$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5.cer File: 928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5.cer (raw, json) Hash identifier: SyJnbgxBRV6KOlDOymxqjpcXBUENk+0uB6bH0RCIcDE= Subject key identifier: 3B:B0:D3:BC:DA:97:A6:DD:44:3A:D9:7F:34:BC:E1:8C:08:84:C5:BD Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B86452C20BAF3CC154F5ABE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 00:45:23 +0000 Certificate not after: Tue 18 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 20385 AS: 32222 IP: 64.28.112.0/20 IP: 72.53.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:45:2c:20:ba:f3:cc:15:4f:5a:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 15 00:45:23 2025 GMT Not After : Jan 18 01:45:23 2028 GMT Subject: CN=928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:da:c7:df:52:4e:7a:83:fd:e7:88:12:d0: 10:8d:9a:15:9b:48:ef:f3:7b:01:f3:62:8d:3e:ef: 41:6b:68:27:38:6c:ad:7b:95:2b:17:1a:5c:c2:e9: fe:8c:59:70:60:e6:db:54:fe:20:8d:7c:f0:c3:bb: 0f:60:54:23:48:67:d5:05:63:01:b9:90:13:3d:87: 9f:ff:d9:b0:a8:a1:71:6a:67:5b:dc:03:ce:aa:d4: ef:e7:ab:6a:f6:d8:8a:e6:15:a9:59:50:53:1f:22: a9:3a:81:d7:ef:02:83:05:26:4e:46:60:55:b0:1d: e0:de:45:0a:8e:3c:3a:bd:60:a3:61:fc:0d:d8:13: 19:e0:ea:43:65:2b:33:01:30:4a:74:4d:98:eb:38: a1:86:90:82:40:70:b9:81:c7:57:3f:26:14:81:a1: 39:9e:e0:08:c1:92:e7:9e:5b:e4:fd:ed:85:27:c9: 51:bb:18:69:f5:5f:1c:7c:7d:8b:ac:98:58:0e:c9: 6a:a8:46:c2:02:15:c3:c3:64:9d:47:5d:ae:20:46: a9:14:65:4b:48:1d:fa:d3:30:67:bc:a3:e7:e1:bf: 18:df:d6:5e:ec:00:3e:90:7a:e0:9c:21:01:54:4b: a2:2e:00:69:83:eb:e3:8a:9e:a2:31:cc:06:36:fb: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:D3:BC:DA:97:A6:DD:44:3A:D9:7F:34:BC:E1:8C:08:84:C5:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5/928d26f4-9a2e-48bc-ab5a-36ea77d6f4f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.28.112.0/20 72.53.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20385 32222 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6a:30:30:17:a6:68:ea:72:e3:34:ad:ff:f7:4f:f6:68:f0: 2a:00:8e:ce:a0:c5:06:f6:b7:01:eb:9a:20:ea:50:8b:04:fe: 27:75:ce:e6:0d:cb:f2:87:0b:1a:6e:9d:7b:a5:88:97:98:34: 99:4a:62:a1:88:ae:d1:46:dc:1e:5c:f3:20:fe:16:99:37:f8: fe:21:7d:bb:65:6d:99:49:8e:dd:4d:6b:be:6a:b5:7e:33:2e: 8d:59:0d:52:42:7a:f1:48:20:77:6e:53:19:4f:19:fe:80:ba: 9a:57:d8:8b:c6:de:d4:fc:38:43:bd:b2:fc:26:88:70:37:eb: 6e:58:41:a2:d4:69:26:2b:a7:bc:84:fa:a9:62:1d:15:2b:ac: a2:91:e5:a3:e6:d4:02:db:03:04:32:42:6d:0a:eb:c3:8c:11: 02:e1:cb:28:3c:37:ca:76:b2:94:00:4a:64:44:79:42:85:fd: c1:0f:a6:c3:25:01:33:6c:3c:81:ca:16:f1:e4:1d:37:6f:f3: 5c:c0:04:c8:84:33:3d:9a:9d:e3:eb:1a:11:21:27:20:8c:49: a2:d7:9c:62:73:e5:06:72:80:8f:85:ab:38:60:67:de:db:4b: 03:0c:5b:9f:9f:6a:9b:ae:4c:dd:25:a1:7d:55:3b:fd:ec:54: 31:e9:b9:4b -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEuGRSwguvPMFU9avoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNTAwNDUyM1oXDTI4MDExODAxNDUyM1owLzEtMCsGA1UEAxMk OTI4ZDI2ZjQtOWEyZS00OGJjLWFiNWEtMzZlYTc3ZDZmNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYDax99STnqD/eeIEtAQjZoVm0jv83sB82KN Pu9Ba2gnOGyte5UrFxpcwun+jFlwYObbVP4gjXzww7sPYFQjSGfVBWMBuZATPYef /9mwqKFxamdb3APOqtTv56tq9tiK5hWpWVBTHyKpOoHX7wKDBSZORmBVsB3g3kUK jjw6vWCjYfwN2BMZ4OpDZSszATBKdE2Y6zihhpCCQHC5gcdXPyYUgaE5nuAIwZLn nlvk/e2FJ8lRuxhp9V8cfH2LrJhYDslqqEbCAhXDw2SdR12uIEapFGVLSB360zBn vKPn4b8Y39Ze7AA+kHrgnCEBVEuiLgBpg+vjip6iMcwGNvvihwIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFDuw07zal6bdRDrZfzS84YwIhMW9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 MjhkMjZmNC05YTJlLTQ4YmMtYWI1YS0zNmVhNzdkNmY0ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkyOGQyNmY0LTlhMmUtNDhiYy1h YjVhLTM2ZWE3N2Q2ZjRmNS85MjhkMjZmNC05YTJlLTQ4YmMtYWI1YS0zNmVhNzdk NmY0ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARAHHADBARINaAwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICT6ECAn3eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAABqMDAXpmjqcuM0rf/3T/Zo8CoAjs6gxQb2 twHrmiDqUIsE/id1zuYNy/KHCxpunXuliJeYNJlKYqGIrtFG3B5c8yD+Fpk3+P4h fbtlbZlJjt1Na75qtX4zLo1ZDVJCevFIIHduUxlPGf6AuppX2IvG3tT8OEO9svwm iHA3625YQaLUaSYrp7yE+qliHRUrrKKR5aPm1ALbAwQyQm0K68OMEQLhyyg8N8p2 spQASmREeUKF/cEPpsMlATNsPIHKFvHkHTdv81zABMiEMz2anePrGhEhJyCMSaLX nGJz5QZygI+FqzhgZ97bSwMMW5+fapuuTN0loX1VO/3sVDHpuUs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:57 2025 by rpki-client