$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer File: 016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer (raw, json) Hash identifier: /V6TbP5rYnqm3quLwbw9jK+29He7Jhv215uvs690IRg= Subject key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B80AFCD1E167E61C2E4C64F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 2001:504:2e::/48 IP: 2602:fca9::/36 IP: 2607:fb60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:1e:16:7e:61:c2:e4:c6:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:d6:89:3c:67:ba:e2:a3:85:e7:5d:81:2b: 5f:14:73:49:3d:9a:c5:df:d0:7b:0f:02:31:71:8d: 5b:de:b5:21:dc:5b:ff:23:84:4f:23:7a:68:7e:67: 28:89:10:7b:dd:b7:1f:99:b2:b5:7c:24:87:e4:82: 49:b7:8a:c9:9c:56:1e:d6:42:0c:ab:f4:6f:92:ad: 51:8e:4a:a0:27:bd:f7:be:ee:0c:36:cc:af:42:14: d7:ce:fd:83:63:fb:da:ed:62:c5:6b:9d:b4:dc:70: 0c:56:49:11:22:06:9a:97:ef:a5:63:f8:74:8e:bf: ca:4b:34:8f:46:59:54:24:15:90:80:5d:ef:8c:dc: 60:37:94:33:27:1c:ca:cf:5a:d7:a4:e7:88:47:eb: f3:f7:7b:5c:e4:65:3d:35:05:e0:02:8a:be:3d:70: fc:ff:bb:8c:8b:50:c3:5d:56:3a:79:e7:c1:6f:67: 0e:37:08:85:dd:fb:ed:25:b7:4c:d0:ee:0f:d4:49: 24:34:a5:d4:6f:d7:31:7e:dd:56:50:28:f4:65:92: 5d:d9:e1:73:fa:a6:a2:9d:35:0f:ce:b4:c6:8e:49: b8:33:1a:55:2c:6b:54:a0:6b:e2:ad:81:95:8a:16: 6d:34:cf:cd:44:95:e0:3b:16:03:9a:9c:ca:ff:ba: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:2e::/48 2602:fca9::/36 2607:fb60::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9d:9f:29:8c:44:86:36:f4:db:9f:46:b2:f5:d5:d0:3c:dd: 3d:49:59:3a:14:d0:fa:d4:54:98:76:45:d3:77:0c:b1:c0:1a: e7:3a:18:af:84:1a:3c:04:a5:c3:26:9b:f7:4e:9a:ea:18:8a: a1:5c:7b:5d:be:87:a3:bf:62:98:c9:3d:74:fd:47:60:9b:00: 52:a7:be:1f:aa:d9:cc:3a:a2:0a:e9:a0:3d:45:bd:a1:aa:ff: 07:61:dd:37:c6:05:18:51:4f:f2:3c:c9:ec:74:0f:24:fe:60: 7a:e1:91:d2:1a:1a:59:01:0f:70:32:d9:97:05:d9:ab:9f:6e: 2b:f5:f4:15:b2:58:be:28:0e:01:db:cf:77:5a:c9:54:34:06: 33:26:2f:22:c1:94:65:2f:56:c1:f3:8d:2d:68:eb:41:bf:d9: 8a:bd:1f:11:27:3d:56:d6:91:b7:1b:83:f3:c9:17:16:f6:05: 65:32:a3:74:48:f6:8b:75:fb:39:b8:0c:df:22:0f:6e:fe:6d: 92:3a:ba:5b:7a:0f:11:ab:ba:97:43:04:ba:11:ef:bc:f5:7b: 49:f6:67:30:8f:d4:e8:0a:3b:88:12:a6:b6:de:4b:7c:98:62: 48:e0:60:5d:29:76:8d:56:39:73:cb:cf:62:a5:25:39:45:3d: 90:70:05:6f -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEuAr80eFn5hwuTGTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk MDE2Zjg3YjYtM2Q5MC00NDlmLTljYTMtZDA1N2ZjN2IyYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5TWiTxnuuKjheddgStfFHNJPZrF39B7DwIx cY1b3rUh3Fv/I4RPI3pofmcoiRB73bcfmbK1fCSH5IJJt4rJnFYe1kIMq/Rvkq1R jkqgJ733vu4MNsyvQhTXzv2DY/va7WLFa5203HAMVkkRIgaal++lY/h0jr/KSzSP RllUJBWQgF3vjNxgN5QzJxzKz1rXpOeIR+vz93tc5GU9NQXgAoq+PXD8/7uMi1DD XVY6eefBb2cONwiF3fvtJbdM0O4P1EkkNKXUb9cxft1WUCj0ZZJd2eFz+qainTUP zrTGjkm4MxpVLGtUoGvirYGVihZtNM/NRJXgOxYDmpzK/7rMDwIDAQABo4IEETCC BA0wHQYDVR0OBBYEFFTkM7g9vadtUQGuQhN2Tz3sHPx2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w MTZmODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3ZmM3YjJhNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAxNmY4N2I2LTNkOTAtNDQ5Zi05 Y2EzLWQwNTdmYzdiMmE1Zi8wMTZmODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3ZmM3 YjJhNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgACMBgDBwAgAQUEAC4DBgQmAvypAAMFACYH+2AwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAUp2fKYxEhjb0259GsvXV0DzdPUlZOhTQ+tRUmHZF03cMscAa5zoYr4QaPASl wyab906a6hiKoVx7Xb6Ho79imMk9dP1HYJsAUqe+H6rZzDqiCumgPUW9oar/B2Hd N8YFGFFP8jzJ7HQPJP5geuGR0hoaWQEPcDLZlwXZq59uK/X0FbJYvigOAdvPd1rJ VDQGMyYvIsGUZS9WwfONLWjrQb/Zir0fESc9VtaRtxuD88kXFvYFZTKjdEj2i3X7 ObgM3yIPbv5tkjq6W3oPEau6l0MEuhHvvPV7SfZnMI/U6Ao7iBKmtt5LfJhiSOBg XSl2jVY5c8vPYqUlOUU9kHAFbw== -----END CERTIFICATE-----Generated at Sun Oct 19 23:04:33 2025 by rpki-client