$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer File: 65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer (raw, json) Hash identifier: caAkX5p7VObYPjGkVKptaQTSALLLWEuafQllViaMjN8= Subject key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B837A7C26410640BA1C135380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 00:45:23 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 141.225.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:7a:7c:26:41:06:40:ba:1c:13:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 14 00:45:23 2025 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:56:2b:22:62:fc:b4:17:a9:68:e8:68:51: e6:40:17:ff:85:c6:f8:1b:94:10:19:fd:4e:b7:03: 09:15:25:25:6b:75:aa:0e:a0:48:c3:0c:97:8e:1a: e8:45:99:e5:02:0c:8a:17:2a:f0:54:97:bd:01:9f: 6f:f7:1b:7e:ee:85:48:3d:5a:41:a8:06:ee:06:3a: bf:40:a6:85:25:69:08:b0:31:46:c2:c5:1f:47:8c: eb:12:b6:36:fb:ce:be:31:9f:2a:c9:29:ed:92:02: fc:5c:e1:08:dd:f8:64:8c:ce:11:1c:ea:52:18:b4: 51:ae:cf:e0:6d:6d:0f:54:e3:80:f4:20:0f:f0:22: 0a:2e:aa:da:f1:36:d8:7c:01:0c:d6:e1:f7:9b:b9: ba:4f:b1:9b:39:21:cb:4f:91:88:52:6a:28:72:19: f7:52:fe:df:49:d5:fe:c7:d9:e2:c3:d0:85:da:f8: 85:93:dd:33:fa:95:df:60:bf:80:d1:b9:2e:3b:20: 73:dd:5c:e6:3a:c2:23:6d:77:27:6c:de:a8:62:69: 21:56:d0:1d:57:57:5f:45:83:82:bf:31:16:7d:ca: 60:b9:a1:2e:c6:98:69:00:70:9c:e9:7a:25:9d:2a: 06:6e:bb:e7:48:f9:a4:98:77:33:12:ba:ac:86:3b: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 141.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0a:94:99:4a:50:8a:a3:c6:ea:b4:f9:60:c2:60:c6:4f:ad: 21:8d:52:58:e4:75:98:3c:42:f0:0e:76:9f:a3:26:6c:c0:22: 93:a8:6a:8c:b5:c4:d5:a6:c8:3f:75:b6:df:42:a7:9b:32:3b: 2f:c4:a2:96:da:70:61:35:f0:91:bc:f6:fc:4d:0d:38:a6:0e: b1:82:d4:58:66:78:67:bf:0a:23:d2:38:91:c9:79:20:19:5a: 8b:be:3e:81:76:26:7f:e0:65:05:53:34:50:fd:93:a8:09:80: ba:b3:ed:42:70:59:8a:d6:50:09:60:0f:89:ef:60:41:bd:4f: 01:82:0f:f9:25:c0:df:c3:b1:c2:1a:04:fc:4d:da:5a:95:29: ee:a9:07:f9:25:ed:a7:b6:44:0e:5d:a0:53:f3:ad:41:a8:1d: eb:17:d0:f9:58:08:b4:f9:50:73:99:78:77:18:a7:62:05:7f: 2a:9d:42:a1:33:af:52:aa:e6:dc:cf:56:91:e4:c4:9a:76:64: 77:cb:5c:77:15:d5:0d:38:aa:0e:44:b3:a2:56:56:45:15:63: 13:59:9b:e6:96:74:b7:df:f2:c6:59:10:2d:27:d4:ff:7d:1c: 95:d7:10:0b:2e:63:56:8b:6b:3a:03:27:ff:81:11:d0:6d:4c: c8:30:43:89 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEuDenwmQQZAuhwTU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNDAwNDUyM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk NjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ZWKyJi/LQXqWjoaFHmQBf/hcb4G5QQGf1O twMJFSUla3WqDqBIwwyXjhroRZnlAgyKFyrwVJe9AZ9v9xt+7oVIPVpBqAbuBjq/ QKaFJWkIsDFGwsUfR4zrErY2+86+MZ8qySntkgL8XOEI3fhkjM4RHOpSGLRRrs/g bW0PVOOA9CAP8CIKLqra8TbYfAEM1uH3m7m6T7GbOSHLT5GIUmoochn3Uv7fSdX+ x9niw9CF2viFk90z+pXfYL+A0bkuOyBz3VzmOsIjbXcnbN6oYmkhVtAdV1dfRYOC vzEWfcpguaEuxphpAHCc6XolnSoGbrvnSPmkmHczErqshjvbOwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFKwS5JhL8gc8qYw/iCEG3SZl/FymMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY1ZWZkZDc5LWEyYzItNGZkNC1h ZDFhLTVkNTM4NDEzODQxMi82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQx Mzg0MTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCN4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABCpSZSlCKo8bqtPlgwmDG T60hjVJY5HWYPELwDnafoyZswCKTqGqMtcTVpsg/dbbfQqebMjsvxKKW2nBhNfCR vPb8TQ04pg6xgtRYZnhnvwoj0jiRyXkgGVqLvj6BdiZ/4GUFUzRQ/ZOoCYC6s+1C cFmK1lAJYA+J72BBvU8Bgg/5JcDfw7HCGgT8TdpalSnuqQf5Je2ntkQOXaBT861B qB3rF9D5WAi0+VBzmXh3GKdiBX8qnUKhM69Squbcz1aR5MSadmR3y1x3FdUNOKoO RLOiVlZFFWMTWZvmlnS33/LGWRAtJ9T/fRyV1xALLmNWi2s6Ayf/gRHQbUzIMEOJ -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:32 2025 by rpki-client