$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer File: 24d6cba8-85d8-4359-a10e-8e9ab867266a.cer (raw, json) Hash identifier: D9jR2I43xF+sUOgIjWZn+Caxffx5IN3jfenDTd40LVE= Subject key identifier: 75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7DE51CB246E62E6CF9D7B640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 2607:c2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:b2:46:e6:2e:6c:f9:d7:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=24d6cba8-85d8-4359-a10e-8e9ab867266a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:c0:6a:ea:98:5b:ad:bd:7e:6d:54:7c:f6: 61:3d:34:09:5c:8c:e3:2c:00:ea:91:53:ad:7a:67: d8:3b:88:df:ec:a3:45:5b:71:0a:69:a8:86:82:66: 23:db:8b:62:a0:59:c4:f1:7b:be:c4:4f:2d:f1:c5: 29:24:61:cd:d3:26:26:88:d5:98:2e:f8:6f:79:46: 26:7f:23:07:7b:17:bd:3f:b1:7b:7f:3e:10:69:1a: b9:27:af:58:84:c0:bb:08:ab:15:45:dc:60:e6:55: 46:a5:54:cb:c7:2c:58:5e:70:67:9e:b7:27:ff:d9: f2:78:e6:ee:52:b6:78:f4:9c:f8:f3:c3:05:1e:1f: 20:e2:db:71:9d:ec:4e:38:f5:e8:d6:3a:c5:2e:8f: 7f:57:da:89:94:bb:a6:ca:82:be:23:3c:46:47:b4: d8:0d:20:40:1c:6a:eb:65:53:8b:02:35:51:ab:47: 1b:c9:39:cf:86:e9:2d:22:80:8a:02:71:1b:ac:de: 2e:59:b4:82:c0:41:ab:53:36:ae:68:9d:f5:72:d2: 70:c4:4a:3b:f5:bf:d7:d2:ea:99:f1:8e:c8:08:fe: e5:c5:40:d9:1b:b4:1e:27:24:3e:1c:6d:d0:13:fa: 5e:93:fa:59:7f:af:b2:0b:aa:b7:b7:bb:ec:ec:01: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2607:c2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3b:ae:e0:6d:6e:8a:80:6d:e1:47:03:58:f1:e2:62:bd:93: 70:ae:5e:09:8e:11:79:52:1d:84:ed:fb:59:6b:0a:91:2b:9e: 4c:94:a5:e8:1a:58:86:1f:ab:12:6c:5d:d3:b9:15:3f:bc:97: d1:c4:68:ef:8b:1e:e6:8b:3a:8d:2c:2c:97:aa:1f:88:72:25: 67:fe:ba:5b:b5:f5:c9:a1:73:b8:cc:6d:80:ba:2c:3b:49:6b: 81:38:57:32:c2:d5:b2:c2:b7:40:ec:a9:a3:d9:4b:7f:b8:b8: 35:5b:50:e1:42:75:2b:0b:6b:4e:26:08:67:ca:c9:e7:55:69: 53:73:38:17:5f:21:57:cc:b8:e7:90:3d:40:bf:3a:59:42:94: db:4f:bd:52:7c:89:9b:c4:00:72:05:62:4b:36:5e:de:82:c6: 7e:04:09:ab:49:ee:80:f2:83:2c:3d:04:54:ad:46:cf:5b:5b: ef:00:88:b9:a9:a0:51:03:ec:4b:85:6a:90:14:a3:9d:c1:03: 99:78:18:0a:0e:f9:45:8a:8d:80:86:0b:19:56:e1:66:f8:27: 51:e0:f4:80:37:05:ff:62:0c:96:6f:d7:a7:75:d6:02:93:41: 00:ac:d5:02:fa:bd:9b:5d:aa:9a:55:a1:76:f2:44:60:e9:bb: 49:37:27:fa -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEt95RyyRuYubPnXtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk MjRkNmNiYTgtODVkOC00MzU5LWExMGUtOGU5YWI4NjcyNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2nAauqYW629fm1UfPZhPTQJXIzjLADqkVOt emfYO4jf7KNFW3EKaaiGgmYj24tioFnE8Xu+xE8t8cUpJGHN0yYmiNWYLvhveUYm fyMHexe9P7F7fz4QaRq5J69YhMC7CKsVRdxg5lVGpVTLxyxYXnBnnrcn/9nyeObu UrZ49Jz488MFHh8g4ttxnexOOPXo1jrFLo9/V9qJlLumyoK+IzxGR7TYDSBAHGrr ZVOLAjVRq0cbyTnPhuktIoCKAnEbrN4uWbSCwEGrUzauaJ31ctJwxEo79b/X0uqZ 8Y7ICP7lxUDZG7QeJyQ+HG3QE/pek/pZf6+yC6q3t7vs7AF3CwIDAQABo4IEADCC A/wwHQYDVR0OBBYEFHUjOleAjOfBfz7tI1miwQoAQI6OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y NGQ2Y2JhOC04NWQ4LTQzNTktYTEwZS04ZTlhYjg2NzI2NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzI0ZDZjYmE4LTg1ZDgtNDM1OS1h MTBlLThlOWFiODY3MjY2YS8yNGQ2Y2JhOC04NWQ4LTQzNTktYTEwZS04ZTlhYjg2 NzI2NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB8LAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACQ7ruBtboqAbeFHA1jx 4mK9k3CuXgmOEXlSHYTt+1lrCpErnkyUpegaWIYfqxJsXdO5FT+8l9HEaO+LHuaL Oo0sLJeqH4hyJWf+ulu19cmhc7jMbYC6LDtJa4E4VzLC1bLCt0DsqaPZS3+4uDVb UOFCdSsLa04mCGfKyedVaVNzOBdfIVfMuOeQPUC/OllClNtPvVJ8iZvEAHIFYks2 Xt6Cxn4ECatJ7oDygyw9BFStRs9bW+8AiLmpoFED7EuFapAUo53BA5l4GAoO+UWK jYCGCxlW4Wb4J1Hg9IA3Bf9iDJZv16d11gKTQQCs1QL6vZtdqppVoXbyRGDpu0k3 J/o= -----END CERTIFICATE-----Generated at Sun Oct 19 20:28:14 2025 by rpki-client