$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.cer File: ba1f9bb3-fbcd-4126-8d2e-691836a4b162.cer (raw, json) Hash identifier: q1w3RMuhALXeM7999b6RHMdEpDavSLdQar0egijSbko= Subject key identifier: 82:7E:C2:DD:8F:70:61:02:77:BD:AB:8B:2B:2B:D7:27:A7:84:B5:92 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B1EF9DEB4DD30CCBF0B8D8580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 397663 IP: 66.132.204.0/22 IP: 192.16.122.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:de:b4:dd:30:cc:bf:0b:8d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=ba1f9bb3-fbcd-4126-8d2e-691836a4b162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:bf:52:14:1a:06:f9:78:ec:fc:66:8c:f0: 89:61:18:8f:7c:32:23:10:78:5c:7c:8c:f2:bf:3d: 25:c4:93:2d:72:0b:c0:3e:3f:d0:67:54:06:89:ab: 72:6b:88:8a:76:f9:93:f0:17:cc:e0:63:af:c9:fa: c2:09:94:56:19:2b:7a:fa:84:0b:d0:88:33:3b:c6: c8:be:87:21:07:1b:23:08:3f:f6:bf:25:9d:0f:13: 16:2e:c0:bb:5e:fc:a7:d6:95:1a:13:e2:59:e4:32: 56:b1:61:04:0c:7a:ae:5f:b4:c3:c5:70:10:b9:1d: a9:5d:df:10:17:a9:15:63:2f:28:dc:74:18:d3:06: 79:3a:1e:c4:31:d0:25:bc:be:4f:60:df:b3:a9:b7: 66:d2:2c:04:56:55:9e:3f:0f:10:d8:e5:4c:5f:e2: da:d0:a4:7a:43:0c:81:76:12:f1:60:b6:b1:2e:f9: 5b:11:25:87:fb:fa:2b:fd:ad:b2:c8:ce:c6:5b:0e: 88:db:05:3f:5b:10:fb:9c:89:7f:aa:3e:0a:4f:c6: 5d:d5:98:7d:de:8c:f1:d9:91:f1:4f:0f:c4:a6:91: cc:a0:7b:f4:30:f2:33:ea:86:0d:f8:28:0d:1f:c8: 05:55:f3:7c:56:c3:2c:23:70:a5:cd:d5:3c:21:88: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7E:C2:DD:8F:70:61:02:77:BD:AB:8B:2B:2B:D7:27:A7:84:B5:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.132.204.0/22 192.16.122.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397663 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:91:2b:d4:45:99:67:65:0d:f6:7e:bf:bb:01:ea:32:eb:14: fc:76:27:35:7b:3a:c7:5d:68:5e:d7:ee:4e:56:34:aa:6b:85: c9:d9:69:a7:38:71:b1:7f:eb:78:6b:1f:3d:be:97:6d:d5:6d: 7f:25:8a:eb:eb:2b:4e:55:31:26:de:51:f6:fa:61:62:bf:81: c3:38:68:c3:5c:e3:d5:32:10:3a:93:97:ff:60:30:ef:13:39: a2:c5:ec:25:54:a5:be:ee:ed:b9:46:e0:3d:a1:99:9b:89:b3: b3:82:12:39:b9:e4:48:b3:e6:4c:84:a1:48:10:c4:94:24:2c: 5f:56:dd:55:70:3a:b7:68:55:5c:b5:13:72:ae:a3:6a:c0:fe: 5f:4a:06:5b:04:00:56:21:3f:d9:3e:75:56:72:40:87:1d:40: c3:90:cb:1e:d5:e5:be:62:c7:49:12:20:7a:e0:fa:96:bc:a2: 39:df:91:ec:79:ea:df:2d:36:3d:cd:15:e3:75:9c:3f:d6:3f: 8b:57:a9:4d:46:f0:ef:3f:f1:80:89:e3:fc:58:cc:8a:f9:ee: 0e:9d:d5:99:c8:3a:21:83:b0:aa:85:87:a6:f9:52:2a:c7:56: 1b:19:dc:9e:ce:53:16:17:40:7c:c1:97:54:7a:c4:81:4d:7b: 6d:d6:a7:2b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEse+d603TDMvwuNhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk YmExZjliYjMtZmJjZC00MTI2LThkMmUtNjkxODM2YTRiMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAe/UhQaBvl47PxmjPCJYRiPfDIjEHhcfIzy vz0lxJMtcgvAPj/QZ1QGiatya4iKdvmT8BfM4GOvyfrCCZRWGSt6+oQL0IgzO8bI vochBxsjCD/2vyWdDxMWLsC7Xvyn1pUaE+JZ5DJWsWEEDHquX7TDxXAQuR2pXd8Q F6kVYy8o3HQY0wZ5Oh7EMdAlvL5PYN+zqbdm0iwEVlWePw8Q2OVMX+La0KR6QwyB dhLxYLaxLvlbESWH+/or/a2yyM7GWw6I2wU/WxD7nIl/qj4KT8Zd1Zh93ozx2ZHx Tw/EppHMoHv0MPIz6oYN+CgNH8gFVfN8VsMsI3ClzdU8IYg9qQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIJ+wt2PcGECd72riysr1yenhLWSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YTFmOWJiMy1mYmNkLTQxMjYtOGQyZS02OTE4MzZhNGIxNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhMWY5YmIzLWZiY2QtNDEyNi04 ZDJlLTY5MTgzNmE0YjE2Mi9iYTFmOWJiMy1mYmNkLTQxMjYtOGQyZS02OTE4MzZh NGIxNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJChMwDBADAEHowGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhFfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABmRK9RFmWdlDfZ+v7sB6jLrFPx2JzV7OsddaF7X 7k5WNKprhcnZaac4cbF/63hrHz2+l23VbX8liuvrK05VMSbeUfb6YWK/gcM4aMNc 49UyEDqTl/9gMO8TOaLF7CVUpb7u7blG4D2hmZuJs7OCEjm55Eiz5kyEoUgQxJQk LF9W3VVwOrdoVVy1E3Kuo2rA/l9KBlsEAFYhP9k+dVZyQIcdQMOQyx7V5b5ix0kS IHrg+pa8ojnfkex56t8tNj3NFeN1nD/WP4tXqU1G8O8/8YCJ4/xYzIr57g6d1ZnI OiGDsKqFh6b5UirHVhsZ3J7OUxYXQHzBl1R6xIFNe23Wpys= -----END CERTIFICATE-----Generated at Fri Oct 10 15:24:50 2025 by rpki-client