$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer File: 13168988-4625-42dc-9138-e5632130d1ba.cer (raw, json) Hash identifier: Z2wKjrYRtIpI91/Tsbdb/Xpkcb7VT9xafrqK3GHutRE= Subject key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B4E6F82D19385D9DFCE671C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Sep 2025 00:45:26 +0000 Certificate not after: Wed 29 Dec 2027 01:45:26 +0000 Subordinate resources: IP: 192.197.196.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:6f:82:d1:93:85:d9:df:ce:67:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 25 00:45:26 2025 GMT Not After : Dec 29 01:45:26 2027 GMT Subject: CN=13168988-4625-42dc-9138-e5632130d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:c4:92:18:08:cd:87:36:ee:39:0c:8f:17: fc:47:86:c7:ba:e1:25:e6:99:72:40:3b:c5:59:ab: 5f:7a:d4:90:a7:6f:26:3f:a2:65:e7:19:2e:77:cf: b1:21:ae:8c:3b:2e:7e:78:d8:94:73:02:f2:ca:34: d7:a4:5d:12:b4:5b:02:4f:c5:02:46:9d:d5:17:ac: 75:52:bc:0f:e4:74:6c:fb:11:ef:01:cb:e4:85:d9: 2d:a6:8f:fd:12:3e:c9:0e:bb:87:df:18:ea:bd:ee: bb:ab:58:1f:02:22:dc:c2:74:cf:6a:0b:1c:db:d4: 63:fc:72:29:1e:2f:b6:c0:62:99:63:3c:1d:3a:8e: 19:7c:fd:eb:8c:0e:05:1c:71:f1:38:e5:ab:51:28: 2d:c0:8f:32:6c:06:78:05:7b:1b:b2:26:ec:be:cc: 26:d6:63:e8:17:4f:71:0e:a2:99:22:dd:d6:ec:87: f0:40:75:eb:ee:b5:7a:fa:42:7e:f8:9a:10:65:2f: 4c:a3:b2:4b:66:ef:2d:78:6d:88:0b:8b:c4:6c:96: 52:9f:f5:e1:d8:63:0f:42:7c:f4:d5:7a:b6:34:9b: 2e:d9:b7:38:ee:f5:63:c8:d0:39:bb:7a:2f:75:fc: c8:4a:f2:ba:29:0f:1c:81:64:49:11:77:08:7c:2f: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.197.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fb:6f:9c:49:27:ae:18:d0:22:e0:b0:ac:67:1c:ed:b5:01: 2f:26:1c:5e:ed:c0:1d:e8:20:fc:2d:28:83:ce:99:bc:98:91: b6:4d:da:31:be:6b:b6:16:5a:bc:f9:4a:aa:a6:03:54:6b:1c: 7f:7e:cb:c0:49:58:fc:62:4d:ee:57:b8:99:14:16:bc:6e:b2: 29:91:a1:43:a7:f8:5c:40:b6:e5:21:74:8b:ac:11:4f:e5:21: c9:1d:92:11:84:6e:b4:d5:be:1f:ac:84:62:83:47:58:43:28: 84:ca:9b:f1:3b:06:0b:94:a6:4b:5a:15:9e:35:16:1d:ef:18: b9:47:0e:1e:98:8a:7f:7e:11:ca:06:fc:64:e0:89:bc:f4:d4: 3d:7d:e9:98:8e:db:d9:21:4a:27:81:bf:89:a7:08:28:41:70: 93:31:f2:03:a8:13:21:6a:5d:9f:6b:45:ae:88:26:52:c4:12: 97:34:ab:3d:95:a9:3e:cc:c8:a4:c9:92:97:3c:80:ad:0b:70: a4:ac:d5:95:40:e0:fa:5f:75:17:78:d8:2a:2d:8b:94:14:82: 2d:0b:ca:88:54:81:fc:c2:17:32:43:ae:f2:70:f5:b3:7a:a8: a4:29:46:bd:a3:b7:4d:36:d9:f8:27:20:53:eb:83:71:bc:7e: 3b:05:41:90 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtOb4LRk4XZ385nHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyNTAwNDUyNloXDTI3MTIyOTAxNDUyNlowLzEtMCsGA1UEAxMk MTMxNjg5ODgtNDYyNS00MmRjLTkxMzgtZTU2MzIxMzBkMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNvEkhgIzYc27jkMjxf8R4bHuuEl5plyQDvF WatfetSQp28mP6Jl5xkud8+xIa6MOy5+eNiUcwLyyjTXpF0StFsCT8UCRp3VF6x1 UrwP5HRs+xHvAcvkhdktpo/9Ej7JDruH3xjqve67q1gfAiLcwnTPagsc29Rj/HIp Hi+2wGKZYzwdOo4ZfP3rjA4FHHHxOOWrUSgtwI8ybAZ4BXsbsibsvswm1mPoF09x DqKZIt3W7IfwQHXr7rV6+kJ++JoQZS9Mo7JLZu8teG2IC4vEbJZSn/Xh2GMPQnz0 1Xq2NJsu2bc47vVjyNA5u3ovdfzISvK6KQ8cgWRJEXcIfC+EAQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFL1S3AdcU66vkIb8aJHKWiAineH5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x MzE2ODk4OC00NjI1LTQyZGMtOTEzOC1lNTYzMjEzMGQxYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzEzMTY4OTg4LTQ2MjUtNDJkYy05 MTM4LWU1NjMyMTMwZDFiYS8xMzE2ODk4OC00NjI1LTQyZGMtOTEzOC1lNTYzMjEz MGQxYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAxcQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQftvnEknrhjQIuCwrGcc 7bUBLyYcXu3AHegg/C0og86ZvJiRtk3aMb5rthZavPlKqqYDVGscf37LwElY/GJN 7le4mRQWvG6yKZGhQ6f4XEC25SF0i6wRT+UhyR2SEYRutNW+H6yEYoNHWEMohMqb 8TsGC5SmS1oVnjUWHe8YuUcOHpiKf34Rygb8ZOCJvPTUPX3pmI7b2SFKJ4G/iacI KEFwkzHyA6gTIWpdn2tFrogmUsQSlzSrPZWpPszIpMmSlzyArQtwpKzVlUDg+l91 F3jYKi2LlBSCLQvKiFSB/MIXMkOu8nD1s3qopClGvaO3TTbZ+CcgU+uDcbx+OwVB kA== -----END CERTIFICATE-----Generated at Fri Oct 10 15:24:47 2025 by rpki-client