$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer File: 5e4e9a46-06dc-462d-a10c-710a3c461796.cer (raw, json) Hash identifier: LZQnbomQQIWSy5iXcTQu1dO/7/CzrnfrTET2AbxQXAs= Subject key identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B110473728E5B5A53F7024780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 192.88.242.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:72:8e:5b:5a:53:f7:02:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=5e4e9a46-06dc-462d-a10c-710a3c461796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:5f:d5:85:34:43:be:41:5b:49:22:01:1f: da:47:43:0f:6a:1c:a0:2e:c1:fb:02:ed:22:5f:f7: 3b:3b:ec:2e:15:d5:6d:af:a8:f7:a7:58:5a:e1:13: b0:3b:76:ff:1f:b3:27:d0:13:12:c5:ee:98:5f:3e: 35:0c:31:6f:32:ab:c0:14:7f:d2:88:60:61:f7:11: d6:b5:fb:9d:2c:ac:5c:ca:2c:2b:66:56:e1:9e:8e: 99:de:cf:8f:00:46:d0:f1:7a:24:be:96:39:5a:b4: 3e:2b:44:ff:aa:03:89:e4:7a:8a:4d:ca:fc:fb:d7: e2:fc:ee:ee:c0:59:e6:ad:b8:17:33:13:99:75:10: c2:da:8c:d9:6c:cd:d3:13:e4:ae:60:54:1a:2f:a9: ba:17:67:e1:e1:20:96:8b:ea:e0:0b:5c:d2:12:73: b4:38:cf:eb:25:38:26:c1:64:39:19:e7:34:f0:1a: 38:40:88:82:7a:9c:1f:00:92:d3:e6:5a:49:0b:b0: 17:e9:66:ae:af:a8:cb:69:0b:18:97:ae:ad:98:cc: fb:b9:42:b8:97:20:18:f3:d1:b7:fe:7b:12:b1:f2: d1:92:cb:3f:2e:de:99:72:85:36:59:cb:47:c6:11: 4a:37:c9:6f:57:0a:47:02:30:5a:40:0e:fd:f1:5d: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:35:50:ef:6b:05:c2:fd:77:a9:79:28:3e:22:93:a8:af:78: 62:17:cd:09:5e:a7:eb:dc:b2:0e:f5:40:4c:34:48:10:5b:fe: 98:0b:29:93:07:17:c8:bd:7b:f9:6e:50:dd:17:f1:b6:12:9e: 93:71:c4:e3:39:f0:10:70:c1:f6:5c:7e:0c:07:88:50:cb:19: 14:17:38:4a:58:c3:01:f3:2e:ce:3a:21:e5:d6:4b:d8:5e:d0: 21:2e:a1:bd:f4:f1:80:c3:3b:94:60:91:0b:55:32:ba:1b:47: 8e:cc:27:2f:da:20:da:85:cf:0b:95:1c:01:4a:4f:89:7a:3e: 29:96:0a:c9:a8:c2:e1:02:f0:ea:5e:7f:a0:52:2c:22:27:57: bb:53:f3:19:58:b7:e7:be:72:8b:4d:f0:d2:3f:f0:e5:d0:db: 0a:32:31:48:4d:28:31:7a:88:66:7c:dc:78:25:dd:fc:34:37: 2e:29:5b:89:76:8f:0c:85:9c:cc:80:3d:81:f0:ce:08:f3:ab: 5e:76:c1:3f:80:0e:dc:fd:79:8d:1c:c2:b3:14:3a:3f:3c:51: db:de:7a:f0:3e:e7:90:68:a9:18:d6:24:cc:a9:b8:f6:22:77: 60:fe:b6:22:68:0c:8b:61:75:28:84:6a:e0:59:3d:8d:e3:65: 34:1d:cd:c1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsRBHNyjltaU/cCR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk NWU0ZTlhNDYtMDZkYy00NjJkLWExMGMtNzEwYTNjNDYxNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpdf1YU0Q75BW0kiAR/aR0MPahygLsH7Au0i X/c7O+wuFdVtr6j3p1ha4ROwO3b/H7Mn0BMSxe6YXz41DDFvMqvAFH/SiGBh9xHW tfudLKxcyiwrZlbhno6Z3s+PAEbQ8XokvpY5WrQ+K0T/qgOJ5HqKTcr8+9fi/O7u wFnmrbgXMxOZdRDC2ozZbM3TE+SuYFQaL6m6F2fh4SCWi+rgC1zSEnO0OM/rJTgm wWQ5Gec08Bo4QIiCepwfAJLT5lpJC7AX6Waur6jLaQsYl66tmMz7uUK4lyAY89G3 /nsSsfLRkss/Lt6ZcoU2WctHxhFKN8lvVwpHAjBaQA798V3DfQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHxADTnI6hfsZq0gBtQVa/gP3PtMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZTRlOWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBhM2M0NjE3OTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVlNGU5YTQ2LTA2ZGMtNDYyZC1h MTBjLTcxMGEzYzQ2MTc5Ni81ZTRlOWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBhM2M0 NjE3OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAWPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEjVQ72sFwv13qXkoPiKT qK94YhfNCV6n69yyDvVATDRIEFv+mAspkwcXyL17+W5Q3RfxthKek3HE4znwEHDB 9lx+DAeIUMsZFBc4SljDAfMuzjoh5dZL2F7QIS6hvfTxgMM7lGCRC1UyuhtHjswn L9og2oXPC5UcAUpPiXo+KZYKyajC4QLw6l5/oFIsIidXu1PzGVi3575yi03w0j/w 5dDbCjIxSE0oMXqIZnzceCXd/DQ3LilbiXaPDIWczIA9gfDOCPOrXnbBP4AO3P15 jRzCsxQ6PzxR29568D7nkGipGNYkzKm49iJ3YP62ImgMi2F1KIRq4Fk9jeNlNB3N wQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:16 2025 by rpki-client