$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer File: 856d400d-4340-4d39-9ec7-38c840be48be.cer (raw, json) Hash identifier: M6uDfi7Gimw3X3BUaMyUxMtQtpGsO1rifLQbnZm9b34= Subject key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B11047387AF0BCDD08B83BC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 206.183.156.0/24 IP: 2602:f8d1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:87:af:0b:cd:d0:8b:83:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=856d400d-4340-4d39-9ec7-38c840be48be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:ee:38:37:24:05:dd:15:8c:93:a5:36:45: 3c:e5:49:1f:12:b7:0f:d4:50:fe:4e:2b:93:08:ca: 4a:a7:35:58:83:3e:f1:7c:b0:c4:e7:42:93:69:bb: aa:1c:e7:99:23:e6:87:e0:fa:f4:15:4e:d1:35:22: 31:e4:36:ca:3d:91:44:98:45:ac:cd:00:94:84:ed: ff:1b:10:78:83:70:cb:37:e4:9f:df:b7:1e:5e:54: 04:fd:1a:10:39:ad:73:46:31:32:30:1d:b7:05:22: 6c:17:8b:f5:f5:ef:24:47:55:e2:4e:fe:8b:34:2c: da:b6:c7:42:55:ce:40:ec:20:d2:5c:44:90:d7:f8: e3:fb:60:ff:0d:9a:a9:16:56:50:b4:9b:bf:b5:d8: 2e:12:56:4a:0f:4c:1a:68:fb:71:dc:ba:9b:52:2e: a4:67:65:2a:bd:40:02:80:b9:cd:ca:41:f0:64:2b: b5:8b:36:31:b8:e1:da:cd:77:0c:55:c8:d7:8d:93: 3c:d4:e6:56:a0:a0:3e:07:93:d4:54:18:ae:ea:e4: 8f:bc:3b:f9:b1:12:76:2d:ca:cb:5c:00:66:72:9b: 1c:ad:28:b0:66:b7:6f:f7:35:09:b5:9a:6c:bc:8b: f8:4c:52:18:43:44:2c:64:64:61:60:60:55:4f:2e: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 206.183.156.0/24 IPv6: 2602:f8d1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:09:d8:de:c8:cf:b5:d0:f1:02:15:83:e2:27:0d:39:e3:2a: e1:67:d5:77:bc:8f:d7:7a:04:b3:6b:fd:3f:20:5a:a2:ba:be: d7:42:f8:6e:a1:f8:4f:3a:09:b5:2a:08:e5:0d:93:ac:6e:f0: 37:4d:3b:8e:4a:ab:e7:14:4c:9d:05:d9:59:7f:de:89:bc:63: 56:5d:e0:4e:dc:c4:b9:fa:b3:66:53:e4:e8:1a:09:f8:32:f3: f5:20:27:bf:d4:fd:2a:28:82:11:5c:5f:47:79:75:67:d3:8b: f2:fe:d3:70:7c:4e:d2:3e:58:c8:b7:98:94:b5:10:33:7a:5b: 45:34:dd:6c:77:fc:b9:63:1e:59:da:70:24:e4:c1:c3:fd:d9: b6:0a:64:ed:8c:cd:16:7c:a2:e2:4d:13:13:4d:da:ab:0d:2d: b3:b6:bc:4e:51:e2:a1:96:34:0e:ca:1a:a7:03:3a:f5:6f:01: 97:31:d7:ca:a4:d3:aa:c3:38:f3:ab:42:9d:6a:a0:f2:a5:2c: c5:7a:61:30:12:82:c3:b0:1f:04:2e:63:62:ef:a4:1d:21:82: 32:9e:77:46:f1:41:51:ec:85:28:72:31:52:a0:46:46:7e:76: 40:7a:23:70:6c:a6:de:69:7e:b3:72:00:e1:71:80:f9:15:b6: d1:74:a4:96 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEsRBHOHrwvN0IuDvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk ODU2ZDQwMGQtNDM0MC00ZDM5LTllYzctMzhjODQwYmU0OGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYLuODckBd0VjJOlNkU85UkfErcP1FD+TiuT CMpKpzVYgz7xfLDE50KTabuqHOeZI+aH4Pr0FU7RNSIx5DbKPZFEmEWszQCUhO3/ GxB4g3DLN+Sf37ceXlQE/RoQOa1zRjEyMB23BSJsF4v19e8kR1XiTv6LNCzatsdC Vc5A7CDSXESQ1/jj+2D/DZqpFlZQtJu/tdguElZKD0waaPtx3LqbUi6kZ2UqvUAC gLnNykHwZCu1izYxuOHazXcMVcjXjZM81OZWoKA+B5PUVBiu6uSPvDv5sRJ2LcrL XABmcpscrSiwZrdv9zUJtZpsvIv4TFIYQ0QsZGRhYGBVTy49IQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKQM7xa+Ydzqa9dYvCp8wyAELv/gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NTZkNDAwZC00MzQwLTRkMzktOWVjNy0zOGM4NDBiZTQ4YmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg1NmQ0MDBkLTQzNDAtNGQzOS05 ZWM3LTM4Yzg0MGJlNDhiZS84NTZkNDAwZC00MzQwLTRkMzktOWVjNy0zOGM4NDBi ZTQ4YmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADOt5wwDgQCAAIwCAMGACYC+NEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFYJ2N7Iz7XQ8QIVg+InDTnjKuFn1Xe8j9d6BLNr/T8gWqK6vtdC+G6h+E86CbUq COUNk6xu8DdNO45Kq+cUTJ0F2Vl/3om8Y1Zd4E7cxLn6s2ZT5OgaCfgy8/UgJ7/U /SooghFcX0d5dWfTi/L+03B8TtI+WMi3mJS1EDN6W0U03Wx3/LljHlnacCTkwcP9 2bYKZO2MzRZ8ouJNExNN2qsNLbO2vE5R4qGWNA7KGqcDOvVvAZcx18qk06rDOPOr Qp1qoPKlLMV6YTASgsOwHwQuY2LvpB0hgjKed0bxQVHshShyMVKgRkZ+dkB6I3Bs pt5pfrNyAOFxgPkVttF0pJY= -----END CERTIFICATE-----Generated at Fri Oct 10 15:24:49 2025 by rpki-client