$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer File: 9612d9a4-803d-4413-aef7-b133b4ff80b7.cer (raw, json) Hash identifier: FPpMx+2ThEh7Am84/H1JlQ6vZrrl4xkh0ipU0BgmD10= Subject key identifier: D1:8C:77:06:50:9E:BA:71:D1:74:C9:6F:81:D9:9A:4D:C0:86:B0:BD Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B3AE4B7AB981772A885C17E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 00:45:25 +0000 Certificate not after: Wed 22 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 192.70.176.0/24 IP: 192.208.1.0 -- 192.208.15.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:e4:b7:ab:98:17:72:a8:85:c1:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 18 00:45:25 2025 GMT Not After : Dec 22 01:45:25 2027 GMT Subject: CN=9612d9a4-803d-4413-aef7-b133b4ff80b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:f8:4f:23:c2:08:2b:ba:16:70:31:17:3e: 1a:44:72:13:d9:2b:03:96:50:bf:55:d3:92:18:be: 10:89:52:72:bb:c9:72:e3:86:63:6d:93:f7:9e:09: 33:02:d3:86:06:54:4a:c7:af:21:f3:e4:3c:56:59: cf:76:7e:e1:fb:c6:db:6d:21:e3:d7:40:b8:05:52: ad:47:df:21:9e:e2:f8:3b:75:08:06:c8:02:10:5c: 9b:78:09:74:99:7d:35:81:a7:0c:a2:12:8c:f4:3c: ef:c4:2d:bc:6b:59:a9:8a:3a:7e:7a:d0:f6:21:f6: 48:61:ab:48:94:df:2a:b6:89:cd:60:6a:61:72:1a: ed:6c:ef:7f:31:c2:4d:fd:41:d0:4e:b9:c6:8c:be: 86:c7:69:67:10:2a:56:a5:31:5b:22:2c:d5:4e:2e: 52:71:41:ec:6d:55:2e:8a:f3:70:1c:14:7a:5a:a8: e4:59:5c:2e:b7:dc:81:b8:85:e1:e5:52:9f:16:cc: 62:5c:d1:c3:29:ca:a3:c6:f8:75:cf:c8:3b:77:40: 46:3c:86:23:67:31:3a:0d:c3:47:93:45:91:c8:15: 35:5b:22:61:93:b1:1a:7f:15:75:84:82:6f:19:73: f1:4d:a2:a3:d1:36:71:0a:8d:18:ac:88:f2:57:52: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8C:77:06:50:9E:BA:71:D1:74:C9:6F:81:D9:9A:4D:C0:86:B0:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.70.176.0/24 192.208.1.0-192.208.15.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:63:8a:51:7d:88:3b:db:03:4a:42:2d:36:70:fe:94:65:61: 8a:10:e7:c7:54:8f:e1:63:f8:f1:a3:49:e6:9b:7f:f0:2d:33: 06:b4:5c:6b:24:ff:dd:37:82:1b:44:bb:41:1a:08:2a:5e:b6: ff:92:7b:f4:22:99:ba:e0:6f:f1:52:42:6f:04:d8:71:fb:40: 80:aa:d7:db:ad:36:48:16:3c:9e:83:0e:b1:3c:9b:39:40:88: 27:67:d7:83:ea:13:5f:8f:69:14:e4:a8:80:36:40:1b:bf:f6: 3d:22:3c:53:df:7f:c8:32:44:63:61:d4:42:60:27:cb:3f:d4: bb:85:db:a5:a3:49:f5:28:6e:60:65:4b:77:a1:b1:10:ea:8e: 5e:e1:7a:0d:48:3e:04:d9:ed:10:1d:9a:b9:e8:d8:a2:e9:4f: ad:b2:22:a8:8c:7a:e1:1e:82:6d:be:38:7f:7e:36:c1:ff:2a: bf:99:da:e1:01:18:cf:06:9f:c3:95:57:f0:6b:80:b4:39:47: 39:2a:61:87:05:5f:a4:aa:17:00:a9:a3:f4:02:c9:2b:aa:e7: 79:02:61:e8:c2:2e:13:6a:23:30:c4:32:88:e3:c2:47:6f:7f: 1d:6f:d5:af:8b:a5:bc:52:a0:99:08:f3:bd:e7:a0:6e:02:b4: ff:a8:71:b1 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEs65LermBdyqIXBfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxODAwNDUyNVoXDTI3MTIyMjAxNDUyNVowLzEtMCsGA1UEAxMk OTYxMmQ5YTQtODAzZC00NDEzLWFlZjctYjEzM2I0ZmY4MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOj4TyPCCCu6FnAxFz4aRHIT2SsDllC/VdOS GL4QiVJyu8ly44ZjbZP3ngkzAtOGBlRKx68h8+Q8VlnPdn7h+8bbbSHj10C4BVKt R98hnuL4O3UIBsgCEFybeAl0mX01gacMohKM9DzvxC28a1mpijp+etD2IfZIYatI lN8qtonNYGphchrtbO9/McJN/UHQTrnGjL6Gx2lnECpWpTFbIizVTi5ScUHsbVUu ivNwHBR6WqjkWVwut9yBuIXh5VKfFsxiXNHDKcqjxvh1z8g7d0BGPIYjZzE6DcNH k0WRyBU1WyJhk7EafxV1hIJvGXPxTaKj0TZxCo0YrIjyV1KEVQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNGMdwZQnrpx0XTJb4HZmk3AhrC9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NjEyZDlhNC04MDNkLTQ0MTMtYWVmNy1iMTMzYjRmZjgwYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1h ZWY3LWIxMzNiNGZmODBiNy85NjEyZDlhNC04MDNkLTQ0MTMtYWVmNy1iMTMzYjRm ZjgwYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADARrAwDAMEAMDQAQMEBMDQADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY Y4pRfYg72wNKQi02cP6UZWGKEOfHVI/hY/jxo0nmm3/wLTMGtFxrJP/dN4IbRLtB GggqXrb/knv0Ipm64G/xUkJvBNhx+0CAqtfbrTZIFjyegw6xPJs5QIgnZ9eD6hNf j2kU5KiANkAbv/Y9IjxT33/IMkRjYdRCYCfLP9S7hdulo0n1KG5gZUt3obEQ6o5e 4XoNSD4E2e0QHZq56Nii6U+tsiKojHrhHoJtvjh/fjbB/yq/mdrhARjPBp/DlVfw a4C0OUc5KmGHBV+kqhcAqaP0Askrqud5AmHowi4TaiMwxDKI48JHb38db9Wvi6W8 UqCZCPO956BuArT/qHGx -----END CERTIFICATE-----Generated at Mon Oct 20 06:26:46 2025 by rpki-client