$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer File: 48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer (raw, json) Hash identifier: Y4rJxT7iGZSICZvxIwxd68vMBOlzZfQ7yBhdQW79udU= Subject key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B837A7B983A1C38EAFF0CD580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 00:45:23 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 159.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:7a:7b:98:3a:1c:38:ea:ff:0c:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 14 00:45:23 2025 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:bd:c3:56:da:c8:20:10:91:f6:71:b3:b4: 3e:49:73:50:a7:a4:00:f5:a0:68:14:ea:80:f1:24: 00:6d:d3:b8:13:a9:f0:41:b1:4e:e5:e1:5b:db:cb: 54:5c:55:80:ad:31:c7:1f:05:63:ab:36:f2:9c:4f: 45:c8:9b:79:74:87:a0:8b:13:e7:40:21:a7:d2:a1: 1c:6f:ef:0e:b7:95:67:76:09:b7:e6:21:a8:a2:af: ad:d2:d9:ce:70:3c:2a:f6:ce:dd:d7:e1:d1:07:36: 89:ed:4d:89:4f:de:c0:21:2d:29:7a:99:d6:63:1c: b1:1f:78:e8:97:66:ff:2c:c0:4a:83:95:34:ff:77: 28:57:a2:bc:99:6c:d4:b7:cb:47:70:0c:d3:9e:9d: a9:4f:1e:b4:e1:20:a2:f0:6a:f5:22:c1:be:98:12: 7f:0f:31:31:e7:8c:ae:2c:84:4c:d3:eb:68:6e:0a: 19:7e:0c:9c:4f:6f:84:36:66:52:27:d7:7c:14:a3: 23:09:ca:d9:9a:23:88:df:ed:b0:75:30:72:bd:6f: a8:0c:2f:c9:51:31:07:e6:0b:ff:80:ce:14:e1:ea: f7:39:8d:e3:bb:11:72:d5:a7:de:70:2b:be:70:4b: 82:31:43:1c:4a:49:96:e7:f0:08:b6:26:84:a4:7b: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 159.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8d:c6:e4:27:2e:2d:e0:4c:a5:ac:f3:eb:36:8c:54:3a:60: ef:b9:6f:39:09:b9:51:25:b9:80:bb:a1:e1:18:af:6b:e8:43: 36:28:49:45:47:08:d5:a9:e6:ff:42:ff:e3:79:5e:48:a3:c8: 3b:15:cb:ce:d9:71:e0:21:03:34:77:6b:a8:1a:71:3e:c4:96: df:ef:6c:9e:94:3d:2a:c8:ee:e7:63:00:b4:5f:5e:31:32:52: 89:75:37:a0:62:d9:d8:54:21:a5:70:9a:60:aa:ac:1a:e7:44: 15:28:4a:84:65:69:71:a7:99:a4:98:9a:60:59:42:01:48:f7: 48:e5:93:1a:59:a5:3e:ac:5e:41:8a:af:b0:ec:93:a3:0d:72: 68:94:eb:a4:3a:e2:6e:fb:0d:8e:9a:7e:bf:ad:3e:4e:37:8d: 93:4c:50:f1:c1:f7:97:56:17:bf:b9:13:3d:0c:42:cf:45:1a: 76:74:bd:36:00:fe:64:eb:00:ab:49:fc:dd:6f:b6:1c:7e:a5: 61:23:34:a3:d8:c2:5b:87:4d:a0:6c:39:9c:a4:71:8b:08:84: b7:b1:8d:2e:e7:f3:ed:0a:df:95:6a:de:03:0c:86:9a:73:7a: 2b:25:09:22:23:ed:3d:6e:7d:42:77:c1:64:b5:d1:33:7b:a8: 54:7f:8b:85 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEuDenuYOhw46v8M1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNDAwNDUyM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk NDhhYmM3ZWQtMGNmNC00NzM1LWI1OGYtZDZlODZmZGEwZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH29w1bayCAQkfZxs7Q+SXNQp6QA9aBoFOqA 8SQAbdO4E6nwQbFO5eFb28tUXFWArTHHHwVjqzbynE9FyJt5dIegixPnQCGn0qEc b+8Ot5Vndgm35iGooq+t0tnOcDwq9s7d1+HRBzaJ7U2JT97AIS0pepnWYxyxH3jo l2b/LMBKg5U0/3coV6K8mWzUt8tHcAzTnp2pTx604SCi8Gr1IsG+mBJ/DzEx54yu LIRM0+tobgoZfgycT2+ENmZSJ9d8FKMjCcrZmiOI3+2wdTByvW+oDC/JUTEH5gv/ gM4U4er3OY3juxFy1afecCu+cEuCMUMcSkmW5/AItiaEpHvn1QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPw+hPYf/4wb03K1zbJx9mN5LbZKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZkYTBkOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQ4YWJjN2VkLTBjZjQtNDczNS1i NThmLWQ2ZTg2ZmRhMGQ5Ny80OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZk YTBkOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCf1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWjcbkJy4t4EylrPPrNoxU OmDvuW85CblRJbmAu6HhGK9r6EM2KElFRwjVqeb/Qv/jeV5Io8g7FcvO2XHgIQM0 d2uoGnE+xJbf72yelD0qyO7nYwC0X14xMlKJdTegYtnYVCGlcJpgqqwa50QVKEqE ZWlxp5mkmJpgWUIBSPdI5ZMaWaU+rF5Biq+w7JOjDXJolOukOuJu+w2Omn6/rT5O N42TTFDxwfeXVhe/uRM9DELPRRp2dL02AP5k6wCrSfzdb7YcfqVhIzSj2MJbh02g bDmcpHGLCIS3sY0u5/PtCt+Vat4DDIaac3orJQkiI+09bn1Cd8FktdEze6hUf4uF -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:21 2025 by rpki-client