$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer File: 87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer (raw, json) Hash identifier: v77MlwXA6qRRF1K4t0Mgf10AlPOsNEu/9SPdG3oYLf0= Subject key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B25F496C0D315725798E0F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 12:45:25 +0000 Certificate not after: Tue 14 Dec 2027 13:45:25 +0000 Subordinate resources: AS: 10957 AS: 17065 IP: 208.79.132.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:f4:96:c0:d3:15:72:57:98:e0:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 10 12:45:25 2025 GMT Not After : Dec 14 13:45:25 2027 GMT Subject: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:5f:6a:ef:45:b3:a7:c8:f7:86:06:39:9c: cd:e7:1e:d7:4e:ba:68:e8:cc:44:be:e9:47:1e:08: 9c:5f:eb:82:a9:50:5a:82:61:d9:35:30:be:1e:db: e3:39:93:c2:1d:a0:76:6b:27:d0:7c:6f:d9:cb:6b: b8:98:19:da:84:a7:9d:3d:80:ad:4a:b7:3b:b2:4e: ee:cc:40:10:30:eb:34:30:8f:2f:f5:1a:4d:c2:7d: 29:5d:bf:05:5d:92:4f:63:d3:cf:92:a5:9c:d6:80: ef:34:b7:eb:6c:04:87:49:8c:2f:fe:7b:80:e4:8b: 97:fe:be:83:c2:79:d3:e9:3c:29:a0:db:97:7b:d2: f8:f2:0e:9c:11:48:24:53:e3:aa:4f:6f:31:e8:8c: 6f:ed:06:8b:74:2e:a1:34:c6:c2:20:f6:51:75:2d: 57:7d:f4:ae:ce:85:6c:e2:07:04:39:c9:bd:30:b8: e6:fa:ae:2c:42:d1:fe:35:e9:70:00:fa:17:99:06: d6:04:65:23:b8:d0:7d:85:57:a7:85:ec:b1:eb:d6: dc:d8:d5:b6:c5:8b:68:f2:42:c2:e7:08:7b:87:89: f7:f9:89:43:8d:13:c7:ef:65:00:b3:aa:c0:ea:de: 87:93:81:6f:50:72:5a:60:26:7b:97:33:da:c3:d3: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.79.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10957 17065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:39:5e:c5:08:41:1e:ec:74:07:8b:b4:4d:37:e9:92:e4:84: d7:20:3e:2b:bc:8f:6e:8c:49:e5:48:2d:93:4b:0a:e7:b2:10: 3a:72:66:bf:0b:5b:9e:c4:db:09:62:18:03:33:14:c8:06:f7: 7a:39:b9:23:06:02:cd:af:56:ad:88:72:74:98:cc:3b:79:91: 91:4f:90:df:06:c0:e0:88:89:a7:9c:25:df:88:87:8c:ba:d3: ce:d6:af:98:8b:f5:e9:1a:52:8c:7b:d8:93:b4:3a:3c:e9:3a: f3:e3:53:d3:a5:fb:ce:b4:55:3c:a8:ee:ca:dc:36:35:df:03: c8:a9:ca:9e:24:d2:30:10:6c:c5:69:db:c7:f7:bf:a5:28:8b: 2a:99:d4:73:63:ef:c1:29:a8:4a:54:46:26:91:1f:fa:de:88: ea:15:8e:99:c4:88:bb:b0:58:86:3f:8f:ff:8c:a0:bd:7d:f8: a1:13:4a:7c:26:9d:5a:50:5a:ca:71:64:8b:83:8d:f5:56:5c: a3:3c:10:2e:87:7c:01:bd:b4:fc:bc:f2:eb:4c:9b:54:bf:f0: dc:b4:be:5a:d4:96:8d:93:6d:39:5f:2b:df:f1:d4:3b:5b:cd: 7b:d5:c1:1e:0a:41:dc:4c:b7:05:89:9f:21:5c:27:52:56:d4: fb:02:04:1f -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEsl9JbA0xVyV5jg8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxMDEyNDUyNVoXDTI3MTIxNDEzNDUyNVowLzEtMCsGA1UEAxMk ODdiYWE0ZDItMTFiMS00ODI5LTliZjYtODZlMGVmYzY1ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoBfau9Fs6fI94YGOZzN5x7XTrpo6MxEvulH HgicX+uCqVBagmHZNTC+HtvjOZPCHaB2ayfQfG/Zy2u4mBnahKedPYCtSrc7sk7u zEAQMOs0MI8v9RpNwn0pXb8FXZJPY9PPkqWc1oDvNLfrbASHSYwv/nuA5IuX/r6D wnnT6TwpoNuXe9L48g6cEUgkU+OqT28x6Ixv7QaLdC6hNMbCIPZRdS1XffSuzoVs 4gcEOcm9MLjm+q4sQtH+NelwAPoXmQbWBGUjuNB9hVenheyx69bc2NW2xYto8kLC 5wh7h4n3+YlDjRPH72UAs6rA6t6Hk4FvUHJaYCZ7lzPaw9PVyQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFAW/ut0U4I2y4sfme9eO+TnhyEZRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZjNjVmZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg3YmFhNGQyLTExYjEtNDgyOS05 YmY2LTg2ZTBlZmM2NWZmNC84N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZj NjVmZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQT4QwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC Ks0CAkKpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAB05XsUIQR7sdAeLtE036ZLkhNcgPiu8j26MSeVILZNL CueyEDpyZr8LW57E2wliGAMzFMgG93o5uSMGAs2vVq2IcnSYzDt5kZFPkN8GwOCI iaecJd+Ih4y6087Wr5iL9ekaUox72JO0OjzpOvPjU9Ol+860VTyo7srcNjXfA8ip yp4k0jAQbMVp28f3v6UoiyqZ1HNj78EpqEpURiaRH/reiOoVjpnEiLuwWIY/j/+M oL19+KETSnwmnVpQWspxZIuDjfVWXKM8EC6HfAG9tPy88utMm1S/8Ny0vlrUlo2T bTlfK9/x1DtbzXvVwR4KQdxMtwWJnyFcJ1JW1PsCBB8= -----END CERTIFICATE-----Generated at Thu Oct 9 01:22:00 2025 by rpki-client