$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca.cer File: 1ba3d579-a991-4921-a9bd-c621cb4af3ca.cer (raw, json) Hash identifier: 4Og0OW2tKyVDmMsiMwezZXlYR0YsF3FRdlNKRd3M88E= Subject key identifier: A9:B3:53:78:98:46:7D:40:4F:EF:5A:3E:1D:D3:B5:48:18:89:DD:E5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B890FDBB891374EC7B37F3000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/1ba3d579-a991-4921-a9bd-c621cb4af3ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 00:45:24 +0000 Certificate not after: Wed 19 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 205.237.22.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:0f:db:b8:91:37:4e:c7:b3:7f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 16 00:45:24 2025 GMT Not After : Jan 19 01:45:24 2028 GMT Subject: CN=1ba3d579-a991-4921-a9bd-c621cb4af3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:89:ef:f9:d5:5c:9f:60:0c:f4:50:4e:66: b0:d4:59:0d:b2:51:a4:6b:a0:18:00:f3:96:51:b8: 21:4b:4a:87:c0:f4:1b:21:bd:10:b2:8c:a3:d9:6f: ba:0e:dd:55:5b:af:65:00:49:ef:2e:7a:99:c2:f1: 1b:13:67:8c:eb:5b:3e:07:3d:1d:cc:cd:9a:bf:5f: c2:ad:3c:4e:dc:91:30:4b:4b:1b:0c:db:ad:d4:d8: 27:6b:ad:ab:35:9e:ce:88:ed:47:2e:65:de:3b:7b: 14:f7:f9:08:c7:44:48:5f:05:2c:35:fd:c7:dc:db: e4:c0:93:bc:7a:ac:63:a3:20:59:71:1e:e6:02:16: d7:53:16:58:dd:7f:30:34:80:9b:34:69:74:a0:43: 56:50:c9:2d:93:98:6f:ad:5b:90:70:8f:88:40:43: 57:dd:cc:89:1d:83:8d:68:86:f2:56:98:c6:6b:a8: e9:53:e8:30:d6:a2:4c:55:42:61:a1:ca:67:8e:eb: 21:21:64:ca:25:26:ab:e9:b6:ee:78:33:9e:ad:a9: 34:09:4c:9d:3d:36:ba:a7:0f:5f:80:3a:65:4a:20: c8:f5:f9:80:cf:ac:67:1a:67:22:ad:60:e3:3d:27: cc:1f:66:b1:32:12:e4:61:d3:68:ec:73:9c:c3:98: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:53:78:98:46:7D:40:4F:EF:5A:3E:1D:D3:B5:48:18:89:DD:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/1ba3d579-a991-4921-a9bd-c621cb4af3ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 205.237.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cd:27:6e:c1:80:4c:d3:56:5b:4f:90:20:a9:2f:43:63:ea: 96:a3:a5:5f:c8:f0:9a:02:46:24:80:4e:43:a3:17:58:98:79: 75:5c:5f:b1:c1:75:38:21:a3:32:e8:60:61:6a:66:f1:68:73: c0:de:56:fb:31:76:3d:9a:83:d8:94:dd:ce:e8:52:83:84:66: 30:3a:5f:cc:ea:0f:90:ef:e3:cc:ae:f2:8e:65:e1:ea:7a:10: 21:45:1c:9e:e5:a8:fc:4d:56:c2:13:08:f2:1b:bf:0a:b8:73: b4:c8:fe:81:ba:14:e3:81:4e:97:43:05:62:5b:02:8b:68:73: 6f:c4:09:79:c0:57:ff:9b:b0:b3:45:da:00:26:70:c2:e9:ed: 9a:f2:f4:57:f3:b3:d2:48:98:a8:15:38:89:b4:2d:be:2c:46: 0d:12:0b:f9:ec:12:9c:49:b3:9c:72:60:be:ac:80:5e:4e:c1: f0:36:86:ee:12:31:f5:4a:bd:cc:bf:10:3b:18:1b:d6:0d:83: 68:99:84:be:3a:dc:60:49:f5:af:85:47:5d:60:ad:25:62:f4: 17:23:36:90:e1:0e:dd:7f:cb:98:9b:2f:fc:d7:a8:03:49:38: 69:f5:ba:f8:6a:27:1a:ed:b6:65:00:04:c5:6c:45:8d:a1:f1: 52:d2:42:42 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuJD9u4kTdOx7N/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNjAwNDUyNFoXDTI4MDExOTAxNDUyNFowLzEtMCsGA1UEAxMk MWJhM2Q1NzktYTk5MS00OTIxLWE5YmQtYzYyMWNiNGFmM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiJ7/nVXJ9gDPRQTmaw1FkNslGka6AYAPOW UbghS0qHwPQbIb0Qsoyj2W+6Dt1VW69lAEnvLnqZwvEbE2eM61s+Bz0dzM2av1/C rTxO3JEwS0sbDNut1Ngna62rNZ7OiO1HLmXeO3sU9/kIx0RIXwUsNf3H3NvkwJO8 eqxjoyBZcR7mAhbXUxZY3X8wNICbNGl0oENWUMktk5hvrVuQcI+IQENX3cyJHYON aIbyVpjGa6jpU+gw1qJMVUJhocpnjushIWTKJSar6bbueDOerak0CUydPTa6pw9f gDplSiDI9fmAz6xnGmcirWDjPSfMH2axMhLkYdNo7HOcw5gUSwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKmzU3iYRn1AT+9aPh3TtUgYid3lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x YmEzZDU3OS1hOTkxLTQ5MjEtYTliZC1jNjIxY2I0YWYzY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFiYTNkNTc5LWE5OTEtNDkyMS1h OWJkLWM2MjFjYjRhZjNjYS8xYmEzZDU3OS1hOTkxLTQ5MjEtYTliZC1jNjIxY2I0 YWYzY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7RYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcs0nbsGATNNWW0+QIKkv Q2PqlqOlX8jwmgJGJIBOQ6MXWJh5dVxfscF1OCGjMuhgYWpm8WhzwN5W+zF2PZqD 2JTdzuhSg4RmMDpfzOoPkO/jzK7yjmXh6noQIUUcnuWo/E1WwhMI8hu/CrhztMj+ gboU44FOl0MFYlsCi2hzb8QJecBX/5uws0XaACZwwuntmvL0V/Oz0kiYqBU4ibQt vixGDRIL+ewSnEmznHJgvqyAXk7B8DaG7hIx9Uq9zL8QOxgb1g2DaJmEvjrcYEn1 r4VHXWCtJWL0FyM2kOEO3X/LmJsv/NeoA0k4afW6+GonGu22ZQAExWxFjaHxUtJC Qg== -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:39 2025 by rpki-client