:13:4c:47:cd:8e:66:f6:29:57:ff:ef:8c:fb:03:a8:79:d2: 8c:11:9e:3c:c2:c9:cb:c4:b4:47:bf:db:67:da:0c:0f:e5:42: 5a:2d:65:9d:32:61:32:e3:90:93:56:4a:0a:f5:89:75:e1:52: 25:38:2f:84:5e:f0:21:8f:30:70:96:4a:61:ce:dc:30:2e:44: a9:ab:49:3d:df:d6:10:c1:1d:28:17:c1:d4:8c:3f:04:cc:02: 92:0d:0b:80:8c:b6:e1:4b:45:aa:72:06:f5:a7:b3:95:7f:1a: fe:cf:07:2d:ee:cb:cb:44:7b:34:2c:c3:ce:96:e0:d0:36:d3: 8d:37:be:1f:28:5e:fa:8b:1c:fd:2f:f3:5d:14:4e:71:f1:37: 56:b7:d6:28:9b:20:09:92:bf:52:c8:23:7a:b1:70:0c:c3:99: 1a:57:2b:96:dc:05:7f:5c:2d:3a:d7:23:0d:e1:53:95:61:af: 80:1b:76:eb:af:2c:75:00:4d:24:f8:2b:98:2a:08:f9:f1:89: ad:ee:1f:4b -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEuWERLQNXjzadqhyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAyMDE2MzMyMVoXDTI3MDgxNDAwNDUzNFowLzEtMCsGA1UEAxMk YWJkY2MyZTItYzk5YS00YmM1LThjMTAtZjc4YzQyNzUwNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp6XoyI0CPehhvLiVsJI5k4ppkLjW6wn+XQI 35VhH00rAOApgxrIvZ6LqSsLv0ByS2H3UjhVYxorFOlvrzaMelgOdu12B4EzoE8s xCwuPq8QyTBmeGnY93gZU7uYrjkRX8Tsu+asNMTOCapqTOlpnbO+W0aZ4zAWeeV7 DVyNGeyHMWih4EQO8QffS+AD8Ce0UQwAP7oC7nZoUtfuHgPJ2m3vLqHOrqkpSSTr Z/obmOBCdXtHiYNr1n01Ws2WgrpukOk5uUZUghZquQPDVlSdb8+Htlsqvl7DvImh xViUmF2y1rcOf8tOFl9uxUi2ozQfguW1AMjvFlzbgXiDBIveqwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFLdJWyXCw06ED+w+n37kuFrEANZ6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h YmRjYzJlMi1jOTlhLTRiYzUtOGMxMC1mNzhjNDI3NTA1MGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FiZGNjMmUyLWM5OWEtNGJjNS04 YzEwLWY3OGM0Mjc1MDUwYS9hYmRjYzJlMi1jOTlhLTRiYzUtOGMxMC1mNzhjNDI3 NTA1MGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARAMWADBARDDrADBASQWVADBACsYgQDBACuiPww DQQCAAIwBwMFACYGMEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ8zMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAIcPDM0lWoDfvqr3AK1SjHutFL/8Jd7gCUi2h05tV2kn0YNWCaeuWudnuRHo fXy/UmXfbEpxTmATTEfNjmb2KVf/74z7A6h50owRnjzCycvEtEe/22faDA/lQlot ZZ0yYTLjkJNWSgr1iXXhUiU4L4Re8CGPMHCWSmHO3DAuRKmrST3f1hDBHSgXwdSM PwTMApINC4CMtuFLRapyBvWns5V/Gv7PBy3uy8tEezQsw86W4NA20403vh8oXvqL HP0v810UTnHxN1a31iibIAmSv1LII3qxcAzDmRpXK5bcBX9cLTrXIw3hU5Vhr4Ab duuvLHUATST4K5gqCPnxia3uH0s= -----END CERTIFICATE-----Generated at Tue Oct 21 06:48:21 2025 by rpki-client