$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer File: 3f915079-cb02-4279-8f5b-48fa6683491f.cer (raw, json) Hash identifier: hR/Oyr8fHl+4wHspX53PlhxFXpf51qG0A0nQ/3bcasQ= Subject key identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B1EF9DF20BA960766EA7C3E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 69.67.174.0/24 IP: 107.190.183.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:df:20:ba:96:07:66:ea:7c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=3f915079-cb02-4279-8f5b-48fa6683491f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:c1:b5:c8:08:68:1c:fe:02:68:d6:35:c2: 8a:bc:62:f0:67:86:ba:98:6d:71:67:23:63:c1:02: 17:35:76:a8:b8:bb:55:15:8a:d1:2d:4e:c0:3c:16: f6:e3:d9:40:ab:b5:42:42:cc:df:26:24:61:8d:2c: 5a:1c:b1:e6:f3:a6:05:b8:55:ec:3f:dc:9f:66:1c: f8:82:5d:45:84:0d:59:2d:28:90:64:16:0c:f9:bb: 19:e0:0c:ab:f1:62:b2:d1:a5:d7:53:a7:b5:bd:8c: 7f:32:5a:9f:d7:38:36:fd:28:6b:6e:88:ed:63:42: 52:39:c2:ef:4d:95:39:4a:79:8c:00:d7:5c:c6:91: d7:bc:e0:25:e6:28:ce:5d:8b:25:50:71:2b:35:17: e0:79:cc:3b:5c:0e:bf:b1:0a:32:db:d6:7b:86:8e: 5a:c2:47:a1:08:63:42:7e:10:ad:b5:4c:84:86:aa: 96:2f:78:8a:9d:91:d0:e7:4e:18:47:28:1f:a9:c6: 7c:74:47:12:77:e1:bd:8f:67:1b:40:e5:a3:8d:87: 77:e6:a9:1a:52:62:92:dc:56:f3:7f:0b:50:b2:16: a4:ea:55:4d:d7:eb:86:82:8b:0d:c6:38:66:8a:7c: a8:b7:2c:a5:3c:ac:d1:c2:fd:21:ac:66:75:53:4e: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 69.67.174.0/24 107.190.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5e:6d:80:4c:61:e7:27:5d:f5:93:ee:0f:da:e9:d0:37:f4: 8c:5a:e6:9e:73:76:d9:1e:50:69:6b:e8:f3:9e:46:e2:c2:a0: 99:b8:7b:00:0a:30:57:09:fe:6e:2a:55:28:ec:2a:66:19:d1: f4:0e:7e:59:c5:92:3f:ba:73:32:4f:fd:26:ae:aa:14:64:f3: d4:f7:15:0c:34:9f:1e:6e:e1:d0:c8:e6:06:72:c3:3c:a9:58: 7c:b0:bf:61:31:3c:b8:15:4a:a2:94:42:35:1f:e5:f5:11:b1: 87:09:af:29:ce:54:07:b2:01:b7:8b:89:c1:e9:f3:83:54:9a: 7c:b8:c4:cb:2f:ec:88:4b:bb:71:a0:a1:6e:77:5b:49:47:71: e2:ea:00:55:bf:a2:ab:b3:1e:67:2c:a4:fb:e4:af:c8:5b:de: 31:c6:a4:95:5a:f8:17:e8:bd:34:64:15:7f:8e:67:5e:d5:1d: 55:5a:ea:10:84:24:71:4e:ed:a0:9d:43:e7:45:23:a2:16:cf: b7:2a:58:3f:1d:51:71:71:9b:58:56:2c:37:41:45:a4:76:77: 95:c9:68:e0:78:41:cd:ca:50:76:27:6d:bb:53:a2:6d:c7:a0: 74:fc:c8:04:22:23:2b:c7:9c:3a:19:a8:95:ae:27:d7:58:bf: 73:93:c7:a1 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEse+d8gupYHZup8PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk M2Y5MTUwNzktY2IwMi00Mjc5LThmNWItNDhmYTY2ODM0OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH/BtcgIaBz+AmjWNcKKvGLwZ4a6mG1xZyNj wQIXNXaouLtVFYrRLU7APBb249lAq7VCQszfJiRhjSxaHLHm86YFuFXsP9yfZhz4 gl1FhA1ZLSiQZBYM+bsZ4Ayr8WKy0aXXU6e1vYx/Mlqf1zg2/ShrbojtY0JSOcLv TZU5SnmMANdcxpHXvOAl5ijOXYslUHErNRfgecw7XA6/sQoy29Z7ho5awkehCGNC fhCttUyEhqqWL3iKnZHQ504YRygfqcZ8dEcSd+G9j2cbQOWjjYd35qkaUmKS3Fbz fwtQshak6lVN1+uGgosNxjhminyotyylPKzRwv0hrGZ1U06DfQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAffVmHIG3nijNg5cGaj/cI9JxOvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z ZjkxNTA3OS1jYjAyLTQyNzktOGY1Yi00OGZhNjY4MzQ5MWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNmOTE1MDc5LWNiMDItNDI3OS04 ZjViLTQ4ZmE2NjgzNDkxZi8zZjkxNTA3OS1jYjAyLTQyNzktOGY1Yi00OGZhNjY4 MzQ5MWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABFQ64DBABrvrcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACV5tgExh5ydd 9ZPuD9rp0Df0jFrmnnN22R5QaWvo855G4sKgmbh7AAowVwn+bipVKOwqZhnR9A5+ WcWSP7pzMk/9Jq6qFGTz1PcVDDSfHm7h0MjmBnLDPKlYfLC/YTE8uBVKopRCNR/l 9RGxhwmvKc5UB7IBt4uJwenzg1SafLjEyy/siEu7caChbndbSUdx4uoAVb+iq7Me Zyyk++SvyFveMcaklVr4F+i9NGQVf45nXtUdVVrqEIQkcU7toJ1D50UjohbPtypY Px1RcXGbWFYsN0FFpHZ3lclo4HhBzcpQdidtu1OibcegdPzIBCIjK8ecOhmola4n 11i/c5PHoQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:25:22 2025 by rpki-client