$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer File: 3b24522b-8239-4bb9-9845-1e01e28aa452.cer (raw, json) Hash identifier: MUklvzI0PtFGmbl8cDtpkcLyFAzoYyCuFrUQiJHE6AA= Subject key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B0E39C4F8F5B8F19EE9B4BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 00:45:25 +0000 Certificate not after: Mon 06 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 32854 IP: 169.197.172.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:39:c4:f8:f5:b8:f1:9e:e9:b4:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 2 00:45:25 2025 GMT Not After : Dec 6 01:45:25 2027 GMT Subject: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e8:b0:71:59:f8:e8:bc:d0:1e:8f:10:24:93: 12:e4:dc:13:65:9f:d4:7e:d5:6d:73:08:71:25:bb: c3:1a:d7:e2:0f:da:55:84:aa:44:80:2c:de:e3:b8: 0e:0b:06:74:2c:79:7b:52:78:06:89:e7:cf:b7:b3: 97:7d:53:ba:d8:7b:a2:f1:70:a0:eb:3d:06:b5:41: f3:37:01:cb:0b:aa:da:8d:4a:b1:12:87:79:b4:97: cb:14:d0:e2:e9:b2:74:25:9e:c6:43:14:2e:5d:83: 0d:b8:43:a1:9a:0e:15:85:99:a1:0e:0c:ed:fa:a9: c6:83:cd:da:ab:ae:9d:5d:93:f9:7d:f6:d6:e9:f4: d5:aa:50:6b:46:44:1d:db:09:c4:03:74:61:5b:d6: 69:7a:1a:1e:d7:99:c5:5a:51:3c:c4:5c:69:55:b4: 34:28:cc:b0:0f:7a:96:19:22:19:22:01:30:63:50: 11:de:d5:2d:44:67:c9:13:62:d2:ea:4f:47:55:5d: ff:27:7f:c3:61:00:79:98:b6:15:1d:c4:e2:74:17: e0:55:5e:e3:5e:9b:44:5a:a3:37:89:7a:74:a5:ce: 1b:75:a8:b6:f3:96:2a:d5:b1:7b:f4:40:65:dd:a6: 45:77:1d:09:7a:90:bf:bf:4a:b3:b8:16:44:ea:21: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5c:11:1a:e2:78:5a:83:98:c6:f7:ea:33:4f:0a:61:c2:7c: 8f:47:b6:37:09:55:99:c4:ce:a5:13:f0:af:6b:ed:45:eb:73: 40:6b:11:d7:cb:c9:78:94:77:46:9d:27:32:76:df:59:22:fa: 0d:16:02:02:99:ab:8c:90:9f:25:d9:ed:13:5b:f6:ae:38:34: 54:56:18:1b:c1:58:c5:1c:23:8e:b4:d5:00:44:b8:e1:fc:da: 33:09:bd:c8:97:4a:39:4b:f8:e9:a4:0b:3e:c8:56:22:4f:6a: 5c:a4:a5:fc:9a:50:2d:f4:79:6a:c6:34:a9:6a:82:57:10:78: f6:dd:09:3f:75:86:9c:1b:78:dc:e3:13:5f:79:17:be:b0:3d: fa:a1:c8:2d:be:15:68:fa:d6:81:19:ab:3f:ea:9a:d9:d3:ac: 1c:0d:fe:66:f7:c9:8b:63:23:03:2b:4b:50:39:b1:29:1d:b3: de:9d:24:6c:92:c0:cb:d5:1d:c1:66:35:10:86:c6:22:18:70: 80:2d:9e:90:c7:d1:16:46:a7:64:7a:33:5a:80:b0:eb:72:c8: 14:03:48:5b:7c:9b:a1:fe:d6:c3:5b:c0:41:be:e2:b1:4a:7a: d0:07:a3:e4:fb:1f:b4:35:fa:c0:23:42:9a:8d:9b:d0:22:7d: c2:d5:ff:0e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsOOcT49bjxnum0voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwMjAwNDUyNVoXDTI3MTIwNjAxNDUyNVowLzEtMCsGA1UEAxMk M2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFhNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+iwcVn46LzQHo8QJJMS5NwTZZ/UftVtcwhx JbvDGtfiD9pVhKpEgCze47gOCwZ0LHl7UngGiefPt7OXfVO62Hui8XCg6z0GtUHz NwHLC6rajUqxEod5tJfLFNDi6bJ0JZ7GQxQuXYMNuEOhmg4VhZmhDgzt+qnGg83a q66dXZP5ffbW6fTVqlBrRkQd2wnEA3RhW9Zpehoe15nFWlE8xFxpVbQ0KMywD3qW GSIZIgEwY1AR3tUtRGfJE2LS6k9HVV3/J3/DYQB5mLYVHcTidBfgVV7jXptEWqM3 iXp0pc4bdai285Yq1bF79EBl3aZFdx0JepC/v0qzuBZE6iEiewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKAC9WjZrg9jEVEVRAIdHVv+TrDSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z YjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNiMjQ1MjJiLTgyMzktNGJiOS05 ODQ1LTFlMDFlMjhhYTQ1Mi8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4 YWE0NTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGpxawwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIBWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdcERrieFqDmMb36jNPCmHCfI9HtjcJVZnEzqUT8K9r7UXr c0BrEdfLyXiUd0adJzJ231ki+g0WAgKZq4yQnyXZ7RNb9q44NFRWGBvBWMUcI460 1QBEuOH82jMJvciXSjlL+OmkCz7IViJPalykpfyaUC30eWrGNKlqglcQePbdCT91 hpwbeNzjE195F76wPfqhyC2+FWj61oEZqz/qmtnTrBwN/mb3yYtjIwMrS1A5sSkd s96dJGySwMvVHcFmNRCGxiIYcIAtnpDH0RZGp2R6M1qAsOtyyBQDSFt8m6H+1sNb wEG+4rFKetAHo+T7H7Q1+sAjQpqNm9AifcLV/w4= -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:44 2025 by rpki-client