$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer File: 4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer (raw, json) Hash identifier: 7zN4xmyeXZaWJMzAMH9X968a5C9l9x/ne/fuPSr4YzI= Subject key identifier: 54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7DE51C7CA1D132295CDFDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 64.49.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:7c:a1:d1:32:29:5c:df:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:ae:7c:b8:10:a5:04:30:36:19:bb:0f:52: 43:6d:fc:cd:07:34:04:8d:82:0b:ec:1b:06:90:15: 23:ab:52:bf:05:29:cd:7c:9f:0b:eb:b8:65:0f:e1: b5:b2:32:26:33:fa:31:b2:0a:72:52:50:fb:8e:8d: 9f:74:01:15:a6:64:84:85:1a:08:c4:6e:63:6c:b6: fa:c8:4e:45:0b:a7:a5:ea:15:a8:17:c3:38:c8:70: e7:4d:b2:ce:db:6f:30:62:ed:e2:12:7c:3c:0e:90: 38:fd:fc:ae:8d:af:99:93:f5:a4:53:65:ef:7e:da: a8:79:de:ed:42:49:6e:17:3e:4d:42:2e:2d:40:53: a7:4b:6f:7a:98:59:cb:2f:d2:dc:3f:e4:8d:e7:8f: 99:43:aa:f1:ec:33:dc:44:c9:5d:da:c4:c0:88:1e: 30:e9:36:04:66:a7:dd:3f:68:8a:be:85:56:f8:69: 97:9c:2a:3b:20:fd:20:38:c2:83:be:e8:19:0f:cb: 4b:c2:ad:5c:88:91:23:b9:3d:60:8a:4e:6e:56:1b: 10:98:51:d1:2f:f4:d1:e9:2a:73:97:0a:fe:3e:72: 9b:ec:7c:4c:eb:aa:80:95:15:87:bc:9c:bb:10:5e: 9b:59:2d:f0:fb:33:36:67:38:2b:d0:3c:24:8c:23: d2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.49.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d7:10:22:f9:9d:2e:bd:0d:5f:41:fe:a6:20:c5:54:df:fa: cc:90:6a:af:b8:86:43:e2:f2:60:ae:00:01:d8:9d:1c:e5:39: c4:04:ec:56:55:26:e4:6c:df:a9:2b:3e:b5:e1:86:19:95:d5: 51:d8:a1:ab:41:18:40:a5:fb:60:58:1b:33:cc:26:ee:b5:f7: d0:51:e2:d6:1c:53:66:8a:80:b4:84:16:93:51:89:1f:43:38: a6:b9:2c:b2:a1:e5:61:d7:f5:de:a7:b2:05:aa:be:60:30:ee: 36:8d:f6:58:ff:c6:8f:39:dd:18:a7:1a:15:38:d7:30:70:c8: a9:67:8f:98:79:9d:bf:aa:f7:6c:c0:e0:27:7b:f5:8e:0a:36: 38:1b:38:ff:a9:0e:b1:f1:0a:6b:0d:61:1b:7e:1d:f4:f5:96: a3:3a:2f:a9:84:19:d8:ec:50:37:04:aa:12:f8:aa:49:4f:23: 9f:9b:58:52:be:26:17:65:5c:7b:e9:c2:5e:19:03:16:27:e0: c9:ed:be:c5:6f:02:65:d6:90:e6:ca:85:ff:19:a3:b3:37:e8: 77:2a:1d:8c:92:68:ac:aa:60:59:98:1e:6d:84:ff:20:cb:14: b2:1e:ad:fc:32:14:43:85:77:bd:67:c2:ce:b7:45:3a:34:d1: d8:75:be:84 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt95Rx8odEyKVzf3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk NDMxMGFhZjgtNTg4My00N2U1LTgzMTktZTVjOWRhOWNjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaufLgQpQQwNhm7D1JDbfzNBzQEjYIL7BsG kBUjq1K/BSnNfJ8L67hlD+G1sjImM/oxsgpyUlD7jo2fdAEVpmSEhRoIxG5jbLb6 yE5FC6el6hWoF8M4yHDnTbLO228wYu3iEnw8DpA4/fyuja+Zk/WkU2Xvftqoed7t QkluFz5NQi4tQFOnS296mFnLL9LcP+SN54+ZQ6rx7DPcRMld2sTAiB4w6TYEZqfd P2iKvoVW+GmXnCo7IP0gOMKDvugZD8tLwq1ciJEjuT1gik5uVhsQmFHRL/TR6Spz lwr+PnKb7HxM66qAlRWHvJy7EF6bWS3w+zM2Zzgr0DwkjCPSmQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFRnujcQdsQTY0iJqW4R6oLycwC+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 MzEwYWFmOC01ODgzLTQ3ZTUtODMxOS1lNWM5ZGE5Y2M0NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQzMTBhYWY4LTU4ODMtNDdlNS04 MzE5LWU1YzlkYTljYzQ2ZC80MzEwYWFmOC01ODgzLTQ3ZTUtODMxOS1lNWM5ZGE5 Y2M0NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAMSQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAetcQIvmdLr0NX0H+piDF VN/6zJBqr7iGQ+LyYK4AAdidHOU5xATsVlUm5GzfqSs+teGGGZXVUdihq0EYQKX7 YFgbM8wm7rX30FHi1hxTZoqAtIQWk1GJH0M4prkssqHlYdf13qeyBaq+YDDuNo32 WP/GjzndGKcaFTjXMHDIqWePmHmdv6r3bMDgJ3v1jgo2OBs4/6kOsfEKaw1hG34d 9PWWozovqYQZ2OxQNwSqEviqSU8jn5tYUr4mF2Vce+nCXhkDFifgye2+xW8CZdaQ 5sqF/xmjszfodyodjJJorKpgWZgebYT/IMsUsh6t/DIUQ4V3vWfCzrdFOjTR2HW+ hA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:30:08 2025 by rpki-client