$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer File: e3aefa7a-1469-41b1-a14f-6fc251b55823.cer (raw, json) Hash identifier: ic//21IY9HkAWhC/dVD2yJG2ERwQCbEk9e9kLyDnrrE= Subject key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B7225752DB37AD4EE6A11B3D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 19:45:19 +0000 Certificate not after: Tue 04 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 15280 IP: 131.143.43.0/24 IP: 205.166.250.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:25:75:2d:b3:7a:d4:ee:6a:11:b3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 7 19:45:19 2025 GMT Not After : Jan 4 01:45:24 2028 GMT Subject: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:00:65:f2:4a:a3:83:93:b0:b4:cd:8b:a7: dd:96:9a:2d:39:dd:5f:00:2a:53:ab:ba:7a:17:52: cc:dd:80:62:a2:83:06:74:5c:96:bf:12:18:88:81: 7c:74:52:26:5b:44:50:28:88:53:79:d8:02:00:f5: 04:18:00:6f:3e:92:99:2e:7e:c6:4c:4a:18:ce:a0: 3f:1a:8d:d7:6e:8e:82:4a:d4:53:70:81:61:35:7c: 84:09:a8:c7:11:ba:76:4f:66:9b:eb:f7:a2:dd:71: 42:cc:dc:52:64:fd:8f:f7:48:c9:21:27:d0:7b:ec: 37:63:a6:b5:fb:7e:89:b2:72:9a:d5:38:75:26:17: 8b:0a:24:54:40:53:60:1b:56:bd:79:59:5f:85:af: 8d:8d:a3:7e:5a:ec:ef:5b:bb:ab:34:d7:e4:aa:cd: bf:43:b6:b4:89:d0:25:10:e4:90:f0:97:96:b7:c3: 54:7c:19:31:ae:93:fe:72:54:84:9d:11:78:2b:f4: cb:90:3f:db:69:5e:e6:52:67:7b:18:e3:bd:56:75: 50:93:28:fa:10:bf:bb:e3:e9:21:a4:1f:10:3e:5e: 29:d9:a6:b1:c5:90:6c:30:09:48:cb:04:2f:65:b4: f6:3f:9d:01:4e:da:2b:c6:cb:f9:98:90:b3:e5:13: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 131.143.43.0/24 205.166.250.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15280 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:54:55:77:ef:f8:5d:c5:f9:b2:2b:ae:0d:89:6a:60:db:06: f7:51:1d:77:88:49:c6:a5:6c:6c:4d:dd:52:ee:1c:ef:2b:12: d3:b0:8a:59:7d:7d:e4:58:8a:f6:f4:b4:dd:0d:70:68:1c:d6: d3:05:c0:0d:bb:aa:38:dc:37:e6:34:db:3c:b8:b2:7e:ec:5b: ae:0f:0c:a8:2e:52:ff:85:17:68:fa:bf:3d:15:bb:a2:91:49: 7c:f2:80:63:61:49:48:aa:84:2c:4c:f4:3c:28:c4:dd:04:7b: d0:6e:91:a7:ac:81:5f:30:8d:e2:e6:6f:cb:4c:e4:b3:37:32: e4:99:c6:36:22:05:84:9d:38:90:8a:3a:dd:f0:11:8c:c4:79: 89:b2:53:bf:38:49:b4:46:33:ef:17:4b:c0:51:d0:12:c8:a8: ba:35:38:73:9b:83:0d:17:95:5e:ca:de:86:e3:c3:48:97:16: 0e:be:a9:7d:99:31:f9:c4:95:d5:c1:cc:88:3d:e8:86:ef:cd: 34:14:ec:00:43:2f:d3:03:8e:ae:29:03:da:66:6c:4f:11:0f: 57:7b:cf:a3:16:b9:45:4e:60:4c:ea:6b:d6:97:02:3e:e1:50: cc:23:5b:54:ca:ce:ca:03:8e:bd:4a:3f:a7:a5:8f:1c:2e:cc: 31:7e:fa:40 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEtyJXUts3rU7moRs9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAwNzE5NDUxOVoXDTI4MDEwNDAxNDUyNFowLzEtMCsGA1UEAxMk ZTNhZWZhN2EtMTQ2OS00MWIxLWExNGYtNmZjMjUxYjU1ODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshoAZfJKo4OTsLTNi6fdlpotOd1fACpTq7p6 F1LM3YBiooMGdFyWvxIYiIF8dFImW0RQKIhTedgCAPUEGABvPpKZLn7GTEoYzqA/ Go3Xbo6CStRTcIFhNXyECajHEbp2T2ab6/ei3XFCzNxSZP2P90jJISfQe+w3Y6a1 +36JsnKa1Th1JheLCiRUQFNgG1a9eVlfha+NjaN+WuzvW7urNNfkqs2/Q7a0idAl EOSQ8JeWt8NUfBkxrpP+clSEnRF4K/TLkD/baV7mUmd7GOO9VnVQkyj6EL+74+kh pB8QPl4p2aaxxZBsMAlIywQvZbT2P50BTtorxsv5mJCz5RMIvwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFCOhbvyi7FrWp6gFq/3q32hfByGTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l M2FlZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMyNTFiNTU4MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2UzYWVmYTdhLTE0NjktNDFiMS1h MTRmLTZmYzI1MWI1NTgyMy9lM2FlZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMyNTFi NTU4MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACDjysDBADNpvowGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICO7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEArFRVd+/4XcX5siuuDYlqYNsG91Edd4hJxqVsbE3d Uu4c7ysS07CKWX195FiK9vS03Q1waBzW0wXADbuqONw35jTbPLiyfuxbrg8MqC5S /4UXaPq/PRW7opFJfPKAY2FJSKqELEz0PCjE3QR70G6Rp6yBXzCN4uZvy0zkszcy 5JnGNiIFhJ04kIo63fARjMR5ibJTvzhJtEYz7xdLwFHQEsioujU4c5uDDReVXsre huPDSJcWDr6pfZkx+cSV1cHMiD3ohu/NNBTsAEMv0wOOrikD2mZsTxEPV3vPoxa5 RU5gTOpr1pcCPuFQzCNbVMrOygOOvUo/p6WPHC7MMX76QA== -----END CERTIFICATE-----Generated at Tue Oct 21 06:54:49 2025 by rpki-client