$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer File: 4cd4075b-ef78-4472-b954-b5adf4a534e5.cer (raw, json) Hash identifier: 5tVbAvqKc15U8Wh4wul6QzbJS1SjMtBnxgAEm9E7ouE= Subject key identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6A5A5713C2C70A3723C5B240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 00:45:24 +0000 Certificate not after: Sat 08 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 4579 AS: 17214 AS: 19097 AS: 20434 IP: 66.119.119.0/24 IP: 162.248.24.0/21 IP: 199.91.42.0/23 IP: 204.154.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:5a:57:13:c2:c7:0a:37:23:c5:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 5 00:45:24 2025 GMT Not After : Jan 8 01:45:24 2028 GMT Subject: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:f9:79:1d:19:5f:b1:5f:f1:fb:e2:1e:38: 6c:6c:e1:81:97:92:2b:c1:6a:d6:b1:61:3b:74:23: 6d:a5:69:e5:b1:1e:5d:ea:aa:5d:2f:5a:35:c0:52: fc:9d:32:1d:c5:10:aa:c2:38:05:46:e0:d5:5f:b5: c2:fb:9f:76:12:5d:58:b1:b3:44:98:24:70:7f:82: 74:02:3f:a5:19:f7:6a:3e:c5:57:76:9c:20:20:41: 81:9d:89:a8:99:2c:a9:97:bb:2e:c2:f0:c4:43:f4: 1e:9e:4b:70:e2:ee:9e:b4:9b:54:c1:fe:ca:00:6e: c8:66:59:1d:8f:cb:8b:65:36:c4:bb:40:85:7b:36: fb:9f:1c:3f:f2:b8:0d:a3:33:f0:be:5f:60:bd:a6: 55:2c:5e:16:3d:44:56:b3:e9:6e:af:a4:db:a4:03: 0c:b2:ca:28:93:9b:19:c3:4f:24:e2:53:da:4f:29: 65:7f:8e:2c:62:00:20:85:88:5d:67:16:42:70:f8: 97:ff:bc:5f:6e:18:05:a1:0e:80:64:8e:72:d1:89: 2f:86:95:8e:61:79:42:c1:62:9e:7f:9e:01:ce:bf: 72:f7:08:75:25:fb:2f:c6:6d:75:a7:2d:00:3e:4d: d9:03:e7:57:f6:e6:b1:9d:69:70:a1:34:4a:34:c0: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.119.119.0/24 162.248.24.0/21 199.91.42.0/23 204.154.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4579 17214 19097 20434 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7d:c6:88:cb:72:71:d3:ea:31:66:64:cb:d8:35:23:d1:4a: 66:09:69:19:e6:3e:83:aa:27:9e:7b:d3:62:67:8e:64:2f:b0: d5:15:ff:a5:79:64:90:ef:b6:84:28:ac:f9:e6:fa:0f:f3:28: 02:fd:00:79:73:a9:9f:3c:a7:87:97:15:c0:2d:43:c2:a2:bb: 58:9d:df:7e:19:47:42:3c:c9:f2:44:23:c6:72:6c:8a:b9:6f: 6d:00:ac:f5:ec:e1:bd:9c:e3:1a:eb:14:00:eb:e9:fb:7c:94: fc:a6:d4:01:43:65:9e:c0:c6:dd:07:f1:d4:c2:f7:ec:0a:1d: 29:dc:cc:23:55:f7:0d:52:3c:30:21:0d:6d:1e:e6:cd:21:3e: b3:37:ea:76:85:97:0a:21:69:4e:88:42:af:f3:92:da:20:a4: e6:f9:4b:09:aa:13:cb:2c:d1:03:4a:68:4c:0d:19:cd:71:13: 11:3c:c1:e1:e2:21:8f:d9:1b:b9:70:f0:f3:e0:9c:5a:b2:a9: 1f:54:cf:a4:42:72:2c:dc:db:89:18:50:be:fa:0f:8f:2c:08: f3:e3:21:0b:c7:ff:37:94:2a:24:bf:bf:30:e2:3d:1e:15:07: 58:14:8d:3f:73:65:0d:38:3a:04:16:53:0a:e6:c6:a5:cb:ac: 31:21:73:92 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEtqWlcTwscKNyPFskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNTAwNDUyNFoXDTI4MDEwODAxNDUyNFowLzEtMCsGA1UEAxMk NGNkNDA3NWItZWY3OC00NDcyLWI5NTQtYjVhZGY0YTUzNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjz5eR0ZX7Ff8fviHjhsbOGBl5IrwWrWsWE7 dCNtpWnlsR5d6qpdL1o1wFL8nTIdxRCqwjgFRuDVX7XC+592El1YsbNEmCRwf4J0 Aj+lGfdqPsVXdpwgIEGBnYmomSypl7suwvDEQ/Qenktw4u6etJtUwf7KAG7IZlkd j8uLZTbEu0CFezb7nxw/8rgNozPwvl9gvaZVLF4WPURWs+lur6TbpAMMssook5sZ w08k4lPaTyllf44sYgAghYhdZxZCcPiX/7xfbhgFoQ6AZI5y0YkvhpWOYXlCwWKe f54Bzr9y9wh1Jfsvxm11py0APk3ZA+dX9uaxnWlwoTRKNMCaFQIDAQABo4IEODCC BDQwHQYDVR0OBBYEFNGHbjKphKBZK9fxeZI+zB36wkbGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 Y2Q0MDc1Yi1lZjc4LTQ0NzItYjk1NC1iNWFkZjRhNTM0ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRjZDQwNzViLWVmNzgtNDQ3Mi1i OTU0LWI1YWRmNGE1MzRlNS80Y2Q0MDc1Yi1lZjc4LTQ0NzItYjk1NC1iNWFkZjRh NTM0ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBABCd3cDBAOi+BgDBAHHWyoDBADMmnkwJQYIKwYB BQUHAQgBAf8EFjAUoBIwEAICEeMCAkM+AgJKmQICT9IwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASn3GiMty cdPqMWZky9g1I9FKZglpGeY+g6onnnvTYmeOZC+w1RX/pXlkkO+2hCis+eb6D/Mo Av0AeXOpnzynh5cVwC1DwqK7WJ3ffhlHQjzJ8kQjxnJsirlvbQCs9ezhvZzjGusU AOvp+3yU/KbUAUNlnsDG3Qfx1ML37AodKdzMI1X3DVI8MCENbR7mzSE+szfqdoWX CiFpTohCr/OS2iCk5vlLCaoTyyzRA0poTA0ZzXETETzB4eIhj9kbuXDw8+CcWrKp H1TPpEJyLNzbiRhQvvoPjywI8+MhC8f/N5QqJL+/MOI9HhUHWBSNP3NlDTg6BBZT CubGpcusMSFzkg== -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:23 2025 by rpki-client