$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer File: a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer (raw, json) Hash identifier: j45ifyqMAzGcUhOYWl8CQnpdCEH3NVeeNzHo0xybvS4= Subject key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6BBFABFE2B51272927DAEB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 12:45:23 +0000 Certificate not after: Sat 08 Jan 2028 13:45:23 +0000 Subordinate resources: IP: 198.202.208.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:bf:ab:fe:2b:51:27:29:27:da:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 5 12:45:23 2025 GMT Not After : Jan 8 13:45:23 2028 GMT Subject: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:73:2f:f5:97:98:58:a2:9b:d9:eb:54:4d: 21:45:b2:94:57:d8:0f:80:77:fe:7b:ca:91:19:31: 45:35:a8:13:a6:d6:9b:6f:d8:1e:b4:c6:2a:23:0a: 4f:7b:b5:85:d9:bd:5a:ae:a9:46:07:35:17:cd:7a: ea:44:96:ca:de:97:29:fc:8b:04:f9:00:7c:da:9b: 07:53:ff:d6:4f:32:a9:9c:34:03:ab:39:6e:38:42: 02:33:54:7b:35:a5:7a:f8:ac:20:9c:44:37:7f:1b: 86:1f:27:a2:fa:4c:b6:15:5e:01:c1:27:c7:1f:4d: 19:34:86:c6:15:9e:73:75:f6:f5:39:b4:33:09:1b: b2:bf:fc:71:89:0b:bf:ff:91:33:1a:1f:eb:fb:00: e9:a4:32:2a:bd:27:81:a9:97:cc:ba:8d:cf:eb:64: ea:e6:b3:95:dc:6b:8e:8a:2d:84:34:43:51:9c:36: d9:6e:8e:12:32:04:23:b9:77:c7:15:55:3f:76:6c: f4:fc:4f:92:ce:14:43:e2:ba:e1:32:a5:58:63:2e: b8:9b:77:92:00:52:cb:5f:82:f6:0b:54:70:62:14: 8a:02:53:9b:c6:1c:94:d3:32:c3:21:4c:7a:27:83: 2b:f0:17:45:32:8c:d1:9e:22:b7:b6:83:f0:93:44: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.202.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:8a:9c:e4:7d:a7:2a:51:50:88:7e:42:39:75:b0:9b:a0: 8b:45:c7:c7:fd:2c:ce:7b:4a:c8:c2:69:6a:2c:11:b2:a5:37: 90:8c:02:c5:62:a7:93:64:2c:69:bf:97:2f:15:46:3b:50:7b: 6f:e8:f6:a6:03:bf:6e:cb:51:44:79:c5:60:4b:49:b0:ef:aa: 6a:3b:63:21:b0:54:ef:12:98:f3:d7:a5:e8:73:06:3d:93:7e: f0:37:9f:4b:d0:87:4c:ff:5a:ba:83:07:70:fe:b9:27:01:ee: dc:94:18:21:33:81:69:74:c8:d1:11:35:a5:99:ed:f8:28:69: 4d:84:c0:1b:53:ac:68:46:48:1a:dd:e8:46:52:22:52:a9:3c: 5b:85:f2:5b:a7:e0:8e:33:d8:2e:de:47:83:8b:6d:ed:33:bd: 98:13:3c:b8:97:28:e4:d2:62:5c:4d:67:0b:41:72:1b:b5:78: b3:01:bb:31:23:eb:fd:9e:5a:05:96:f9:c1:f7:12:0b:ac:9b: 4a:6e:af:fb:04:f2:fd:64:f1:08:1f:9a:fa:5a:0a:8c:09:2d: 4a:5f:0e:cc:7b:70:92:e6:04:d8:97:72:3e:31:4d:06:a3:2a: e3:07:57:75:b9:3d:3b:70:bf:b5:98:23:87:b7:42:de:ac:6a: 12:a5:ab:66 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtrv6v+K1EnKSfa6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNTEyNDUyM1oXDTI4MDEwODEzNDUyM1owLzEtMCsGA1UEAxMk YTlkMWFhN2QtNzIyOS00MTZkLTlhMzktZjY0MDNjNDhjY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNNzL/WXmFiim9nrVE0hRbKUV9gPgHf+e8qR GTFFNagTptabb9getMYqIwpPe7WF2b1arqlGBzUXzXrqRJbK3pcp/IsE+QB82psH U//WTzKpnDQDqzluOEICM1R7NaV6+KwgnEQ3fxuGHyei+ky2FV4BwSfHH00ZNIbG FZ5zdfb1ObQzCRuyv/xxiQu//5EzGh/r+wDppDIqvSeBqZfMuo3P62Tq5rOV3GuO ii2ENENRnDbZbo4SMgQjuXfHFVU/dmz0/E+SzhRD4rrhMqVYYy64m3eSAFLLX4L2 C1RwYhSKAlObxhyU0zLDIUx6J4Mr8BdFMozRniK3toPwk0Ro+wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFB30KolKWcpV6aBL0kIZObOWTf0vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWQxYWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQwM2M0OGNjYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZDFhYTdkLTcyMjktNDE2ZC05 YTM5LWY2NDAzYzQ4Y2NjMi9hOWQxYWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQwM2M0 OGNjYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGytAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW36KnOR9pypRUIh+Qjl1 sJugi0XHx/0szntKyMJpaiwRsqU3kIwCxWKnk2Qsab+XLxVGO1B7b+j2pgO/bstR RHnFYEtJsO+qajtjIbBU7xKY89el6HMGPZN+8DefS9CHTP9auoMHcP65JwHu3JQY ITOBaXTI0RE1pZnt+ChpTYTAG1OsaEZIGt3oRlIiUqk8W4XyW6fgjjPYLt5Hg4tt 7TO9mBM8uJco5NJiXE1nC0FyG7V4swG7MSPr/Z5aBZb5wfcSC6ybSm6v+wTy/WTx CB+a+loKjAktSl8OzHtwkuYE2JdyPjFNBqMq4wdXdbk9O3C/tZgjh7dC3qxqEqWr Zg== -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:22 2025 by rpki-client