$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer File: 15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer (raw, json) Hash identifier: jvp/AvF67Lc2W2PJ+zYT/Py66ZHPuM+aBxVG1BMmUWA= Subject key identifier: 36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B460F744FFD25D1DCDB666E98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 132.194.0.0/16 IP: 140.226.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:74:4f:fd:25:d1:dc:db:66:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:5b:fd:b2:f9:c4:8b:65:29:4d:24:3a:b6: 69:2d:10:4d:80:ff:dd:81:23:81:8b:ae:82:fb:ac: df:6f:f1:57:14:23:fb:85:8c:2d:8c:39:92:60:25: 44:28:b6:5e:af:94:f8:51:5a:54:bd:e1:07:84:e8: 19:56:6b:e6:26:5a:9d:d0:4f:c8:7e:d5:31:b6:9a: 70:b3:d7:ac:df:d8:9a:ce:bb:84:80:30:4e:21:97: 9a:a6:e3:89:73:b5:d3:d1:eb:d5:31:67:fc:d5:75: 82:c2:3a:26:cb:a5:ef:ab:c6:02:f2:f3:bd:c1:f5: b6:4c:ba:8b:12:0a:54:5e:0c:af:d7:17:6c:9d:1c: ba:ff:c4:a0:ca:97:31:18:f8:e6:cd:16:cb:ee:d2: 96:0e:14:a0:54:f2:ce:ab:7e:58:9d:11:05:36:5d: 9d:96:7e:45:7e:0b:15:3b:30:1c:dd:69:4e:49:f9: 1f:1a:f9:d6:ac:85:84:a1:fc:cd:51:8a:39:01:80: 60:cc:2f:02:64:b5:98:32:cb:0d:40:a7:48:42:cc: 80:6b:23:a0:b2:6c:18:40:a0:7d:e4:bc:2a:4d:7a: 84:6d:62:fb:3a:25:b7:22:d0:dd:11:a6:f3:0d:e9: c2:f5:3b:83:67:8e:e1:b9:d9:6d:66:8b:c3:85:f9: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 132.194.0.0/16 140.226.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b5:28:28:23:7b:5b:3c:4a:3d:2a:21:ca:15:20:0b:e5:97: 08:38:3c:71:57:3c:03:95:71:3c:7b:0e:fa:c0:a5:2f:81:ab: 70:dd:e0:80:26:e1:5b:d3:de:2f:e6:f8:d9:4d:c9:eb:3b:38: 3e:01:36:dc:07:24:76:dc:6f:cf:ea:ad:0b:99:f2:4a:3d:c4: 87:19:de:b3:7a:c3:35:a9:6d:e1:57:3f:fd:40:cf:a3:54:75: 4f:19:4a:b2:86:c1:e1:c5:d8:56:33:b5:54:ee:7a:6c:b5:15: fa:97:4c:86:e9:51:54:87:d3:e4:1a:19:11:e7:03:31:73:97: b2:f7:36:62:8e:49:79:91:0b:be:5d:70:9c:a6:1e:cf:ee:a6: 78:ca:aa:1e:f1:74:9e:ca:79:b8:fe:1a:0e:05:b4:95:08:d2: bb:43:f8:64:2a:0a:c2:5d:bf:64:06:57:15:a0:34:e2:9e:e9: 36:e0:27:44:bc:f8:2f:bf:17:1a:69:78:ff:7e:14:0e:4f:1f: e8:9c:5b:8c:1a:51:2f:2f:58:7f:d7:d2:17:c2:01:de:02:4d: c8:00:45:be:b0:9d:5a:04:21:74:6c:49:14:2a:b7:d8:59:ca: 3b:e5:40:5e:19:ad:9e:af:6f:c5:47:9b:7e:41:84:f5:14:54: af:2b:ac:fd -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEtGD3RP/SXR3NtmbpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk MTVlZmMyYjktYTVhMS00YzVjLWEwNGMtZGQxYzliZWQ1MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd1b/bL5xItlKU0kOrZpLRBNgP/dgSOBi66C +6zfb/FXFCP7hYwtjDmSYCVEKLZer5T4UVpUveEHhOgZVmvmJlqd0E/IftUxtppw s9es39iazruEgDBOIZeapuOJc7XT0evVMWf81XWCwjomy6Xvq8YC8vO9wfW2TLqL EgpUXgyv1xdsnRy6/8SgypcxGPjmzRbL7tKWDhSgVPLOq35YnREFNl2dln5FfgsV OzAc3WlOSfkfGvnWrIWEofzNUYo5AYBgzC8CZLWYMssNQKdIQsyAayOgsmwYQKB9 5LwqTXqEbWL7OiW3ItDdEabzDenC9TuDZ47hudltZovDhfmRYQIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFDbhSBOFm65SbMEEspNoRsxhXBHRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x NWVmYzJiOS1hNWExLTRjNWMtYTA0Yy1kZDFjOWJlZDUyZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzE1ZWZjMmI5LWE1YTEtNGM1Yy1h MDRjLWRkMWM5YmVkNTJlNi8xNWVmYzJiOS1hNWExLTRjNWMtYTA0Yy1kZDFjOWJl ZDUyZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCEwgMDAIziMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEy1KCgje1s8Sj0q IcoVIAvllwg4PHFXPAOVcTx7DvrApS+Bq3Dd4IAm4VvT3i/m+NlNyes7OD4BNtwH JHbcb8/qrQuZ8ko9xIcZ3rN6wzWpbeFXP/1Az6NUdU8ZSrKGweHF2FYztVTuemy1 FfqXTIbpUVSH0+QaGRHnAzFzl7L3NmKOSXmRC75dcJymHs/upnjKqh7xdJ7Kebj+ Gg4FtJUI0rtD+GQqCsJdv2QGVxWgNOKe6TbgJ0S8+C+/FxppeP9+FA5PH+icW4wa US8vWH/X0hfCAd4CTcgARb6wnVoEIXRsSRQqt9hZyjvlQF4ZrZ6vb8VHm35BhPUU VK8rrP0= -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:20 2025 by rpki-client