$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer File: 7cac21fa-fb8a-4352-9772-6995e344f72c.cer (raw, json) Hash identifier: 73DBWBtFBwJU+JLR1YgwoPCIrQIhNldX9o1wPpL4GWA= Subject key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B460F740DDE32DFFC5665C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 205.196.7.0/24 IP: 205.196.14.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:74:0d:de:32:df:fc:56:65:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=7cac21fa-fb8a-4352-9772-6995e344f72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:58:72:ad:d1:76:43:80:bb:4c:30:ad:1c:57: 2b:c9:53:28:cb:ef:95:cc:7c:7c:57:c4:0b:14:71: d3:18:fe:a6:1d:f4:3d:33:db:d2:a5:12:36:21:e5: 2f:0a:cd:5b:be:e9:8f:26:54:ce:db:11:34:91:8f: a2:28:fc:90:94:1d:28:a9:77:9f:e7:ac:88:0c:74: 43:a8:07:f9:df:f6:e2:06:be:0d:a9:2f:80:a2:d4: 6d:1d:4f:9e:43:a2:03:c8:7c:81:dc:80:66:26:66: f6:a9:7c:1f:ac:df:77:ab:a0:3d:88:2f:f4:96:07: 61:11:7d:a0:ab:17:8f:a6:67:2f:f7:b8:1b:ea:d3: 91:06:ba:44:9a:cd:5d:77:2a:ac:6d:0b:32:80:4c: ec:01:49:cc:c4:c6:16:43:9b:68:46:86:46:40:19: 80:c8:d6:5d:d4:18:5f:4a:78:75:42:a9:bf:33:e3: 5c:87:54:ae:91:0e:d8:13:93:15:4c:8d:64:c5:f6: 88:6d:c0:91:27:d7:19:a4:84:f3:0b:17:76:23:88: b6:4e:4f:98:fa:a3:7c:12:86:8f:8e:a3:d0:ca:14: 71:90:d1:41:49:47:1a:7a:77:a4:8c:fa:5b:f6:fa: 86:85:b2:d6:8d:7f:37:24:f8:17:e5:f9:38:a3:e9: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 205.196.7.0/24 205.196.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5c:21:4f:0e:f1:3d:39:dd:c0:58:b4:d1:d2:5f:a1:c5:0f: 5e:5b:f3:7d:6c:84:de:8d:63:b9:87:81:b3:d6:36:24:c0:86: db:10:e6:55:c5:c3:a6:86:fa:ae:cf:4d:d9:7f:54:1c:d7:00: 9a:20:00:da:7f:31:f9:8c:6a:a5:54:ef:76:59:80:a2:81:b0: f9:fe:7e:8c:d0:38:6b:4b:c8:b4:54:b3:c7:fe:3e:de:5e:6c: 3f:51:f7:70:61:36:aa:34:bc:1c:81:29:04:fa:73:d1:a1:86: 5c:0f:37:9b:85:ed:db:dc:aa:39:d6:4c:74:cd:bb:1a:80:71: bf:13:c4:bd:1d:ed:ef:89:da:90:b4:31:4a:74:52:22:d5:76: f8:10:c1:f8:5c:85:29:d7:7e:53:fe:de:64:de:df:a9:1f:b8: 5e:2a:17:24:8a:b7:ce:15:51:37:03:95:bc:f2:d6:33:59:60: af:47:09:28:14:9d:c6:ba:b0:6e:fc:35:17:4d:38:a3:3a:3f: cf:76:78:c7:ea:c2:ff:b7:aa:36:34:3a:0c:a6:5f:1d:db:a6: 07:b9:c2:14:b9:96:a5:a2:c9:28:09:fe:67:ae:37:9d:6f:2e: 55:ba:10:eb:29:c5:58:68:b1:6b:01:65:ba:9f:d6:dd:c2:aa: e6:84:86:bd -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEtGD3QN3jLf/FZlyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk N2NhYzIxZmEtZmI4YS00MzUyLTk3NzItNjk5NWUzNDRmNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1hyrdF2Q4C7TDCtHFcryVMoy++VzHx8V8QL FHHTGP6mHfQ9M9vSpRI2IeUvCs1bvumPJlTO2xE0kY+iKPyQlB0oqXef56yIDHRD qAf53/biBr4NqS+AotRtHU+eQ6IDyHyB3IBmJmb2qXwfrN93q6A9iC/0lgdhEX2g qxePpmcv97gb6tORBrpEms1ddyqsbQsygEzsAUnMxMYWQ5toRoZGQBmAyNZd1Bhf Snh1Qqm/M+Nch1SukQ7YE5MVTI1kxfaIbcCRJ9cZpITzCxd2I4i2Tk+Y+qN8EoaP jqPQyhRxkNFBSUcaenekjPpb9vqGhbLWjX83JPgX5fk4o+mZYwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFE5T2qe+zsTwZf9pglk1z5sATKLkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 Y2FjMjFmYS1mYjhhLTQzNTItOTc3Mi02OTk1ZTM0NGY3MmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdjYWMyMWZhLWZiOGEtNDM1Mi05 NzcyLTY5OTVlMzQ0ZjcyYy83Y2FjMjFmYS1mYjhhLTQzNTItOTc3Mi02OTk1ZTM0 NGY3MmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADNxAcDBADNxA4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABFwhTw7xPTnd wFi00dJfocUPXlvzfWyE3o1juYeBs9Y2JMCG2xDmVcXDpob6rs9N2X9UHNcAmiAA 2n8x+YxqpVTvdlmAooGw+f5+jNA4a0vItFSzx/4+3l5sP1H3cGE2qjS8HIEpBPpz 0aGGXA83m4Xt29yqOdZMdM27GoBxvxPEvR3t74nakLQxSnRSItV2+BDB+FyFKdd+ U/7eZN7fqR+4XioXJIq3zhVRNwOVvPLWM1lgr0cJKBSdxrqwbvw1F004ozo/z3Z4 x+rC/7eqNjQ6DKZfHdumB7nCFLmWpaLJKAn+Z643nW8uVboQ6ynFWGixawFlup/W 3cKq5oSGvQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:46 2025 by rpki-client