$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer File: b69046d2-7700-4ec6-9370-cf52edb1555b.cer (raw, json) Hash identifier: 13W2Mc+PpVpu0UVG56cwA3ItGboFaauCB+Kk5lP+5DE= Subject key identifier: 39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6D250763E78F2505F68CD480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 00:45:25 +0000 Certificate not after: Sun 09 Jan 2028 01:45:25 +0000 Subordinate resources: IP: 132.253.0.0/16 IP: 199.6.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:25:07:63:e7:8f:25:05:f6:8c:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 6 00:45:25 2025 GMT Not After : Jan 9 01:45:25 2028 GMT Subject: CN=b69046d2-7700-4ec6-9370-cf52edb1555b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:99:62:40:86:5b:85:aa:3d:7d:26:9e:7b: c3:4d:92:a2:59:c8:11:62:f7:e8:f3:9c:b4:a1:03: c7:53:b3:a2:1d:fd:a5:67:fe:b3:9b:4f:82:1e:ba: c6:28:d6:f8:2c:49:1c:a8:67:ee:aa:3e:58:90:99: e8:fb:b0:89:38:e3:26:99:e4:af:f1:62:5a:df:28: 18:60:8c:c3:28:c9:8d:22:6f:69:1d:e1:02:d6:2b: 8d:95:9c:67:d9:66:ea:79:9a:0b:26:a7:f4:0c:d7: 67:67:2e:de:e9:c8:69:1f:cc:11:5c:5c:98:8c:d1: 73:b2:86:0f:6d:d5:56:9f:9c:7c:ec:f4:97:f2:c0: 50:83:4f:94:ec:d5:80:24:e9:35:ec:5b:81:4f:e4: 55:df:98:e4:60:0c:e5:7f:7b:01:dd:70:d5:00:b6: f8:cc:c5:f4:7d:15:2a:16:f6:fc:18:f5:c8:bf:42: 20:cb:ed:3d:18:24:0a:96:ea:e9:20:12:73:26:ab: 1d:24:bf:8b:d2:83:97:84:6d:ef:f6:8d:29:c3:5b: 2d:c3:7d:fd:db:74:d3:bf:bd:50:5e:cd:fb:a5:5b: 0a:a9:59:04:51:ee:7b:3f:ea:d7:6e:bc:69:05:37: e1:de:51:a7:c6:c3:f0:22:cd:23:40:0f:b1:50:e1: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 132.253.0.0/16 199.6.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:60:3d:18:a9:bd:d8:d0:1e:02:01:6d:ed:cb:64:ec:e0:3f: 28:42:43:71:8a:f3:e4:6a:1a:50:72:54:75:61:56:40:3b:0b: fc:4a:a8:3d:e2:d5:4c:f6:8b:f2:e2:5a:4f:07:c0:99:62:d7: 76:36:ae:4c:35:00:aa:31:b5:10:b4:76:3e:ec:49:97:be:2e: b2:78:5d:57:0e:47:50:9a:b0:a5:e8:13:61:15:e0:8e:d0:6a: 2e:4a:a5:6c:4e:30:0f:74:16:14:de:5f:5a:a5:9f:11:9d:31: 7d:b1:b6:31:8e:71:49:9c:82:53:48:8c:73:65:ae:ac:7b:b9: cb:88:75:ae:13:39:d0:9a:42:eb:95:18:2c:41:45:8e:1f:0d: b2:ac:a4:b4:fb:45:81:0b:17:85:1f:71:6d:9b:29:e9:89:92: 7e:db:59:c3:f7:53:41:c7:5e:4b:88:61:ee:58:28:5b:50:fd: d2:01:66:e1:24:ca:14:66:59:37:e7:ef:12:27:ce:a9:c8:30: c2:6b:43:2a:4f:3d:28:5f:00:75:eb:97:6b:ef:80:56:fc:b0: 44:9a:d9:8f:03:e9:c3:ee:60:b3:22:4a:c5:ae:12:41:a9:e3: f7:32:4f:d8:32:8e:dc:0f:03:1e:37:03:4c:5c:31:c1:ea:dd: 6f:7c:03:b0 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEttJQdj548lBfaM1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNjAwNDUyNVoXDTI4MDEwOTAxNDUyNVowLzEtMCsGA1UEAxMk YjY5MDQ2ZDItNzcwMC00ZWM2LTkzNzAtY2Y1MmVkYjE1NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWWZYkCGW4WqPX0mnnvDTZKiWcgRYvfo85y0 oQPHU7OiHf2lZ/6zm0+CHrrGKNb4LEkcqGfuqj5YkJno+7CJOOMmmeSv8WJa3ygY YIzDKMmNIm9pHeEC1iuNlZxn2WbqeZoLJqf0DNdnZy7e6chpH8wRXFyYjNFzsoYP bdVWn5x87PSX8sBQg0+U7NWAJOk17FuBT+RV35jkYAzlf3sB3XDVALb4zMX0fRUq Fvb8GPXIv0Igy+09GCQKlurpIBJzJqsdJL+L0oOXhG3v9o0pw1stw33923TTv71Q Xs37pVsKqVkEUe57P+rXbrxpBTfh3lGnxsPwIs0jQA+xUOEeEQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFDm542mlSm6CZj/BUxQ8mAwNmAGJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i NjkwNDZkMi03NzAwLTRlYzYtOTM3MC1jZjUyZWRiMTU1NWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2I2OTA0NmQyLTc3MDAtNGVjNi05 MzcwLWNmNTJlZGIxNTU1Yi9iNjkwNDZkMi03NzAwLTRlYzYtOTM3MC1jZjUyZWRi MTU1NWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCE/QMEBMcGEDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaYD0Yqb3Y0B4C AW3ty2Ts4D8oQkNxivPkahpQclR1YVZAOwv8Sqg94tVM9ovy4lpPB8CZYtd2Nq5M NQCqMbUQtHY+7EmXvi6yeF1XDkdQmrCl6BNhFeCO0GouSqVsTjAPdBYU3l9apZ8R nTF9sbYxjnFJnIJTSIxzZa6se7nLiHWuEznQmkLrlRgsQUWOHw2yrKS0+0WBCxeF H3FtmynpiZJ+21nD91NBx15LiGHuWChbUP3SAWbhJMoUZlk35+8SJ86pyDDCa0Mq Tz0oXwB165dr74BW/LBEmtmPA+nD7mCzIkrFrhJBqeP3Mk/YMo7cDwMeNwNMXDHB 6t1vfAOw -----END CERTIFICATE-----Generated at Fri Oct 10 15:22:45 2025 by rpki-client