$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer File: 7ac70716-c89d-41e2-931b-d16e22a87ce6.cer (raw, json) Hash identifier: itKmoAUDnkrCiedIAEq7dSn08YQac7AUnK3BDy4cl2o= Subject key identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B71BD3ACB32F34AF44AF58FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:15:19 +0000 Certificate not after: Sun 21 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 23.177.232.0/24 IP: 131.143.128.0/22 IP: 2602:f8fa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:bd:3a:cb:32:f3:4a:f4:4a:f5:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 16:15:19 2025 GMT Not After : Nov 21 13:45:24 2027 GMT Subject: CN=7ac70716-c89d-41e2-931b-d16e22a87ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:5d:5b:3c:97:3d:13:08:6f:a1:15:b6:ab: 75:56:1e:06:e8:79:95:13:5a:a8:35:b2:0e:17:17: e2:84:0d:a8:70:80:cb:1a:90:82:54:1b:ff:55:58: a8:ee:34:90:fe:f9:9b:3e:86:19:64:9d:9f:eb:a3: a0:39:2c:21:ef:21:d9:68:48:db:74:0d:8f:e8:4b: e0:87:ad:3a:f6:64:f4:7c:52:36:ae:37:86:e0:df: ff:1d:bc:52:6b:e2:0f:11:20:46:c5:db:04:3b:9e: b0:10:c4:1a:ba:a1:d9:52:e4:be:fb:a6:26:4e:27: 56:1e:8e:b6:d5:79:44:81:85:45:c1:df:17:e4:90: f0:89:f9:0a:b1:a8:12:ce:96:cb:e1:43:2d:bf:0a: f8:80:0f:ad:00:ac:af:d9:11:1e:a5:24:ee:2a:61: b4:fe:77:b7:cf:2b:46:87:2e:dc:c7:90:b7:73:e8: 7b:6b:83:be:ef:63:cc:b4:6d:96:55:bf:de:c2:e3: f1:ce:92:09:9c:44:53:4a:30:b1:fd:e2:70:07:a8: f1:71:fa:a2:ee:94:73:00:f2:f5:4a:40:d0:bb:3d: 25:93:7e:ca:76:3a:b9:73:ef:d4:37:ab:3a:a9:71: b2:67:a2:e4:c5:5a:60:52:56:76:fc:00:9c:e1:c8: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.232.0/24 131.143.128.0/22 IPv6: 2602:f8fa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:80:07:a1:1c:2f:d4:12:fa:5f:e4:4c:e4:ca:ad:04:a0:fe: dd:e7:25:4a:32:b0:70:f3:8e:d4:a9:c2:10:a8:29:d9:2c:48: a0:5e:b6:a5:38:86:d3:61:7d:ec:a9:d8:b5:85:9b:a7:aa:ba: 40:87:d5:be:de:02:3c:09:30:5d:23:a2:51:40:6a:b1:3c:70: c0:a2:88:e0:fe:df:70:8e:74:55:00:d7:d2:b5:89:88:ab:c9: 24:99:84:7c:28:d3:2d:dd:a7:b4:58:6a:06:b3:ab:db:f5:71: 51:5d:1f:ee:45:d5:f9:ba:49:1f:7a:cb:29:1e:ca:a6:f6:a9: 4b:0e:25:4c:7f:8b:ed:8d:d0:66:f4:07:48:cb:33:50:44:bd: 75:b1:8f:4b:59:11:6b:2a:1e:eb:86:a8:17:2e:03:cf:16:bb: 1a:c2:57:71:3e:71:02:f0:b2:a8:4f:0c:39:7a:43:83:67:d0: b7:90:1a:dc:36:0e:e2:0f:a9:10:02:11:a8:8c:6e:96:38:8b: 77:26:f4:2f:12:6d:b9:6f:74:fd:3f:a7:ac:36:d2:0a:00:7d: d6:1f:3b:ad:92:96:01:b1:49:0b:6e:09:18:fd:60:a7:c2:91: c2:7d:e3:9d:d6:b3:c1:db:99:c8:69:d4:b7:05:cb:d3:82:26: c9:8a:06:98 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEtxvTrLMvNK9Er1j8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzE2MTUxOVoXDTI3MTEyMTEzNDUyNFowLzEtMCsGA1UEAxMk N2FjNzA3MTYtYzg5ZC00MWUyLTkzMWItZDE2ZTIyYTg3Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu5dWzyXPRMIb6EVtqt1Vh4G6HmVE1qoNbIO FxfihA2ocIDLGpCCVBv/VVio7jSQ/vmbPoYZZJ2f66OgOSwh7yHZaEjbdA2P6Evg h6069mT0fFI2rjeG4N//HbxSa+IPESBGxdsEO56wEMQauqHZUuS++6YmTidWHo62 1XlEgYVFwd8X5JDwifkKsagSzpbL4UMtvwr4gA+tAKyv2REepSTuKmG0/ne3zytG hy7cx5C3c+h7a4O+72PMtG2WVb/ewuPxzpIJnERTSjCx/eJwB6jxcfqi7pRzAPL1 SkDQuz0lk37Kdjq5c+/UN6s6qXGyZ6LkxVpgUlZ2/ACc4cjGwwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFDX+EOlUyy2n64+W99nnDwCm0558MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 YWM3MDcxNi1jODlkLTQxZTItOTMxYi1kMTZlMjJhODdjZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdhYzcwNzE2LWM4OWQtNDFlMi05 MzFiLWQxNmUyMmE4N2NlNi83YWM3MDcxNi1jODlkLTQxZTItOTMxYi1kMTZlMjJh ODdjZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsegDBAKDj4AwDgQCAAIwCAMGACYC+PoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeAB6EcL9QS+l/kTOTKrQSg/t3nJUoysHDzjtSpwhCoKdksSKBetqU4 htNhfeyp2LWFm6equkCH1b7eAjwJMF0jolFAarE8cMCiiOD+33COdFUA19K1iYir ySSZhHwo0y3dp7RYagazq9v1cVFdH+5F1fm6SR96yykeyqb2qUsOJUx/i+2N0Gb0 B0jLM1BEvXWxj0tZEWsqHuuGqBcuA88WuxrCV3E+cQLwsqhPDDl6Q4Nn0LeQGtw2 DuIPqRACEaiMbpY4i3cm9C8SbblvdP0/p6w20goAfdYfO62SlgGxSQtuCRj9YKfC kcJ9453Ws8Hbmchp1LcFy9OCJsmKBpg= -----END CERTIFICATE-----Generated at Fri Oct 10 15:21:27 2025 by rpki-client