$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer File: 87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer (raw, json) Hash identifier: 8mhQUJPRRPdeXBtapGb55zO3mkgevzzn0Kc4sQUEljQ= Subject key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B943A98F4C04A11825F1D6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 00:45:24 +0000 Certificate not after: Sun 23 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 11 AS: 1742 AS: 10578 IP: 128.103.0.0/16 IP: 140.247.0.0/16 IP: 192.5.66.0/24 IP: 192.5.89.0/24 IP: 192.43.216.0/24 IP: 192.54.223.0/24 IP: 192.131.102.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:3a:98:f4:c0:4a:11:82:5f:1d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 20 00:45:24 2025 GMT Not After : Jan 23 01:45:24 2028 GMT Subject: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:c6:17:4b:bb:7b:8b:e9:b5:a8:c4:8a:30: 74:99:04:e3:56:31:ae:58:c8:2b:38:98:0e:51:2f: 78:ac:2b:e1:ea:06:dc:8b:82:6c:0a:00:88:d1:31: 22:a1:a8:0a:b6:fd:2e:95:fe:a3:71:55:03:45:d7: a2:0e:55:07:d3:be:a9:97:a0:05:5a:e8:69:49:c8: 54:0d:bb:eb:e6:b6:96:44:71:be:4c:29:1f:8f:ab: 1e:b4:67:5f:50:74:f0:f9:db:d1:92:89:38:28:c5: d3:7e:3f:0b:02:b5:15:2f:be:03:22:42:2b:1d:3f: 09:87:e1:85:92:74:5c:a4:14:82:7e:99:43:35:25: a2:61:8e:78:f0:9c:3d:b6:98:da:49:3e:2e:cd:ac: e2:7e:29:54:51:42:4e:5a:1a:36:1d:4a:ed:b0:03: ab:9d:81:d2:c3:df:76:0f:d8:d1:8f:db:33:a4:b1: 9b:3f:a3:89:43:eb:8f:bd:50:e6:25:7e:80:c1:3f: 6f:af:3c:43:94:a2:bf:6d:5a:62:81:4a:ad:f4:10: d6:16:81:33:0f:29:32:fd:f9:6b:cb:76:04:9d:ba: e1:3a:0e:16:4a:3a:6e:ca:9f:98:8e:54:0d:b1:22: e2:d3:c6:a5:99:87:35:7a:d4:c8:59:02:4d:c3:62: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 128.103.0.0/16 140.247.0.0/16 192.5.66.0/24 192.5.89.0/24 192.43.216.0/24 192.54.223.0/24 192.131.102.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11 1742 10578 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f8:a2:03:5a:2d:64:68:d9:58:90:3f:1f:ef:d6:c4:e5:f1: 29:88:a1:7c:55:d0:02:3f:55:e1:9c:c7:03:c8:2f:5a:6b:d3: 43:45:42:6f:3a:2b:69:f5:ee:42:c8:c5:fb:d6:66:72:b7:2d: 08:27:71:be:97:8d:8a:7c:e5:89:0a:55:a3:01:59:f3:f4:8c: 76:77:a4:dc:c1:fa:49:c7:3f:e7:c1:80:ac:7d:6c:49:98:70: 7d:9d:1b:a9:8a:46:b5:9d:c1:80:33:25:fc:f4:fe:7b:cb:ad: 75:6f:c1:9c:b3:2f:e2:f5:46:78:72:6a:58:5d:09:1c:c4:74: 52:00:c5:7d:ee:0d:41:25:bd:da:cd:47:e5:c3:db:a0:1f:2c: c3:b5:22:ea:f6:1c:4a:c4:c2:d2:74:98:3a:75:13:33:47:66: 58:32:cb:9e:6a:6d:2c:95:3f:45:77:3a:63:05:c9:32:f1:31: 83:a4:bb:42:9e:33:c4:42:47:7f:d5:67:07:02:77:84:62:22: 87:f1:e0:6c:04:b3:86:15:b9:4c:b8:2a:34:e1:99:1e:3e:ab: e0:c6:d9:1c:1d:19:9a:81:e4:4a:54:25:92:12:c1:e8:96:ee: 24:33:e8:00:09:2e:85:a3:3c:11:f9:2b:03:03:c9:cc:65:da: 91:8a:37:c2 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEuUOpj0wEoRgl8dYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMDAwNDUyNFoXDTI4MDEyMzAxNDUyNFowLzEtMCsGA1UEAxMk ODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3ZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQbGF0u7e4vptajEijB0mQTjVjGuWMgrOJgO US94rCvh6gbci4JsCgCI0TEioagKtv0ulf6jcVUDRdeiDlUH076pl6AFWuhpSchU Dbvr5raWRHG+TCkfj6setGdfUHTw+dvRkok4KMXTfj8LArUVL74DIkIrHT8Jh+GF knRcpBSCfplDNSWiYY548Jw9tpjaST4uzazifilUUUJOWho2HUrtsAOrnYHSw992 D9jRj9szpLGbP6OJQ+uPvVDmJX6AwT9vrzxDlKK/bVpigUqt9BDWFoEzDyky/flr y3YEnbrhOg4WSjpuyp+YjlQNsSLi08almYc1etTIWQJNw2IrBQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFLq3DwLemnFypPDpQBOvAA7Ymlz9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg3NDE3ZmU2LTE3OTAtNDgxYS05 YmRjLTY1NzRjMGVmN2Q3Yy84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBl ZjdkN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMC4EAgABMCgDAwCAZwMDAIz3AwQAwAVCAwQAwAVZAwQAwCvYAwQA wDbfAwQAwINmMCAGCCsGAQUFBwEIAQH/BBEwD6ANMAsCAQsCAgbOAgIpUjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBl+KIDWi1kaNlYkD8f79bE5fEpiKF8VdACP1XhnMcDyC9aa9NDRUJvOitp 9e5CyMX71mZyty0IJ3G+l42KfOWJClWjAVnz9Ix2d6TcwfpJxz/nwYCsfWxJmHB9 nRupika1ncGAMyX89P57y611b8Gcsy/i9UZ4cmpYXQkcxHRSAMV97g1BJb3azUfl w9ugHyzDtSLq9hxKxMLSdJg6dRMzR2ZYMsueam0slT9FdzpjBcky8TGDpLtCnjPE Qkd/1WcHAneEYiKH8eBsBLOGFblMuCo04ZkePqvgxtkcHRmageRKVCWSEsHolu4k M+gACS6FozwR+SsDA8nMZdqRijfC -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:42 2025 by rpki-client