$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.cer File: 4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.cer (raw, json) Hash identifier: y7/4COurIzMpbdfbfC8v3QUPcsNbp2UFBDLEA0QNWDI= Subject key identifier: 02:83:77:25:61:95:7A:B6:2B:68:80:A6:8E:C7:B3:82:58:17:8B:C5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B21C48ED0F53AD22925043280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 398010 IP: 199.120.131.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:d0:f5:3a:d2:29:25:04:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=4cd0cdd0-b8da-4361-a3ad-3820021b7d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:57:0f:a1:b5:04:5a:7a:b0:82:5f:a1:6c:c4: b2:04:7d:15:0a:d5:41:fa:cc:bf:73:5f:04:19:a4: 3e:83:cd:da:ad:d9:a8:f7:54:10:3f:76:ef:16:80: ad:e7:37:61:92:ee:37:dd:fb:0c:5a:02:0c:d0:a3: 71:43:55:35:74:eb:de:c5:aa:63:95:34:2f:74:d3: 88:a6:64:d7:8a:ab:98:97:a5:82:9e:d9:1c:d8:cd: 6b:eb:ee:ab:5e:33:c7:22:65:4b:29:6a:33:d3:a6: b9:2a:96:47:2f:c4:36:94:55:28:b8:5d:d5:e0:f4: 42:a5:53:1e:b4:ab:e5:ed:cb:73:4b:ae:5f:b3:1a: ca:1e:e0:f6:54:5d:20:f0:ba:8c:ce:75:3d:c1:f2: 42:dd:07:d5:81:fc:83:98:9d:9b:0a:b9:db:ff:89: d7:bc:f1:ac:ae:73:87:5a:17:0f:a9:bb:1f:fd:ea: da:91:f0:46:38:16:16:d3:e1:ef:45:f6:fd:64:52: 4a:13:19:68:38:6f:21:8b:9a:1d:23:2c:d0:71:c4: 76:8c:dd:49:a1:4a:54:0b:4c:45:40:b4:ba:58:45: 60:51:96:b9:da:29:6a:70:c2:88:cb:fd:3e:16:6d: 1a:d6:a9:73:e4:cc:bb:6e:7a:cc:8b:dc:1a:18:b4: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:77:25:61:95:7A:B6:2B:68:80:A6:8E:C7:B3:82:58:17:8B:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.120.131.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:72:82:69:ec:70:02:03:64:8c:73:e7:3e:5e:9e:eb:84:7f: 65:11:df:97:23:01:cb:d5:35:dd:48:93:54:91:e1:ed:3a:a6: 54:44:59:91:d9:4a:71:75:99:68:6c:10:a9:2a:bd:58:97:63: 0c:53:bd:6b:e8:4d:54:8a:09:0c:72:76:ff:2b:0d:7a:66:ed: b5:05:a5:0a:b4:96:23:0a:9c:55:f0:17:3d:32:8a:a0:30:c2: 78:54:93:48:9d:e6:16:26:3f:46:7b:61:60:63:55:03:71:ec: fd:4c:15:ae:e4:22:fe:42:98:cb:33:0a:3d:89:81:9f:70:f5: 3b:a2:b3:82:4c:28:c5:b9:93:89:a9:90:3a:51:70:d0:f6:99: e1:8a:d0:ba:26:e3:f6:5b:ea:81:32:2a:29:e9:31:a2:be:ea: ee:19:8a:ce:f7:aa:3b:dc:43:dd:97:f0:2e:08:73:8d:0b:e2: de:89:8f:c0:a3:81:ea:73:f2:ee:df:a9:f8:ba:f4:0e:01:39: 8e:af:f4:24:bd:4d:a7:d7:6a:53:73:c9:e2:9c:76:5e:a8:34: 46:85:ee:e3:50:6b:c6:7a:7c:07:7e:eb:de:5d:6b:39:64:bc: 23:f8:88:a5:a5:fe:e3:3b:eb:63:1d:4a:05:e1:4e:45:73:34: 94:7b:22:52 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEshxI7Q9TrSKSUEMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk NGNkMGNkZDAtYjhkYS00MzYxLWEzYWQtMzgyMDAyMWI3ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lcPobUEWnqwgl+hbMSyBH0VCtVB+sy/c18E GaQ+g83ardmo91QQP3bvFoCt5zdhku433fsMWgIM0KNxQ1U1dOvexapjlTQvdNOI pmTXiquYl6WCntkc2M1r6+6rXjPHImVLKWoz06a5KpZHL8Q2lFUouF3V4PRCpVMe tKvl7ctzS65fsxrKHuD2VF0g8LqMznU9wfJC3QfVgfyDmJ2bCrnb/4nXvPGsrnOH WhcPqbsf/erakfBGOBYW0+HvRfb9ZFJKExloOG8hi5odIyzQccR2jN1JoUpUC0xF QLS6WEVgUZa52ilqcMKIy/0+Fm0a1qlz5My7bnrMi9waGLS5KwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAKDdyVhlXq2K2iApo7Hs4JYF4vFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 Y2QwY2RkMC1iOGRhLTQzNjEtYTNhZC0zODIwMDIxYjdkM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRjZDBjZGQwLWI4ZGEtNDM2MS1h M2FkLTM4MjAwMjFiN2QzZC80Y2QwY2RkMC1iOGRhLTQzNjEtYTNhZC0zODIwMDIx YjdkM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHeIMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhK6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEJygmnscAIDZIxz5z5enuuEf2UR35cjAcvVNd1Ik1SR4e06 plREWZHZSnF1mWhsEKkqvViXYwxTvWvoTVSKCQxydv8rDXpm7bUFpQq0liMKnFXw Fz0yiqAwwnhUk0id5hYmP0Z7YWBjVQNx7P1MFa7kIv5CmMszCj2JgZ9w9Tuis4JM KMW5k4mpkDpRcND2meGK0Lom4/Zb6oEyKinpMaK+6u4Zis73qjvcQ92X8C4Ic40L 4t6Jj8Cjgepz8u7fqfi69A4BOY6v9CS9TafXalNzyeKcdl6oNEaF7uNQa8Z6fAd+ 695dazlkvCP4iKWl/uM762MdSgXhTkVzNJR7IlI= -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:43 2025 by rpki-client