$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer File: 9c841696-0857-4d7c-8db5-21941a77450c.cer (raw, json) Hash identifier: gz25YBwbtT4NLqjdiL0LAFQ+Rt3u58w5LtPvUAkceoU= Subject key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B1104732E4056F6864D7F6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 192.138.137.0/24 IP: 192.160.192.0/24 IP: 192.160.204.0/24 IP: 192.245.252.0/24 IP: 192.245.254.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:2e:40:56:f6:86:4d:7f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=9c841696-0857-4d7c-8db5-21941a77450c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:90:cf:6f:9b:aa:71:46:26:74:6d:22:6a: 51:1a:e8:fa:12:ec:77:06:03:9c:6a:a2:93:28:39: f9:e2:9d:e2:0a:2f:53:52:0b:11:43:65:c4:52:82: 34:74:0b:97:12:d5:3d:b6:ae:b5:b8:0f:1b:00:92: aa:82:07:95:ea:46:25:23:9f:a6:db:03:79:8d:b4: b0:e2:46:82:b2:eb:cf:9b:c9:d1:e3:bb:59:2c:c7: 00:6e:65:bc:fa:93:7b:2b:54:3a:3e:c9:5c:9b:b2: 19:87:fc:0d:5a:a3:c9:0d:20:4d:4a:1c:da:8e:41: 93:38:65:c3:1d:15:a2:04:0d:7f:8d:f4:2c:f0:dd: b6:9a:09:15:0a:b6:27:aa:a5:9d:28:d9:80:9e:cb: a3:67:ae:8e:34:ca:f0:2c:2f:92:27:f9:c9:fa:3c: 3b:24:7a:c4:33:5b:e6:fc:c0:6c:44:de:54:2f:58: 29:1b:45:29:34:42:ca:7e:25:ab:50:7f:7f:d8:bb: 28:d8:34:31:3e:c4:7d:61:e5:c0:96:de:05:ba:3c: 71:5d:4f:ea:ee:90:dd:a0:c8:1c:a0:ba:60:8f:c2: b7:30:c9:d0:8a:18:82:f8:39:67:b4:3e:9d:19:56: b0:26:70:7c:0b:5e:9e:f9:16:b1:e2:bb:fc:c1:f9: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.138.137.0/24 192.160.192.0/24 192.160.204.0/24 192.245.252.0/24 192.245.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7c:00:eb:e5:3e:71:a7:5f:78:97:01:12:cc:7d:1a:f5:46: d3:31:42:ea:5c:da:3a:ef:73:91:4d:cb:c5:5c:58:bf:a2:aa: 05:3b:0a:4d:91:ca:fa:2d:9f:f7:d4:7a:a1:a3:19:f1:76:ac: cf:25:fe:43:35:97:16:72:b1:07:a3:07:fa:6a:93:dc:5f:37: bc:28:25:77:25:f7:ee:f3:20:8a:57:b9:cd:9f:55:aa:b7:3b: 4e:8e:68:7e:92:ab:88:fc:6a:bf:1e:f2:cc:5a:61:b2:c4:20: f2:f6:37:42:c5:be:8e:3b:d8:6f:69:01:b6:cd:05:9d:8e:59: b5:a9:56:29:9b:9e:9f:c2:27:3c:aa:f1:05:00:9e:2b:cf:e8: f9:87:ce:bd:5e:b3:07:f3:9c:b1:f8:bb:7c:b7:49:3c:85:a3: 2b:72:65:f7:d2:0e:b5:7a:d6:f4:a3:59:eb:c5:e0:b2:02:07: d4:90:e7:e2:a7:73:5a:7c:e0:c4:12:17:d8:ef:9e:fb:dd:82: 35:00:cb:42:cf:0b:8d:a4:6d:49:74:8b:df:4d:87:b4:4a:33: 25:b7:86:99:26:cf:b6:40:73:da:37:30:50:9a:e7:7f:f8:60: db:ac:7f:1b:bb:c0:10:e7:de:3f:e4:a8:5b:e1:11:1d:9a:cf: 7f:a2:eb:b1 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEsRBHMuQFb2hk1/ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk OWM4NDE2OTYtMDg1Ny00ZDdjLThkYjUtMjE5NDFhNzc0NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5uQz2+bqnFGJnRtImpRGuj6Eux3BgOcaqKT KDn54p3iCi9TUgsRQ2XEUoI0dAuXEtU9tq61uA8bAJKqggeV6kYlI5+m2wN5jbSw 4kaCsuvPm8nR47tZLMcAbmW8+pN7K1Q6Pslcm7IZh/wNWqPJDSBNShzajkGTOGXD HRWiBA1/jfQs8N22mgkVCrYnqqWdKNmAnsujZ66ONMrwLC+SJ/nJ+jw7JHrEM1vm /MBsRN5UL1gpG0UpNELKfiWrUH9/2Lso2DQxPsR9YeXAlt4FujxxXU/q7pDdoMgc oLpgj8K3MMnQihiC+DlntD6dGVawJnB8C16e+Rax4rv8wfnEFQIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFGJQlmkYIqg4zbjpP52SUEMsGqxQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 Yzg0MTY5Ni0wODU3LTRkN2MtOGRiNS0yMTk0MWE3NzQ1MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzljODQxNjk2LTA4NTctNGQ3Yy04 ZGI1LTIxOTQxYTc3NDUwYy85Yzg0MTY5Ni0wODU3LTRkN2MtOGRiNS0yMTk0MWE3 NzQ1MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBADAiokDBADAoMADBADAoMwDBADA9fwDBADA9f4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVnwA6+U+cadfeJcBEsx9GvVG0zFC6lzaOu9zkU3LxVxYv6KqBTsK TZHK+i2f99R6oaMZ8XaszyX+QzWXFnKxB6MH+mqT3F83vCgldyX37vMgile5zZ9V qrc7To5ofpKriPxqvx7yzFphssQg8vY3QsW+jjvYb2kBts0FnY5ZtalWKZuen8In PKrxBQCeK8/o+YfOvV6zB/Ocsfi7fLdJPIWjK3Jl99IOtXrW9KNZ68XgsgIH1JDn 4qdzWnzgxBIX2O+e+92CNQDLQs8LjaRtSXSL302HtEozJbeGmSbPtkBz2jcwUJrn f/hg26x/G7vAEOfeP+SoW+ERHZrPf6LrsQ== -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:44 2025 by rpki-client