$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer File: 65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer (raw, json) Hash identifier: 7XVmbo4gfGUqyPKsWFosd/bMZV3xY49WdgHrMPkXopQ= Subject key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B916FE7D8BDC8945AF12C9E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Oct 2025 00:45:23 +0000 Certificate not after: Sat 22 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 399575 IP: 74.85.208.0/20 IP: 206.204.224.0/20 IP: 216.205.96.0/20 IP: 2606:67c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:6f:e7:d8:bd:c8:94:5a:f1:2c:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 19 00:45:23 2025 GMT Not After : Jan 22 01:45:23 2028 GMT Subject: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:3a:1e:d9:c1:8b:e5:05:4a:d1:92:c3:36: 56:ca:15:73:09:9b:80:c6:4c:6e:9d:f1:dd:a9:ae: d6:b8:07:5a:4b:42:f4:2f:e4:ce:01:63:68:d4:1e: 6b:60:21:de:85:43:13:f3:b1:00:f2:c1:98:0d:de: 5d:49:e8:7a:af:2a:cd:a1:ac:44:35:54:0e:93:17: f2:77:e6:38:1f:15:39:8d:44:e1:89:55:b7:55:fc: 14:c3:0a:3c:e6:e2:ea:e5:dd:b0:d8:f9:4a:1d:8e: 00:7c:94:1a:06:1b:f7:e8:6b:fa:af:cb:89:e7:4d: db:88:a1:a2:55:86:7f:ad:89:e9:25:d1:c0:7f:84: 59:08:ba:6b:6c:e1:d8:ad:e6:e3:1f:88:9e:d8:65: 64:f3:f8:35:bb:90:10:cd:b8:b0:86:48:20:cc:dd: 9a:d9:a1:0d:4e:ac:39:72:4e:7b:23:89:ab:73:a0: dc:8a:a9:f6:bc:15:fd:2b:3f:f2:06:09:98:8f:8c: e3:76:32:e9:a1:36:51:3e:36:4b:01:08:ef:eb:f6: 26:de:5c:b6:c6:04:97:1f:40:53:b2:3f:39:d3:84: 65:1f:f2:22:c0:1d:af:fb:ce:d8:a1:ec:09:af:58: 4b:f5:3d:41:98:0a:14:85:f8:e4:95:2c:63:67:a9: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 74.85.208.0/20 206.204.224.0/20 216.205.96.0/20 IPv6: 2606:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399575 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:55:f3:5b:ec:52:6b:4c:b8:b7:06:14:04:ca:66:28:9b:0d: fa:86:b3:4a:83:9f:da:89:da:b7:64:ff:ad:fa:f9:1c:78:70: f4:70:ab:ca:46:d8:dc:d0:d1:4c:f7:d1:ea:39:a0:8d:19:70: 4e:55:e5:7c:86:3c:32:13:cb:cf:ab:a9:5b:a3:d3:d1:99:65: f5:36:7a:0e:62:63:c0:53:6c:70:cd:2e:11:d6:74:0d:95:fb: 7b:04:54:7b:bd:b1:d7:9d:8b:1b:bc:ab:73:48:6d:f5:af:6c: 0b:d1:6c:49:96:ea:97:0e:df:64:a1:a9:fc:85:5c:ec:1d:6d: f1:8e:e9:93:45:20:77:30:85:58:88:15:01:d6:c6:c1:85:ee: 27:f0:a7:4c:58:26:e9:6a:2b:b8:fe:94:69:e9:d1:0c:09:8c: 1e:e9:05:4b:0a:b7:59:3c:c6:e0:34:c6:67:4c:54:75:dd:55: 29:24:02:f5:00:e7:c0:bf:f7:f1:33:5d:0a:e8:58:c0:76:c1: 37:f6:8d:27:4d:ef:8f:82:01:8c:c9:9c:37:28:3c:46:b7:5b: e1:4e:6b:77:87:9d:fb:f0:fa:b2:ac:83:af:81:a6:bd:0c:d0: e7:75:91:91:3b:a7:57:15:fd:dc:0e:bd:7d:e8:f0:7c:29:29: a0:69:a6:ec -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEuRb+fYvciUWvEsnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxOTAwNDUyM1oXDTI4MDEyMjAxNDUyM1owLzEtMCsGA1UEAxMk NjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNmOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N06HtnBi+UFStGSwzZWyhVzCZuAxkxunfHd qa7WuAdaS0L0L+TOAWNo1B5rYCHehUMT87EA8sGYDd5dSeh6ryrNoaxENVQOkxfy d+Y4HxU5jUThiVW3VfwUwwo85uLq5d2w2PlKHY4AfJQaBhv36Gv6r8uJ503biKGi VYZ/rYnpJdHAf4RZCLprbOHYrebjH4ie2GVk8/g1u5AQzbiwhkggzN2a2aENTqw5 ck57I4mrc6Dciqn2vBX9Kz/yBgmYj4zjdjLpoTZRPjZLAQjv6/Ym3ly2xgSXH0BT sj8504RlH/IiwB2v+87YoewJr1hL9T1BmAoUhfjklSxjZ6m9WQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFLvVu7SxMq0MGNHmARMDDMFNNLjCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY1Zjg3ZmMzLWZjNzktNGRiOS05 NWJjLWIyZDg0YzRjZjhjYS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0 Y2Y4Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARKVdADBATOzOADBATYzWAwDQQCAAIwBwMFACYG Z8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhjXMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGhV81vsUmtM uLcGFATKZiibDfqGs0qDn9qJ2rdk/636+Rx4cPRwq8pG2NzQ0Uz30eo5oI0ZcE5V 5XyGPDITy8+rqVuj09GZZfU2eg5iY8BTbHDNLhHWdA2V+3sEVHu9sdedixu8q3NI bfWvbAvRbEmW6pcO32ShqfyFXOwdbfGO6ZNFIHcwhViIFQHWxsGF7ifwp0xYJulq K7j+lGnp0QwJjB7pBUsKt1k8xuA0xmdMVHXdVSkkAvUA58C/9/EzXQroWMB2wTf2 jSdN74+CAYzJnDcoPEa3W+FOa3eHnfvw+rKsg6+Bpr0M0Od1kZE7p1cV/dwOvX3o 8HwpKaBppuw= -----END CERTIFICATE-----Generated at Sun Oct 19 20:26:34 2025 by rpki-client