$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08.cer File: 84808f12-9e5e-47d7-bdbe-79f0833fad08.cer (raw, json) Hash identifier: iuxpCvgwSyNY5R+zh5vhslI/ExqKUu7f8Tkhb+qekrM= Subject key identifier: D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7F4A734FFB424A51731E6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 12:45:22 +0000 Certificate not after: Sat 15 Jan 2028 13:45:22 +0000 Subordinate resources: IP: 2607:6980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:4a:73:4f:fb:42:4a:51:73:1e:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 12 12:45:22 2025 GMT Not After : Jan 15 13:45:22 2028 GMT Subject: CN=84808f12-9e5e-47d7-bdbe-79f0833fad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:ba:7c:7b:c8:85:ea:c7:e1:98:1c:65:52: 94:87:a8:7e:91:72:c2:6c:89:42:2b:40:97:7b:ee: 42:e0:ae:41:0c:98:e7:1d:98:00:72:18:e3:85:76: 76:fa:20:bf:47:2a:eb:dc:e2:53:bc:65:0f:b9:f9: a1:47:6c:06:3b:a5:d7:23:18:dc:29:fc:59:0c:6e: eb:8e:a6:62:cc:e0:ef:55:f8:7b:24:bb:6a:9e:75: 54:80:92:f2:25:81:d8:ef:e5:80:05:31:af:e0:de: 1f:86:84:b6:12:01:78:4a:48:ea:f6:f1:ba:b6:d9: 32:42:91:c9:5a:a3:38:67:ce:4f:d9:b7:02:ef:b4: 05:4b:1c:93:ed:26:b4:34:f5:c4:3a:34:89:0b:14: 13:ca:72:8e:1c:3a:b0:86:33:76:78:53:b1:d1:0c: b3:dd:35:5f:b1:fc:83:ed:d8:d7:1e:1f:dc:95:cd: e8:d5:0e:0a:af:6d:79:ee:d9:6c:7c:de:e4:26:71: 6b:b7:af:b3:62:4f:cc:7e:86:e1:36:80:6a:5a:fb: 8c:15:bb:f9:b6:7a:30:33:5f:66:2c:93:49:97:5a: 0a:6a:02:50:aa:4a:cc:b0:f1:4d:ef:2b:75:2a:52: 35:e3:25:df:32:2d:68:e1:5d:3b:6d:6d:b4:52:9e: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2607:6980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:56:4c:c8:28:b1:5f:59:43:ec:ad:3d:34:f6:7c:72:32:e6: 88:46:62:69:55:41:aa:71:2a:22:53:92:7f:a9:dd:bc:b7:bf: 4e:33:83:2e:5c:ad:ff:37:b8:21:49:dd:c5:7d:a6:b9:41:e5: 94:af:51:68:84:3e:04:68:65:df:ae:be:94:e8:7d:e4:24:7d: 69:10:35:00:21:21:19:72:10:cd:4c:a5:80:cd:2e:b6:6a:2d: be:36:48:01:9e:c2:6f:66:95:45:84:62:89:d5:1a:2e:84:66: 65:ae:61:a2:59:d9:52:1a:02:93:48:74:db:c4:80:9a:f1:0d: f2:69:d2:59:fd:3b:1c:8a:55:de:3f:0d:15:2e:1d:0b:94:50: 42:7c:8c:0f:56:0a:61:83:93:a7:e1:12:da:d9:95:fa:cf:67: c3:ee:c1:b9:60:b3:2e:9f:9f:da:9d:9d:e7:87:16:91:a2:3e: 7c:2e:95:7f:ef:fb:84:78:51:ba:04:f9:39:86:21:95:f8:f4: e0:dc:97:aa:f8:4f:d5:0e:39:91:50:2b:31:7d:28:eb:c3:bf: 53:1c:39:92:f1:99:cf:cc:39:28:23:ec:e7:ee:67:28:e5:34: 40:42:02:1c:38:b8:af:d4:4b:1d:21:ff:14:2e:2e:ba:77:de: ee:44:35:ec -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEt/SnNP+0JKUXMeYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMjEyNDUyMloXDTI4MDExNTEzNDUyMlowLzEtMCsGA1UEAxMk ODQ4MDhmMTItOWU1ZS00N2Q3LWJkYmUtNzlmMDgzM2ZhZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgi6fHvIherH4ZgcZVKUh6h+kXLCbIlCK0CX e+5C4K5BDJjnHZgAchjjhXZ2+iC/Ryrr3OJTvGUPufmhR2wGO6XXIxjcKfxZDG7r jqZizODvVfh7JLtqnnVUgJLyJYHY7+WABTGv4N4fhoS2EgF4Skjq9vG6ttkyQpHJ WqM4Z85P2bcC77QFSxyT7Sa0NPXEOjSJCxQTynKOHDqwhjN2eFOx0Qyz3TVfsfyD 7djXHh/clc3o1Q4Kr2157tlsfN7kJnFrt6+zYk/MfobhNoBqWvuMFbv5tnowM19m LJNJl1oKagJQqkrMsPFN7yt1KlI14yXfMi1o4V07bW20Up46+QIDAQABo4IEADCC A/wwHQYDVR0OBBYEFNGwsDOCVojdVnonhbGd0EooTRF2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NDgwOGYxMi05ZTVlLTQ3ZDctYmRiZS03OWYwODMzZmFkMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg0ODA4ZjEyLTllNWUtNDdkNy1i ZGJlLTc5ZjA4MzNmYWQwOC84NDgwOGYxMi05ZTVlLTQ3ZDctYmRiZS03OWYwODMz ZmFkMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB2mAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAhWTMgosV9ZQ+ytPTT2 fHIy5ohGYmlVQapxKiJTkn+p3by3v04zgy5crf83uCFJ3cV9prlB5ZSvUWiEPgRo Zd+uvpTofeQkfWkQNQAhIRlyEM1MpYDNLrZqLb42SAGewm9mlUWEYonVGi6EZmWu YaJZ2VIaApNIdNvEgJrxDfJp0ln9OxyKVd4/DRUuHQuUUEJ8jA9WCmGDk6fhEtrZ lfrPZ8Puwblgsy6fn9qdneeHFpGiPnwulX/v+4R4UboE+TmGIZX49ODcl6r4T9UO OZFQKzF9KOvDv1McOZLxmc/MOSgj7OfuZyjlNEBCAhw4uK/USx0h/xQuLrp33u5E New= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:48 2025 by rpki-client