$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer File: f42ba754-2a4d-4b4e-b364-698af500fc82.cer (raw, json) Hash identifier: 1YG1zWdHn5TP7rWlKE9j5gNiS8xtsf/XeXmhRKcfe7w= Subject key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584B640ADB83011E02FE63141B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 18:30:25 +0000 Certificate not after: Thu 12 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 1613 AS: 398710 IP: 168.100.224.0/19 IP: 185.176.52.0/22 IP: 2605:57c0::/32 IP: 2605:e740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:0a:db:83:01:1e:02:fe:63:14:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 2 18:30:25 2025 GMT Not After : Nov 12 01:45:23 2026 GMT Subject: CN=f42ba754-2a4d-4b4e-b364-698af500fc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:89:99:66:7b:e9:58:b7:a4:d5:b8:55:73: 3a:25:e0:53:47:c9:9f:04:6e:ac:06:a7:ab:d1:54: b3:91:47:a0:a2:e3:3d:fa:50:98:e9:e8:db:3f:96: e4:de:92:98:d9:e6:01:88:4a:6f:e8:e6:51:d9:0e: 41:ea:be:65:56:0f:54:03:06:91:9b:da:7d:f3:d4: 3d:c3:26:12:9c:ed:8b:d5:43:98:0e:05:ac:35:50: ea:ef:13:6f:72:f7:d0:3f:37:3a:e5:3c:8c:76:0a: 8f:bd:53:eb:a9:ad:f0:44:b9:37:c8:b0:cd:ff:04: 14:da:2f:ef:b6:4d:8a:09:f1:dd:17:03:93:8d:be: 73:6b:d7:a3:ee:f2:70:10:21:57:05:e2:48:20:24: c5:7b:3e:ea:63:30:2d:5f:2d:75:c9:1d:70:34:3e: 36:ed:9f:3b:5d:93:3b:c1:ee:d2:8f:7d:4e:a0:69: d9:5c:40:be:f2:b8:08:77:7f:d4:59:25:f4:62:2c: 73:d4:42:d0:24:75:b0:55:df:64:fb:4a:e8:43:6e: 75:f2:f9:6f:15:58:d3:24:73:00:31:9e:b2:8a:61: 5b:9c:d0:35:ee:ee:fa:51:ce:55:43:52:f7:3e:d2: 7a:26:ed:02:ec:ab:36:7d:16:77:68:20:b4:71:3b: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 168.100.224.0/19 185.176.52.0/22 IPv6: 2605:57c0::/32 2605:e740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1613 398710 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:36:fa:e8:52:fa:be:74:63:cc:b6:69:5f:bf:c3:6b:aa:93: 8d:74:e8:59:e8:c5:73:90:e5:75:98:09:89:b8:0c:af:cd:44: 23:1b:4a:58:cf:7f:97:89:a2:ed:29:f2:55:3f:6a:f9:e0:ee: f5:10:9d:c8:fb:4e:ac:26:bd:f4:48:d4:d7:1a:a4:41:c4:cd: d2:f3:ae:c4:7f:fe:21:ab:60:8d:4a:f3:5b:65:10:37:3c:0f: 73:ce:31:68:80:82:81:95:d6:e0:6f:b0:0a:e0:3e:49:5a:fe: 7e:b4:fd:29:ef:16:c9:0d:0a:20:a6:9a:90:88:e5:bd:f9:27: b1:c9:7d:73:72:d3:6f:1d:dc:b5:4d:9a:6f:fd:f2:f5:37:ed: 49:7f:23:ab:85:21:79:42:c6:65:7c:2c:9e:20:63:f1:4e:aa: 67:3c:d3:99:2a:53:8a:ed:79:2c:55:6d:2c:2d:29:f1:70:d6: 90:66:c3:30:44:1b:9c:55:db:4c:09:74:bc:f9:8d:9e:03:ad: 20:0f:37:34:39:2f:98:ef:bd:d6:e9:c6:bb:c7:2f:ba:23:c8: 6a:02:8a:90:12:98:d3:76:59:23:e0:d3:3e:01:e0:bc:33:db: 2f:5d:ef:26:8f:4a:99:cd:5d:9f:07:4d:88:c7:1b:2d:b3:36: d3:a4:57:57 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEtkCtuDAR4C/mMUG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTAwMjE4MzAyNVoXDTI2MTExMjAxNDUyM1owLzEtMCsGA1UEAxMk ZjQyYmE3NTQtMmE0ZC00YjRlLWIzNjQtNjk4YWY1MDBmYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeiJmWZ76Vi3pNW4VXM6JeBTR8mfBG6sBqer 0VSzkUegouM9+lCY6ejbP5bk3pKY2eYBiEpv6OZR2Q5B6r5lVg9UAwaRm9p989Q9 wyYSnO2L1UOYDgWsNVDq7xNvcvfQPzc65TyMdgqPvVPrqa3wRLk3yLDN/wQU2i/v tk2KCfHdFwOTjb5za9ej7vJwECFXBeJIICTFez7qYzAtXy11yR1wND427Z87XZM7 we7Sj31OoGnZXEC+8rgId3/UWSX0Yixz1ELQJHWwVd9k+0roQ2518vlvFVjTJHMA MZ6yimFbnNA17u76Uc5VQ1L3PtJ6Ju0C7Ks2fRZ3aCC0cTuvdQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFH7C3ya5iMURlPO8LEQRNA3CWgwFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m NDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUwMGZjODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y0MmJhNzU0LTJhNGQtNGI0ZS1i MzY0LTY5OGFmNTAwZmM4Mi9mNDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUw MGZjODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBIEAgABMAwDBAWoZOADBAK5sDQwFAQCAAIwDgMFACYFV8ADBQAm BedAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAgZNAgMGFXYwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjzb6 6FL6vnRjzLZpX7/Da6qTjXToWejFc5DldZgJibgMr81EIxtKWM9/l4mi7SnyVT9q +eDu9RCdyPtOrCa99EjU1xqkQcTN0vOuxH/+IatgjUrzW2UQNzwPc84xaICCgZXW 4G+wCuA+SVr+frT9Ke8WyQ0KIKaakIjlvfknscl9c3LTbx3ctU2ab/3y9TftSX8j q4UheULGZXwsniBj8U6qZzzTmSpTiu15LFVtLC0p8XDWkGbDMEQbnFXbTAl0vPmN ngOtIA83NDkvmO+91unGu8cvuiPIagKKkBKY03ZZI+DTPgHgvDPbL13vJo9Kmc1d nwdNiMcbLbM206RXVw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:52 2025 by rpki-client