$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer File: c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer (raw, json) Hash identifier: CQwZIpMHoC4ZMB8eVqH9uqCJ2AHb2PsWrpPT2xORvwI= Subject key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B2A249C507078F5326E92A920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Sep 2025 00:45:25 +0000 Certificate not after: Thu 16 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 64.112.92.0/22 IP: 165.140.4.0/22 IP: 169.197.188.0/22 IP: 204.11.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:24:9c:50:70:78:f5:32:6e:92:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 12 00:45:25 2025 GMT Not After : Dec 16 01:45:25 2027 GMT Subject: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:12:0a:82:bb:08:b5:99:c2:8b:b8:39:c4: 3e:5a:2e:36:6c:24:80:12:e7:80:65:24:03:f1:3e: a0:64:f2:6c:20:93:f3:56:11:cd:32:bb:47:8c:ad: ed:08:22:9f:df:57:dd:82:d4:c6:6e:fc:b2:ff:67: ad:47:58:9e:e3:71:8c:98:5d:60:03:16:cf:fc:49: ef:72:0e:ea:56:fa:65:6a:d9:86:f6:8b:1c:80:d3: 21:5b:d6:81:fa:00:ad:be:a8:dc:b6:a8:52:92:5e: bf:50:3b:90:a0:eb:27:00:26:b2:dd:a7:e6:d0:92: 3c:e8:83:63:2e:95:f8:8c:33:57:0d:d6:eb:ba:ab: 61:c5:12:b5:d6:66:af:a8:a3:9d:3f:4c:d8:3d:3e: 84:96:99:c7:be:3e:d6:4b:ba:78:3b:cd:2c:df:8e: 5d:c1:a1:33:b2:bd:bc:17:77:af:4e:2b:3e:0c:8d: 70:af:99:7a:44:95:93:79:98:a2:ce:2b:c5:0c:ff: db:5f:a9:97:13:47:e9:f8:13:f6:33:3f:56:b8:2b: 8a:16:ad:5f:0a:fa:01:06:da:5b:12:84:d2:ed:06: e1:84:44:53:c7:6f:e2:ee:af:ff:7d:9b:5f:31:27: d4:e6:f2:c1:36:79:25:bc:ca:51:16:c9:fd:84:b7: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.112.92.0/22 165.140.4.0/22 169.197.188.0/22 204.11.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:d1:6c:63:36:07:21:eb:cc:db:c1:08:9a:3a:2e:aa:c3: 6b:ae:b5:53:be:2c:b8:39:4a:d7:40:11:b1:49:8b:66:f2:6b: 9b:2c:de:0d:e6:70:be:18:5f:b5:9e:a0:5f:38:92:ee:47:a8: 1e:bc:c7:b2:6d:a3:fb:c8:5c:02:bc:69:01:5f:08:2c:79:3d: 30:74:7d:7f:8d:fa:a1:7f:6b:ad:27:1e:39:60:12:41:f2:e6: 24:9f:c7:ae:40:90:38:d4:05:24:35:98:26:e9:05:4e:4e:e6: 9e:5e:c6:f7:ea:9f:5b:07:b7:78:59:c6:82:18:e6:65:8d:69: e2:8a:94:3c:39:4b:2f:46:ee:76:12:1e:b6:4d:1c:76:16:48: 4a:fd:31:e7:5e:a5:5d:5d:2b:cb:24:4d:22:12:dd:00:9a:bb: 03:30:c1:15:b5:c5:93:5b:b8:f8:eb:bb:29:a0:a8:35:04:ea: c8:08:9b:fe:ee:99:a6:8a:ae:e0:c0:cd:5e:5a:0c:23:27:3d: 9f:40:f3:fa:96:1b:c7:c9:eb:50:9d:80:10:ec:d6:94:98:81: fb:00:dd:22:c6:20:d6:cd:cf:5f:d6:d3:aa:8e:7a:c8:e5:74: f6:eb:1e:17:e2:4d:c8:8b:18:d3:24:1f:84:94:28:75:8c:6b: 96:6f:d1:5a -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEsqJJxQcHj1Mm6SqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDkxMjAwNDUyNVoXDTI3MTIxNjAxNDUyNVowLzEtMCsGA1UEAxMk YzAyM2ZmYWYtYjJiMi00MzgyLTg0OWMtMmJjNWJmZDFhM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6oSCoK7CLWZwou4OcQ+Wi42bCSAEueAZSQD 8T6gZPJsIJPzVhHNMrtHjK3tCCKf31fdgtTGbvyy/2etR1ie43GMmF1gAxbP/Env cg7qVvplatmG9oscgNMhW9aB+gCtvqjctqhSkl6/UDuQoOsnACay3afm0JI86INj LpX4jDNXDdbruqthxRK11mavqKOdP0zYPT6ElpnHvj7WS7p4O80s345dwaEzsr28 F3evTis+DI1wr5l6RJWTeZiizivFDP/bX6mXE0fp+BP2Mz9WuCuKFq1fCvoBBtpb EoTS7QbhhERTx2/i7q//fZtfMSfU5vLBNnklvMpRFsn9hLdUfwIDAQABo4IEETCC BA0wHQYDVR0OBBYEFJ44CV4oSsc+JElO6YaeYUpCD+3KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j MDIzZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1YmZkMWEzYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2MwMjNmZmFmLWIyYjItNDM4Mi04 NDljLTJiYzViZmQxYTNjNS9jMDIzZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1YmZk MWEzYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAJAcFwDBAKljAQDBAKpxbwDBALMC5AwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAHVHRbGM2ByHrzNvBCJo6LqrDa661U74suDlK10ARsUmLZvJrmyzeDeZwvhhf tZ6gXziS7keoHrzHsm2j+8hcArxpAV8ILHk9MHR9f436oX9rrSceOWASQfLmJJ/H rkCQONQFJDWYJukFTk7mnl7G9+qfWwe3eFnGghjmZY1p4oqUPDlLL0budhIetk0c dhZISv0x516lXV0ryyRNIhLdAJq7AzDBFbXFk1u4+Ou7KaCoNQTqyAib/u6Zpoqu 4MDNXloMIyc9n0Dz+pYbx8nrUJ2AEOzWlJiB+wDdIsYg1s3PX9bTqo56yOV09use F+JNyIsY0yQfhJQodYxrlm/RWg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:29 2025 by rpki-client