$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer File: 9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer (raw, json) Hash identifier: KR3ujVogZB/UZck8TPT3mB9fSJS76+eyLHUjMp/OYkQ= Subject key identifier: 4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B890FDBAC13B4CEF13BC50280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 00:45:24 +0000 Certificate not after: Wed 19 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 31844 IP: 97.107.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:0f:db:ac:13:b4:ce:f1:3b:c5:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 16 00:45:24 2025 GMT Not After : Jan 19 01:45:24 2028 GMT Subject: CN=9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:25:ee:49:45:9c:76:8a:eb:32:54:ba:a4: 74:9d:b2:37:16:5d:d9:e5:6c:25:57:cf:db:fd:38: 85:c9:d4:51:f2:39:2c:e6:2e:07:fe:0f:17:8f:6d: d0:47:ac:02:40:7f:99:8c:c0:aa:71:6f:e5:67:9e: 24:cd:b0:51:85:01:cb:9e:83:b7:83:56:48:ec:7b: 29:33:53:4f:25:18:94:03:e0:5a:ff:da:83:48:19: c1:77:42:5c:73:54:32:7d:53:c1:54:85:b6:a3:dd: c0:14:7a:90:9e:d6:66:ef:c9:4e:87:5c:63:a4:98: 71:26:be:4b:b3:28:ad:5b:f0:02:ea:aa:7b:2d:b2: ab:72:1b:c1:4d:2d:c9:b9:05:7f:49:81:37:c1:3a: 50:51:6f:fb:ca:87:70:26:33:1a:3d:18:6d:af:61: b2:04:16:8c:69:ab:8a:ce:e0:60:5d:80:92:a9:d5: 32:b1:49:ea:61:ad:b3:3c:e3:1a:85:57:0a:07:02: bc:11:1f:66:f2:24:8d:0a:8b:71:1b:c5:7d:06:ef: cc:78:cf:89:75:ed:d5:94:39:25:ee:cd:de:54:6b: 27:bb:36:7a:18:c3:51:b0:5f:d8:63:8f:27:6e:af: 88:31:f8:31:25:13:dd:cd:50:ea:75:d3:66:74:34: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 97.107.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b4:d5:f6:59:67:ca:d2:7b:d2:d3:a1:c2:26:18:d5:27:04: 56:6a:8d:f1:4f:b2:23:28:95:9e:18:02:91:02:09:8e:cd:e0: 1e:54:ae:cd:d9:a9:da:ed:87:d2:ac:54:86:d1:23:0f:ac:66: 42:4e:2f:a4:8f:29:1f:3b:f0:72:38:76:a6:34:1b:c9:ca:88: 99:ad:16:8f:c0:4b:93:e9:fb:09:df:95:9c:f8:48:02:ee:35: 06:9f:91:0c:bb:0b:da:d9:d2:98:93:1a:26:8e:11:c9:74:ec: b2:a2:29:9f:5f:af:ed:ab:c9:a2:85:69:30:dd:57:f4:36:aa: bb:8d:ab:2f:d9:d3:fa:40:b6:b9:e3:19:9f:a8:a8:74:a4:17: b9:af:c3:1b:e2:c7:e0:54:cd:68:09:05:53:a0:e0:6a:8e:de: 58:6a:ae:3e:66:31:64:c2:ff:0e:70:28:1f:ee:c3:90:29:b6: a9:2d:9a:f4:9b:51:1e:fa:b8:d8:d2:2d:47:aa:e1:6f:a3:0e: 7e:11:93:07:18:a7:54:75:32:0e:13:0f:f9:cd:b0:62:72:96: bd:fe:e6:48:34:85:5e:84:fa:7d:c8:d4:44:8a:a8:6b:bb:ba: 5a:64:d6:66:85:5b:3b:d9:e2:df:fb:8d:1c:ff:e8:bb:d4:b9: 4f:b7:24:74 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuJD9usE7TO8TvFAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNjAwNDUyNFoXDTI4MDExOTAxNDUyNFowLzEtMCsGA1UEAxMk OTMwMGFiYTAtZDU2YS00NGJhLThmZjItNmM0YWUyYjIyYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLEl7klFnHaK6zJUuqR0nbI3Fl3Z5WwlV8/b /TiFydRR8jks5i4H/g8Xj23QR6wCQH+ZjMCqcW/lZ54kzbBRhQHLnoO3g1ZI7Hsp M1NPJRiUA+Ba/9qDSBnBd0Jcc1QyfVPBVIW2o93AFHqQntZm78lOh1xjpJhxJr5L syitW/AC6qp7LbKrchvBTS3JuQV/SYE3wTpQUW/7yodwJjMaPRhtr2GyBBaMaauK zuBgXYCSqdUysUnqYa2zPOMahVcKBwK8ER9m8iSNCotxG8V9Bu/MeM+Jde3VlDkl 7s3eVGsnuzZ6GMNRsF/YY48nbq+IMfgxJRPdzVDqddNmdDSC4wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEo4ON9SQQcVkD8jAiPGImq2na+NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 MzAwYWJhMC1kNTZhLTQ0YmEtOGZmMi02YzRhZTJiMjJiYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkzMDBhYmEwLWQ1NmEtNDRiYS04 ZmYyLTZjNGFlMmIyMmJiMi85MzAwYWJhMC1kNTZhLTQ0YmEtOGZmMi02YzRhZTJi MjJiYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARha/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fGQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAGLTV9llnytJ70tOhwiYY1ScEVmqN8U+yIyiVnhgCkQIJjs3g HlSuzdmp2u2H0qxUhtEjD6xmQk4vpI8pHzvwcjh2pjQbycqIma0Wj8BLk+n7Cd+V nPhIAu41Bp+RDLsL2tnSmJMaJo4RyXTssqIpn1+v7avJooVpMN1X9Daqu42rL9nT +kC2ueMZn6iodKQXua/DG+LH4FTNaAkFU6Dgao7eWGquPmYxZML/DnAoH+7DkCm2 qS2a9JtRHvq42NItR6rhb6MOfhGTBxinVHUyDhMP+c2wYnKWvf7mSDSFXoT6fcjU RIqoa7u6WmTWZoVbO9ni3/uNHP/ou9S5T7ckdA== -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:56 2025 by rpki-client