$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer File: 876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer (raw, json) Hash identifier: dLwbnb+qxMA49Jxl5N/fMsRHDeJ3+cNaIQxz1Pq/r7w= Subject key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B61FA4A21C31B315139A77000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 00:45:24 +0000 Certificate not after: Wed 05 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 11236 IP: 208.70.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:fa:4a:21:c3:1b:31:51:39:a7:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 2 00:45:24 2025 GMT Not After : Jan 5 01:45:24 2028 GMT Subject: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:17:2d:41:3f:2c:91:aa:7e:2f:a2:73:79: 65:56:4e:6c:a2:1a:bc:97:72:c2:a3:d7:8b:ba:e4: b8:8c:10:e8:c1:ca:08:aa:10:ac:f6:22:b8:d4:e2: 23:b6:f8:c2:82:e5:e6:5a:fe:26:1a:ff:ae:30:51: 1e:6f:c4:51:eb:e4:a5:cf:0c:b0:39:90:04:90:d4: c1:6b:14:2b:18:60:b4:fc:c2:16:91:41:c3:0c:11: 50:d7:98:a4:e1:40:b4:26:a1:78:e6:00:bf:e3:3d: ad:5b:c1:c2:1a:7c:5d:1a:91:72:d2:39:02:a8:c9: 6e:e7:25:f4:a6:a0:28:28:43:47:80:da:b2:44:2e: 64:74:ad:2e:71:34:ab:ff:f8:c9:24:5b:43:a7:86: c3:18:b1:03:f6:de:73:9d:36:e0:a3:0f:fa:25:45: 86:3f:62:bc:22:e7:41:76:4a:1c:e3:1d:36:c8:f4: 6f:fe:ee:c1:44:ac:55:68:3a:67:4d:59:6a:c1:e5: 0c:a1:74:a8:cb:bc:0c:89:66:eb:bb:dc:ed:60:a0: 89:f7:b1:04:c8:e4:ec:cb:f9:e9:d2:ec:73:51:e9: b5:4d:ea:88:a3:3c:19:29:26:81:6f:7f:26:9e:c0: 73:04:f1:03:00:d8:5e:c9:47:69:4e:e8:d6:ad:3b: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.70.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11236 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9f:13:39:f6:10:3c:c9:d4:d8:05:4f:75:77:ca:0a:7f:62: 30:a0:32:1f:a9:d1:27:95:f1:56:59:0f:d5:8c:f4:74:45:55: 76:d2:b2:c8:7d:38:fc:4c:ea:63:0d:5e:6c:be:5f:e8:33:6c: 8b:c0:82:34:cf:ea:b9:00:be:e7:ae:0c:9d:80:2d:53:0f:34: f4:b3:fe:e6:cd:b6:a1:0f:7e:a5:20:b6:0b:42:0e:de:69:0a: 24:9f:0d:6e:97:c7:1c:d9:de:3d:49:75:8c:50:39:42:52:13: fb:ec:4e:32:b9:23:5a:71:e6:b3:80:6b:7e:ce:79:40:c0:cf: 61:60:9f:06:93:d8:04:09:a9:1c:ef:d4:b5:40:15:e3:46:dd: 76:e8:bf:59:f4:78:2e:41:80:c7:cb:9f:0b:0c:aa:52:6e:66: 12:ab:69:5d:06:d2:95:27:e5:7d:70:4f:87:24:f1:16:e8:3f: e6:8f:84:d7:95:b3:d5:5c:9e:13:e7:fd:f0:5e:84:a2:b0:82: 85:04:8e:e5:fc:e0:97:70:bb:25:d3:12:0e:e5:5d:e4:18:86: 60:a6:9b:ca:da:28:9d:94:4e:a6:6c:fd:e5:d4:8a:99:e8:a6: e6:1e:31:6b:24:cd:7b:0b:ba:2a:b0:4e:1b:27:2d:d6:28:af: bf:fc:d3:e8 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEth+kohwxsxUTmncAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwMjAwNDUyNFoXDTI4MDEwNTAxNDUyNFowLzEtMCsGA1UEAxMk ODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpUXLUE/LJGqfi+ic3llVk5sohq8l3LCo9eL uuS4jBDowcoIqhCs9iK41OIjtvjCguXmWv4mGv+uMFEeb8RR6+SlzwywOZAEkNTB axQrGGC0/MIWkUHDDBFQ15ik4UC0JqF45gC/4z2tW8HCGnxdGpFy0jkCqMlu5yX0 pqAoKENHgNqyRC5kdK0ucTSr//jJJFtDp4bDGLED9t5znTbgow/6JUWGP2K8IudB dkoc4x02yPRv/u7BRKxVaDpnTVlqweUMoXSoy7wMiWbru9ztYKCJ97EEyOTsy/np 0uxzUem1TeqIozwZKSaBb38mnsBzBPEDANheyUdpTujWrTu3ewIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBNhokwIZLw5M+RIXNYw54qqmqRhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg3NmJiNWE0LTcxZTUtNDk3Zi1h NGE0LWViM2YxYThhZmQxYy84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4 YWZkMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQRoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC K+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAO58TOfYQPMnU2AVPdXfKCn9iMKAyH6nRJ5XxVlkP1Yz0dEVV dtKyyH04/EzqYw1ebL5f6DNsi8CCNM/quQC+564MnYAtUw809LP+5s22oQ9+pSC2 C0IO3mkKJJ8NbpfHHNnePUl1jFA5QlIT++xOMrkjWnHms4Brfs55QMDPYWCfBpPY BAmpHO/UtUAV40bddui/WfR4LkGAx8ufCwyqUm5mEqtpXQbSlSflfXBPhyTxFug/ 5o+E15Wz1VyeE+f98F6EorCChQSO5fzgl3C7JdMSDuVd5BiGYKabytoonZROpmz9 5dSKmeim5h4xayTNewu6KrBOGyct1iivv/zT6A== -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:18 2025 by rpki-client