$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer File: 6a38b089-4bb1-4c65-837b-853a9a3398e1.cer (raw, json) Hash identifier: gjU53c2lzRuQcavveMYBknrscIuHnTdVkpczTbzeFU0= Subject key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7DE51CA0E9BF2A68D7A2E3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 64.49.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:a0:e9:bf:2a:68:d7:a2:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5a:47:3e:ca:9e:9c:03:8f:be:a3:e2:02:24: 60:3e:ed:81:14:83:88:04:ee:7e:4b:2f:09:c3:2c: ad:13:46:80:1d:61:04:f2:3a:ba:e4:a4:07:a3:8e: c6:81:48:45:60:14:fc:31:67:60:94:b3:7f:e5:5a: 63:db:5a:72:05:b1:54:14:62:e7:a2:1e:b4:0c:4d: 79:c6:89:c4:a1:b5:3d:1b:3e:f1:65:b2:86:87:f9: 7c:c9:c0:d4:a1:be:68:3f:28:34:f0:85:aa:07:4f: 78:a9:12:fd:20:2c:96:1c:a2:63:e3:4f:1a:f1:77: 1d:f9:5b:ad:8c:44:4c:9d:70:1c:70:29:27:e7:50: cc:23:01:c2:ea:e9:35:32:36:63:23:62:83:8e:fb: c5:a6:c0:a2:34:db:a3:23:37:ce:7e:0a:d7:98:b5: 67:0b:01:45:8c:72:5a:c5:9d:08:e9:cf:d4:98:29: ee:d6:92:26:04:ae:38:b1:65:f0:6c:d2:34:50:f9: cc:cf:9f:a9:24:64:b5:e6:8b:92:0a:27:f6:6b:c5: 5a:52:94:39:87:3f:b5:ce:c5:bc:87:b7:b1:82:a0: 5b:ae:28:4f:1d:db:0b:aa:37:68:5a:35:27:b0:87: 18:a8:49:40:cf:04:6b:18:e0:54:ef:57:60:1c:f4: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6d:72:9f:fb:2f:7b:69:d8:b8:e1:79:00:fb:79:6d:24:f0: 52:7d:af:22:1b:31:3e:80:51:42:45:21:e5:37:11:cf:50:16: 4a:5c:11:7d:19:2c:0c:2b:4e:7c:6b:19:ba:35:b8:51:dd:6e: 4c:06:7f:42:e9:c8:4e:f2:5c:8e:b8:0b:34:ab:c8:68:37:8a: a9:62:3e:15:6c:63:b4:bb:16:e8:4e:12:d5:80:b4:9f:53:06: c0:d7:b6:b5:ab:90:90:7f:3c:78:58:ab:7a:33:a8:8b:73:9d: 3d:0b:90:59:1e:78:29:63:ff:6f:d5:7d:05:2c:a9:a0:e4:f9: 8b:11:da:e3:4c:83:72:08:b7:8f:f7:22:26:a2:36:3a:89:ca: 05:76:2e:97:9f:5e:43:ab:5b:ea:a2:13:fe:fd:f0:16:8f:19: ea:b2:87:1b:6b:a3:39:84:ca:63:b7:c9:07:d0:fe:aa:d5:59: a7:d0:3c:91:3a:4a:71:24:be:44:e3:04:6d:63:8a:3c:d0:81: 81:07:9b:75:44:a0:dd:00:0d:ff:8c:bf:0d:40:10:59:48:de: 15:f4:ba:06:ef:ca:5a:91:63:cc:02:ad:c0:b5:15:ae:a5:ab: ae:4c:20:56:1a:d3:0b:27:13:8f:3e:7d:58:16:c3:af:3d:d5: 8d:8f:57:fc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt95Ryg6b8qaNei46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk NmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31pHPsqenAOPvqPiAiRgPu2BFIOIBO5+Sy8J wyytE0aAHWEE8jq65KQHo47GgUhFYBT8MWdglLN/5Vpj21pyBbFUFGLnoh60DE15 xonEobU9Gz7xZbKGh/l8ycDUob5oPyg08IWqB094qRL9ICyWHKJj408a8Xcd+Vut jERMnXAccCkn51DMIwHC6uk1MjZjI2KDjvvFpsCiNNujIzfOfgrXmLVnCwFFjHJa xZ0I6c/UmCnu1pImBK44sWXwbNI0UPnMz5+pJGS15ouSCif2a8VaUpQ5hz+1zsW8 h7exgqBbrihPHdsLqjdoWjUnsIcYqElAzwRrGOBU71dgHPSj+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGGLottCC96c4BlYJR6kx+cgBf26MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzZhMzhiMDg5LTRiYjEtNGM2NS04 MzdiLTg1M2E5YTMzOThlMS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEz Mzk4ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAMQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKW1yn/sve2nYuOF5APt5 bSTwUn2vIhsxPoBRQkUh5TcRz1AWSlwRfRksDCtOfGsZujW4Ud1uTAZ/QunITvJc jrgLNKvIaDeKqWI+FWxjtLsW6E4S1YC0n1MGwNe2tauQkH88eFirejOoi3OdPQuQ WR54KWP/b9V9BSypoOT5ixHa40yDcgi3j/ciJqI2OonKBXYul59eQ6tb6qIT/v3w Fo8Z6rKHG2ujOYTKY7fJB9D+qtVZp9A8kTpKcSS+ROMEbWOKPNCBgQebdUSg3QAN /4y/DUAQWUjeFfS6Bu/KWpFjzAKtwLUVrqWrrkwgVhrTCycTjz59WBbDrz3VjY9X /A== -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:36 2025 by rpki-client