$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer File: 5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer (raw, json) Hash identifier: Vby6Tr3HDLpaE8Kh44KElRKncMjEPtnjeCMf8vAjCNc= Subject key identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7DE51C5C12EA4B7F45B3FCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 64.49.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:5c:12:ea:4b:7f:45:b3:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:ed:de:d2:68:4a:eb:7c:17:ce:bc:fd:32: 86:50:d1:8a:fb:86:e8:81:ac:9d:6c:45:6e:3c:ef: b0:99:42:b3:f0:1f:bd:f7:5c:fa:d9:ce:3e:35:9c: 59:89:d4:71:41:3e:05:5c:05:f9:f4:98:46:00:73: 0b:f6:1b:7e:93:4c:6f:2a:0e:5a:a7:c7:c0:9d:37: d5:e9:d3:52:08:15:f9:be:ee:bd:83:4d:73:83:a1: 94:c4:14:e5:e0:a3:3b:b5:b8:60:1f:3e:6d:83:ca: d2:d6:3d:b4:40:50:2b:64:13:b9:ad:3a:72:40:89: 33:3b:74:55:be:85:c9:5e:c3:1b:94:b8:e7:e4:cc: 03:97:e8:16:63:70:d8:5a:bb:89:15:af:95:32:25: 76:05:30:63:4f:f8:31:bf:6a:4e:d7:94:c4:fa:4e: 09:2c:ec:a0:df:c1:9f:f9:be:e0:b8:19:a5:78:d2: 76:46:7d:4d:ac:94:bd:03:c8:3f:07:52:fd:80:71: 60:36:4e:37:d7:a2:73:c3:84:48:3e:f9:a0:73:d8: 52:ca:a5:61:f4:a3:0d:6b:4a:8a:79:fd:b7:1f:5e: be:8d:83:49:34:a0:30:90:2b:69:4c:cc:2f:97:0c: d7:89:65:b1:94:58:b3:e5:ed:eb:4b:9f:b0:d6:e9: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.49.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ab:0f:d5:00:e7:7a:ef:6a:12:20:94:9b:71:77:e7:c7:cf: b3:e0:30:34:67:e1:08:b0:79:66:b6:53:88:c5:97:99:ce:ab: e6:c4:db:29:d5:b9:1a:f2:a9:8d:92:72:71:bc:51:01:78:23: 58:5e:26:09:66:15:ea:25:aa:b3:22:0a:38:7c:f3:f9:67:8a: ae:07:a7:c9:0d:f5:98:41:80:25:ad:b5:5f:5a:1c:6b:9c:ba: 67:15:32:01:ff:92:aa:26:f2:e7:43:b6:d8:d5:ae:5a:87:6c: e3:3f:92:6b:89:95:a0:80:d8:e2:5a:08:2c:c8:e1:85:5b:ba: f0:f4:ef:e2:ab:2b:1e:e3:ce:17:88:37:7a:9d:35:b9:33:65: 9a:39:d1:2e:ee:71:67:18:c6:d5:b2:13:d2:9d:2b:b5:b7:f4: 35:cd:10:8d:50:9a:5c:e6:16:e7:85:42:5e:4d:f8:25:68:7f: 23:e1:9a:a9:2d:f5:da:43:67:9b:a6:df:29:f9:8b:36:14:43: f2:d2:15:37:79:cd:b6:14:b7:44:61:6e:f5:d1:d6:d8:86:e8: e0:a8:46:38:c3:cd:0d:a3:bb:2d:2a:cb:a8:0e:8a:77:b5:9e: 98:03:5e:2e:b8:b9:e5:91:4f:85:c1:45:e8:40:6f:3f:c8:de: 4e:04:32:e7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt95RxcEupLf0Wz/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk NWMxOTdhOGEtNGJjYy00YTFiLThhMDItMDZiMzYxMWYwYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIzt3tJoSut8F868/TKGUNGK+4bogaydbEVu PO+wmUKz8B+991z62c4+NZxZidRxQT4FXAX59JhGAHML9ht+k0xvKg5ap8fAnTfV 6dNSCBX5vu69g01zg6GUxBTl4KM7tbhgHz5tg8rS1j20QFArZBO5rTpyQIkzO3RV voXJXsMblLjn5MwDl+gWY3DYWruJFa+VMiV2BTBjT/gxv2pO15TE+k4JLOyg38Gf +b7guBmleNJ2Rn1NrJS9A8g/B1L9gHFgNk4316Jzw4RIPvmgc9hSyqVh9KMNa0qK ef23H16+jYNJNKAwkCtpTMwvlwzXiWWxlFiz5e3rS5+w1unfzQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLmF0xAEgKnIDIlToph4j8IWI4txMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 YzE5N2E4YS00YmNjLTRhMWItOGEwMi0wNmIzNjExZjBiNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVjMTk3YThhLTRiY2MtNGExYi04 YTAyLTA2YjM2MTFmMGI2Zi81YzE5N2E4YS00YmNjLTRhMWItOGEwMi0wNmIzNjEx ZjBiNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAMTgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJKsP1QDneu9qEiCUm3F3 58fPs+AwNGfhCLB5ZrZTiMWXmc6r5sTbKdW5GvKpjZJycbxRAXgjWF4mCWYV6iWq syIKOHzz+WeKrgenyQ31mEGAJa21X1oca5y6ZxUyAf+Sqiby50O22NWuWods4z+S a4mVoIDY4loILMjhhVu68PTv4qsrHuPOF4g3ep01uTNlmjnRLu5xZxjG1bIT0p0r tbf0Nc0QjVCaXOYW54VCXk34JWh/I+GaqS312kNnm6bfKfmLNhRD8tIVN3nNthS3 RGFu9dHW2Ibo4KhGOMPNDaO7LSrLqA6Kd7WemANeLri55ZFPhcFF6EBvP8jeTgQy 5w== -----END CERTIFICATE-----Generated at Sun Oct 19 23:03:03 2025 by rpki-client