$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer File: 433ef7a7-1e53-4401-9dec-0da336641458.cer (raw, json) Hash identifier: 7SY9rO0zM52rHJcIAhniUeu4JfZEL1r6UIAbkwEYjf8= Subject key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B4BA4D11DD2DD24C101455D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 00:45:24 +0000 Certificate not after: Tue 28 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 192.197.60.0/24 IP: 199.212.15.0/24 IP: 199.212.84.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:a4:d1:1d:d2:dd:24:c1:01:45:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 24 00:45:24 2025 GMT Not After : Dec 28 01:45:24 2027 GMT Subject: CN=433ef7a7-1e53-4401-9dec-0da336641458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:c0:f8:79:56:6c:a9:65:06:99:dd:8c:e8: 66:19:5d:7d:26:33:99:28:66:2a:d2:21:25:85:54: 15:9f:86:82:c6:34:0b:2b:a2:89:a3:5f:e1:bf:e6: e1:03:0a:7b:c0:50:ba:c8:21:62:b1:81:91:99:5f: e0:d4:9f:86:ab:1e:60:85:82:4f:b4:94:5f:10:06: 19:12:a0:a1:ad:83:91:ef:2b:bd:13:cc:2c:54:9a: ff:f3:93:48:96:85:05:4e:9a:c3:4f:30:87:bf:45: c7:68:a3:a5:32:2c:fb:78:39:e1:83:3e:42:9a:6d: 11:2b:4d:98:c6:d3:af:8b:fb:5e:d6:b0:c5:11:a3: 6e:d6:df:67:42:44:9b:10:d3:e9:59:fb:ba:d1:3c: e3:71:89:69:a6:5b:12:01:83:1f:72:6d:75:84:23: 8f:c9:87:99:d8:11:9f:fd:37:7c:a8:81:74:fd:e0: c9:e7:d5:df:84:94:4a:88:a0:8c:20:59:87:32:aa: 2f:62:57:49:45:48:31:e6:d1:c0:dd:a2:ca:7b:01: 8a:26:8b:58:4e:cc:ba:dc:5e:f0:8c:8a:08:e4:23: 34:e2:b5:2a:1f:8c:dd:4a:5c:c0:29:d3:97:70:0f: 33:55:d2:d7:68:e0:5c:a1:ee:d4:b9:fa:1a:b4:6a: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.197.60.0/24 199.212.15.0/24 199.212.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5a:18:ac:4b:a3:5c:ad:a3:89:e4:fb:42:b2:f8:38:45:43: d7:b0:bc:e0:f6:e3:79:b5:7f:bb:bf:7b:80:21:ad:43:5f:ad: 87:2b:bf:21:23:4b:00:28:22:d2:66:0d:db:58:9d:43:75:45: d6:e5:58:87:89:82:d5:14:f5:db:87:23:38:c4:8a:cb:49:b1: 07:14:8a:ef:19:83:4d:07:03:cf:22:ff:d1:a7:be:dd:77:be: 99:bd:e1:f7:a7:b1:89:76:49:14:4c:8e:d2:47:68:cb:6e:33: a5:be:eb:66:5b:1e:28:09:7e:85:42:84:86:39:79:26:a4:ef: 3a:97:ef:36:66:9c:97:1e:a5:47:a9:29:34:c7:fb:9a:11:ea: 52:ba:ea:c4:3b:71:1a:30:84:47:3c:ef:a1:7b:15:9f:96:9e: fd:0e:17:8a:cf:4e:03:1f:f0:56:fc:83:7d:05:f6:17:39:65: 8c:c3:aa:e4:b0:ff:80:d7:6e:b2:d8:e1:d0:1f:98:9b:c3:c0: 92:ea:f2:3f:66:ac:03:f3:5f:e2:f6:ac:4b:ad:a0:fb:e4:a8: c7:4d:ab:ea:a9:1b:43:f0:1a:b3:62:4e:9a:ed:a0:3d:51:1b: 13:8a:45:3f:03:7a:51:71:c0:15:fc:3b:4e:06:40:05:5d:36: 8c:13:f6:98 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEtLpNEd0t0kwQFFXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyNDAwNDUyNFoXDTI3MTIyODAxNDUyNFowLzEtMCsGA1UEAxMk NDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQxNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+DA+HlWbKllBpndjOhmGV19JjOZKGYq0iEl hVQVn4aCxjQLK6KJo1/hv+bhAwp7wFC6yCFisYGRmV/g1J+Gqx5ghYJPtJRfEAYZ EqChrYOR7yu9E8wsVJr/85NIloUFTprDTzCHv0XHaKOlMiz7eDnhgz5Cmm0RK02Y xtOvi/te1rDFEaNu1t9nQkSbENPpWfu60TzjcYlpplsSAYMfcm11hCOPyYeZ2BGf /Td8qIF0/eDJ59XfhJRKiKCMIFmHMqovYldJRUgx5tHA3aLKewGKJotYTsy63F7w jIoI5CM04rUqH4zdSlzAKdOXcA8zVdLXaOBcoe7UufoatGpt+wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFBUwiMr5PQeDfGkCDtPJ6TMbljAYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQzM2VmN2E3LTFlNTMtNDQwMS05 ZGVjLTBkYTMzNjY0MTQ1OC80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2 NDE0NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADAxTwDBADH1A8DBAHH1FQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALloY rEujXK2jieT7QrL4OEVD17C84PbjebV/u797gCGtQ1+thyu/ISNLACgi0mYN21id Q3VF1uVYh4mC1RT124cjOMSKy0mxBxSK7xmDTQcDzyL/0ae+3Xe+mb3h96exiXZJ FEyO0kdoy24zpb7rZlseKAl+hUKEhjl5JqTvOpfvNmaclx6lR6kpNMf7mhHqUrrq xDtxGjCERzzvoXsVn5ae/Q4Xis9OAx/wVvyDfQX2FzlljMOq5LD/gNdustjh0B+Y m8PAkuryP2asA/Nf4vasS62g++Sox02r6qkbQ/Aas2JOmu2gPVEbE4pFPwN6UXHA Ffw7TgZABV02jBP2mA== -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:44 2025 by rpki-client