$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer File: 052fe149-2c89-4322-a901-3a7f35c17350.cer (raw, json) Hash identifier: 2mpnUhX7DI3MF8HScDCBg2y+ppBiLGsmadxTdfJtgLg= Subject key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B21C48E966A1E2AFFFB8B1B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 192.111.123.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:96:6a:1e:2a:ff:fb:8b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=052fe149-2c89-4322-a901-3a7f35c17350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:73:d4:b6:38:75:80:d0:cb:83:c5:d4:5e: e6:cd:17:6d:91:57:15:6d:e1:de:8f:80:e8:90:79: 79:61:a6:e8:38:53:02:b7:d8:7c:80:78:e7:33:af: 08:5c:00:8d:db:b7:4d:c9:f3:58:00:cc:44:a1:40: bb:c3:3b:33:9a:c3:9c:2c:b0:d3:90:32:a7:62:84: d8:4b:3d:83:57:dc:e8:54:39:46:0f:13:ad:29:12: 1e:d3:8a:e3:b2:f3:16:99:16:62:4c:9e:1b:97:ef: 31:c9:03:7b:cf:d1:67:1d:5f:75:72:10:9d:81:22: 78:02:23:bf:04:b8:d1:d2:3e:6e:fa:0c:87:e0:ca: 50:e2:52:be:44:74:d3:59:68:00:11:9c:25:1e:ce: 1f:9d:ee:fb:e0:57:66:2c:7b:db:4d:60:5f:9f:d0: 54:d2:e4:1a:93:98:ae:15:a0:21:85:3e:81:24:18: 44:b2:c5:f2:42:ad:9f:cc:99:65:0c:a0:07:dc:80: 4c:2c:b3:6f:45:ae:d6:91:8d:0e:13:98:70:48:08: 95:19:6e:6c:3b:3a:70:0d:f4:71:77:75:db:9b:68: 37:af:48:1a:33:f0:6b:55:8d:ff:fd:e3:b3:d6:ca: f5:7e:38:48:77:b2:76:50:5f:88:82:75:c5:d2:f2: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:79:f4:2b:1d:e3:13:41:4a:67:07:76:b9:1b:21:e9:95:95: 68:b3:1a:ce:4f:91:4d:7f:56:17:09:26:64:82:e6:d0:0b:ce: 38:2b:45:b7:2f:9e:6c:b3:b5:75:77:d9:b1:37:82:e5:74:27: 51:1f:c6:aa:0f:f6:fe:36:ef:34:cd:7d:10:67:3e:38:64:65: ce:e0:97:bd:f8:2a:58:63:01:5f:8a:96:20:97:0f:d7:76:05: 64:32:a4:5f:36:21:7e:3c:71:d6:40:26:d7:a6:d7:7c:40:e1: 27:ad:72:39:75:c9:e2:e0:23:72:c4:b7:4e:d5:00:b5:58:bd: 75:e8:83:c4:2f:8e:fa:9f:eb:83:cc:f3:f2:22:37:a5:62:7a: 02:a9:d5:32:91:ee:42:09:88:9c:24:86:66:2c:95:33:e4:d9: 82:2f:7d:f4:1e:5c:d6:af:92:f5:17:af:3b:70:a2:7e:81:e9: b9:87:4f:60:8f:99:ec:21:f0:68:b7:41:0f:e9:7c:1d:01:68: d7:dd:85:ef:0d:fa:7d:bc:e5:e5:0c:ed:b3:52:4c:e2:c7:23: f2:81:9f:6b:b2:2b:23:01:f2:52:33:1e:6b:76:3b:d1:59:83: f6:92:56:c3:21:57:c1:80:85:f5:38:d7:a8:2a:ae:3d:74:29: 96:88:7b:6d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEshxI6Wah4q//uLGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk MDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC5z1LY4dYDQy4PF1F7mzRdtkVcVbeHej4Do kHl5YaboOFMCt9h8gHjnM68IXACN27dNyfNYAMxEoUC7wzszmsOcLLDTkDKnYoTY Sz2DV9zoVDlGDxOtKRIe04rjsvMWmRZiTJ4bl+8xyQN7z9FnHV91chCdgSJ4AiO/ BLjR0j5u+gyH4MpQ4lK+RHTTWWgAEZwlHs4fne774FdmLHvbTWBfn9BU0uQak5iu FaAhhT6BJBhEssXyQq2fzJllDKAH3IBMLLNvRa7WkY0OE5hwSAiVGW5sOzpwDfRx d3Xbm2g3r0gaM/BrVY3//eOz1sr1fjhId7J2UF+IgnXF0vJAOwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFAglxCWrXupB9iNSpyQOm7wQ7lXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w NTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzA1MmZlMTQ5LTJjODktNDMyMi1h OTAxLTNhN2YzNWMxNzM1MC8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVj MTczNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAb3swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdXn0Kx3jE0FKZwd2uRsh 6ZWVaLMazk+RTX9WFwkmZILm0AvOOCtFty+ebLO1dXfZsTeC5XQnUR/Gqg/2/jbv NM19EGc+OGRlzuCXvfgqWGMBX4qWIJcP13YFZDKkXzYhfjxx1kAm16bXfEDhJ61y OXXJ4uAjcsS3TtUAtVi9deiDxC+O+p/rg8zz8iI3pWJ6AqnVMpHuQgmInCSGZiyV M+TZgi999B5c1q+S9RevO3CifoHpuYdPYI+Z7CHwaLdBD+l8HQFo192F7w36fbzl 5Qzts1JM4scj8oGfa7IrIwHyUjMea3Y70VmD9pJWwyFXwYCF9TjXqCquPXQploh7 bQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:47 2025 by rpki-client