$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer File: 692aac29-6d3b-4bdf-9238-da449246d5ab.cer (raw, json) Hash identifier: WENEqfbTA0JCbVRfec9xt3v/C8/4jWxSeydrwhj+PgI= Subject key identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7DE51CA90966C002A3EB6444 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 64.40.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:a9:09:66:c0:02:a3:eb:64:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=692aac29-6d3b-4bdf-9238-da449246d5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:8d:45:c7:e9:cd:31:cb:f0:48:f2:ae:75: 4f:ba:be:79:d6:f5:56:17:7d:97:e8:b7:76:b8:c1: 9d:a8:32:53:43:c9:b2:92:f3:e3:0b:48:83:1e:7f: 8e:1c:68:60:8f:55:cc:cc:e4:1b:c3:2d:e0:58:51: b7:db:f6:fb:f3:db:45:67:f4:00:4f:7e:16:46:46: b6:3e:ef:be:c4:70:76:22:7f:7f:65:2d:0d:37:ce: 0d:5a:a5:2f:10:29:db:ac:8b:60:51:96:1b:48:66: 67:07:a5:3d:2f:4b:8b:8e:ce:a0:e2:c6:8d:e4:06: d1:54:c6:f2:86:66:a8:e5:a9:56:68:15:4e:4f:82: cc:cb:53:b2:67:09:e9:ea:db:36:a8:44:b3:c6:6f: f6:c4:a0:57:c5:1a:fa:cc:50:3c:41:e7:c2:63:b5: af:ff:4e:32:fc:3d:3d:82:04:7c:2c:53:09:5a:1e: 32:cd:15:51:c8:9f:53:01:c2:61:95:39:c2:c6:da: a8:5c:17:d3:a7:d7:6e:16:a6:27:a4:11:3d:88:9f: 91:bb:8b:2c:36:54:90:8a:ce:7e:c9:61:44:9c:01: b4:b6:11:c6:d9:7b:e3:5b:ba:4f:67:28:98:b9:17: c7:ab:2d:21:2f:0c:b0:d8:48:a0:b2:8e:39:4d:f5: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.40.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:58:e7:84:54:ef:80:0f:77:a6:28:2c:3f:04:60:17:cf:6c: f7:2b:c5:9b:3a:5d:1a:57:3c:c3:67:b8:02:f7:94:94:9e:b1: 81:6a:aa:01:ad:1e:c2:a6:55:ba:52:8c:0d:f3:66:b4:b7:2d: ee:f8:e9:3c:5b:c3:ca:7c:d4:b3:b1:38:9e:d8:37:53:a0:15: d7:9f:de:93:96:a4:26:c3:c2:fa:55:55:0d:c8:6a:73:31:38: 32:12:87:18:e0:48:de:4c:55:70:7d:a5:a6:04:bd:f7:dd:2f: 1e:7a:08:b0:37:7e:a2:b3:aa:3d:d2:8c:4d:58:66:90:5f:72: 95:41:82:df:49:c5:dc:ad:65:a5:88:86:ec:05:ca:c4:bf:bf: 64:12:a2:8b:b0:a5:fe:bc:37:8d:b4:02:da:f4:4c:5f:a5:03: 5c:16:14:16:ea:59:8d:b4:34:38:e4:d8:04:e4:dd:6c:e6:e4: 1a:a2:f7:3c:27:45:78:d2:fd:bb:b6:09:47:73:b5:b1:1f:be: 08:a2:c8:2b:53:2e:bb:d8:9e:ca:aa:33:fc:a6:34:15:3c:9a: 99:80:e8:ae:6d:86:23:fc:14:4b:97:42:2b:fb:2e:c2:7a:0d: 10:2a:0b:eb:99:45:a5:bc:19:e7:90:b8:94:4e:22:e4:aa:e1: 4a:01:3b:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt95RypCWbAAqPrZEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk NjkyYWFjMjktNmQzYi00YmRmLTkyMzgtZGE0NDkyNDZkNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpmNRcfpzTHL8EjyrnVPur551vVWF32X6Ld2 uMGdqDJTQ8mykvPjC0iDHn+OHGhgj1XMzOQbwy3gWFG32/b789tFZ/QAT34WRka2 Pu++xHB2In9/ZS0NN84NWqUvECnbrItgUZYbSGZnB6U9L0uLjs6g4saN5AbRVMby hmao5alWaBVOT4LMy1OyZwnp6ts2qESzxm/2xKBXxRr6zFA8QefCY7Wv/04y/D09 ggR8LFMJWh4yzRVRyJ9TAcJhlTnCxtqoXBfTp9duFqYnpBE9iJ+Ru4ssNlSQis5+ yWFEnAG0thHG2XvjW7pPZyiYuRfHqy0hLwyw2Eigso45TfX/TwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOpWEDJfZw1r1BPYTmJZJrW/SYjmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0NmQ1YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY5MmFhYzI5LTZkM2ItNGJkZi05 MjM4LWRhNDQ5MjQ2ZDVhYi82OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0 NmQ1YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAKMwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU1jnhFTvgA93pigsPwRg F89s9yvFmzpdGlc8w2e4AveUlJ6xgWqqAa0ewqZVulKMDfNmtLct7vjpPFvDynzU s7E4ntg3U6AV15/ek5akJsPC+lVVDchqczE4MhKHGOBI3kxVcH2lpgS9990vHnoI sDd+orOqPdKMTVhmkF9ylUGC30nF3K1lpYiG7AXKxL+/ZBKii7Cl/rw3jbQC2vRM X6UDXBYUFupZjbQ0OOTYBOTdbObkGqL3PCdFeNL9u7YJR3O1sR++CKLIK1Muu9ie yqoz/KY0FTyamYDorm2GI/wUS5dCK/suwnoNECoL65lFpbwZ55C4lE4i5KrhSgE7 PQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:54:20 2025 by rpki-client