$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2.cer File: f9e333a2-1669-498a-b785-6f851848eeb2.cer (raw, json) Hash identifier: sw+eJ+klEnfEiQUr+tUjH7a6lizfCyZQyiCuP8YAkjg= Subject key identifier: 91:A7:53:FF:9A:69:5F:C6:2D:E5:66:9C:72:89:81:51:28:4D:8F:51 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B837A7BD1AF302A8BC784F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/f9e333a2-1669-498a-b785-6f851848eeb2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 00:45:23 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 2620:33:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:7a:7b:d1:af:30:2a:8b:c7:84:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 14 00:45:23 2025 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=f9e333a2-1669-498a-b785-6f851848eeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:4d:6f:29:db:52:1e:ba:2d:bd:70:36:f0: 97:ac:ae:1b:84:9b:f6:ae:53:d1:ef:6a:98:43:c0: da:78:9d:09:82:db:d7:e1:d6:d5:61:3a:54:93:5b: 95:1a:f2:2d:a4:04:de:a9:d2:68:ea:51:76:e9:9c: d8:1c:de:2a:c8:1a:00:8d:fb:3b:e9:0a:40:05:de: 7a:68:7a:f6:db:8e:f0:f9:91:1a:6f:a5:82:e0:7e: 88:f7:ba:f1:23:5c:dd:1e:96:3d:a9:38:53:1f:c4: 2a:bf:6b:ce:58:d9:c8:96:dc:a7:71:5f:63:c4:fc: 24:5a:16:8a:e7:ce:eb:ac:df:e3:3d:36:97:f4:d3: 90:b1:e1:fb:98:66:b7:60:90:4e:f8:85:75:de:d5: 9b:16:72:e3:d4:70:c7:53:7b:78:83:b4:ff:0d:20: 0a:c4:f2:31:05:20:5a:b9:7d:b2:06:8d:14:51:45: 47:4d:e5:bb:e5:c5:54:dd:c3:f1:5e:8c:58:5d:ae: 3a:d6:3e:6e:01:aa:cf:86:7d:a4:43:64:3e:bf:c9: 70:81:bd:bd:b5:c0:40:00:68:07:5f:b2:d2:57:4e: 4f:a8:ff:f2:6a:de:9e:f9:3a:db:55:ab:d3:f4:46: 34:7f:f2:ae:37:9a:ab:1a:59:03:c0:8e:1a:1e:9c: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A7:53:FF:9A:69:5F:C6:2D:E5:66:9C:72:89:81:51:28:4D:8F:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/f9e333a2-1669-498a-b785-6f851848eeb2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:33:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:08:d6:28:8a:45:2b:a8:41:3a:cd:29:ff:6c:00:04:f2:ad: ec:06:80:94:5c:ae:e0:4b:9c:a3:ac:27:59:c0:cf:73:7a:a8: 85:e6:e3:9a:02:3a:f0:ae:8b:db:05:81:a7:15:2c:45:be:59: dc:1a:d7:7e:38:fd:38:27:96:87:6a:45:52:a2:7b:8a:26:03: fa:84:55:e5:a4:6f:e5:48:b2:b0:ae:b7:e7:0a:0c:31:dd:6e: f3:e0:c0:f0:e2:73:46:0e:b1:78:e5:a2:9d:63:d6:39:fc:c3: 3c:f4:ea:cc:25:cf:54:5a:ae:6a:b7:ae:ed:b6:49:1e:1f:87: ca:05:2b:7a:14:8a:34:17:74:7e:21:b0:70:c7:8b:c5:b3:5e: 30:21:e8:08:30:ba:93:56:a2:7c:d2:77:ad:3e:88:dd:5b:b4: 0a:ef:97:e2:65:4e:6e:ee:c2:ae:6d:7e:f9:81:a2:d7:c8:1a: c6:bb:7b:4a:f8:d3:2c:a6:51:8b:5d:a6:10:a2:df:3c:3f:06: 08:fd:09:3e:e6:d9:ec:39:5b:87:0a:d1:b1:ac:29:1b:95:e2: 00:82:9f:6c:fb:82:7e:70:6d:ff:0e:3c:61:29:9d:fc:92:43: 93:26:44:aa:74:73:2b:79:71:18:b6:b2:a0:cc:b5:fc:72:39: b9:60:05:db -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEuDenvRrzAqi8eE8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNDAwNDUyM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk ZjllMzMzYTItMTY2OS00OThhLWI3ODUtNmY4NTE4NDhlZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDpNbynbUh66Lb1wNvCXrK4bhJv2rlPR72qY Q8DaeJ0JgtvX4dbVYTpUk1uVGvItpATeqdJo6lF26ZzYHN4qyBoAjfs76QpABd56 aHr2247w+ZEab6WC4H6I97rxI1zdHpY9qThTH8Qqv2vOWNnIltyncV9jxPwkWhaK 587rrN/jPTaX9NOQseH7mGa3YJBO+IV13tWbFnLj1HDHU3t4g7T/DSAKxPIxBSBa uX2yBo0UUUVHTeW75cVU3cPxXoxYXa461j5uAarPhn2kQ2Q+v8lwgb29tcBAAGgH X7LSV05PqP/yat6e+TrbVavT9EY0f/KuN5qrGlkDwI4aHpy5sQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFJGnU/+aaV/GLeVmnHKJgVEoTY9RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9m OWUzMzNhMi0xNjY5LTQ5OGEtYjc4NS02Zjg1MTg0OGVlYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Y5ZTMzM2EyLTE2NjktNDk4YS1i Nzg1LTZmODUxODQ4ZWViMi9mOWUzMzNhMi0xNjY5LTQ5OGEtYjc4NS02Zjg1MTg0 OGVlYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAzQAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVQjWKIpFK6hBOs0p /2wABPKt7AaAlFyu4Euco6wnWcDPc3qohebjmgI68K6L2wWBpxUsRb5Z3BrXfjj9 OCeWh2pFUqJ7iiYD+oRV5aRv5UiysK635woMMd1u8+DA8OJzRg6xeOWinWPWOfzD PPTqzCXPVFquareu7bZJHh+HygUrehSKNBd0fiGwcMeLxbNeMCHoCDC6k1aifNJ3 rT6I3Vu0Cu+X4mVObu7Crm1++YGi18gaxrt7SvjTLKZRi12mEKLfPD8GCP0JPubZ 7DlbhwrRsawpG5XiAIKfbPuCfnBt/w48YSmd/JJDkyZEqnRzK3lxGLayoMy1/HI5 uWAF2w== -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:17 2025 by rpki-client