$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer File: c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer (raw, json) Hash identifier: XI9GhflMQm8rE4Pc9aL7nCZ2xlLpAuOAk4FoA6Lb/yQ= Subject key identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B5F2F99F19DA3CB7625F6AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 00:45:24 +0000 Certificate not after: Tue 04 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 199.248.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:2f:99:f1:9d:a3:cb:76:25:f6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 1 00:45:24 2025 GMT Not After : Jan 4 01:45:24 2028 GMT Subject: CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:ec:39:e6:41:da:a3:01:2f:68:d3:6c:b6: 74:a3:7a:aa:fe:7a:8c:81:63:9b:20:9b:2e:93:6b: 90:30:2d:be:8a:8f:fe:e0:86:50:94:a8:5a:47:20: 33:d7:7d:13:25:76:69:c3:26:58:5f:1d:48:cf:3c: ad:40:c1:2d:4d:ab:00:4a:c7:c1:2b:7a:af:17:ae: 58:be:c0:23:70:23:12:2b:72:79:3b:96:e4:ee:3c: 0c:66:70:66:2f:58:a5:ad:62:9e:5e:5c:95:87:87: 72:53:d9:5c:32:3b:c3:16:95:1e:fd:4c:98:98:aa: a3:81:b7:e5:d9:99:4e:f1:8d:84:7f:3f:57:a3:b3: b5:87:04:41:48:f0:c2:db:e1:74:0e:22:e3:84:40: b8:18:ef:13:e1:37:3e:75:23:7f:ec:24:75:29:dc: 8a:65:79:c9:7c:9e:0c:2a:3b:d0:6d:ba:ef:ae:b2: f3:57:78:4b:0e:37:eb:1a:2b:f4:de:c6:20:a2:a8: 06:f3:82:5a:6c:f6:41:14:78:31:3e:92:9b:90:21: 15:3a:b0:fb:74:bd:a3:9b:43:d9:64:b6:ea:54:73: 7e:2d:48:bd:93:5a:93:88:7b:8f:0c:fd:16:78:ef: bc:7c:41:91:4f:11:1b:af:03:f1:d5:1d:75:cb:7d: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.248.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:71:94:22:53:98:fc:20:bc:5f:5a:08:d1:ff:07:4b:56:8e: c5:c2:40:4b:f0:08:cb:67:24:09:d5:cd:8b:e2:38:3c:df:4d: 91:2a:10:ff:29:0d:c7:27:82:57:62:34:a0:05:1b:97:55:0d: a4:0b:3c:16:27:c6:f9:cd:98:78:c7:b1:c3:7f:0d:d9:10:9d: b4:a2:b3:1a:cb:3a:f5:24:7a:2c:65:29:37:bf:ee:b5:7e:b4: a0:1d:c6:cd:2f:19:6e:df:b7:5b:1a:73:bc:32:02:58:8d:b7: 11:ed:52:47:68:e9:f2:c5:f0:67:be:e1:09:87:cb:21:0a:72: a2:ed:8e:fd:af:ef:59:e5:83:c3:09:70:aa:96:4d:fb:97:7c: 59:6f:5e:94:73:d4:97:16:51:0a:3f:41:e1:64:bd:37:f8:91: 8e:7e:5a:a2:7a:cc:a5:57:15:62:1b:e3:9b:83:ba:89:db:9b: 8c:19:2f:76:f8:d5:6a:ae:f7:59:e4:de:db:c5:f5:2e:fe:48: 7c:ef:d8:c9:77:a2:e9:39:83:ff:fb:4b:9e:ec:58:46:47:cf: e1:80:98:b2:00:2b:94:60:39:5a:c5:b4:f1:a7:2f:1b:94:72: 12:05:8b:35:db:6a:72:29:88:b3:38:51:a7:60:63:58:27:97: 35:d1:03:d2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtfL5nxnaPLdiX2rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwMTAwNDUyNFoXDTI4MDEwNDAxNDUyNFowLzEtMCsGA1UEAxMk YzJiMWRiZjYtZmRlYS00MjFiLTg5OGUtNjZiYjkxMjJlYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoansOeZB2qMBL2jTbLZ0o3qq/nqMgWObIJsu k2uQMC2+io/+4IZQlKhaRyAz130TJXZpwyZYXx1IzzytQMEtTasASsfBK3qvF65Y vsAjcCMSK3J5O5bk7jwMZnBmL1ilrWKeXlyVh4dyU9lcMjvDFpUe/UyYmKqjgbfl 2ZlO8Y2Efz9Xo7O1hwRBSPDC2+F0DiLjhEC4GO8T4Tc+dSN/7CR1KdyKZXnJfJ4M KjvQbbrvrrLzV3hLDjfrGiv03sYgoqgG84JabPZBFHgxPpKbkCEVOrD7dL2jm0PZ ZLbqVHN+LUi9k1qTiHuPDP0WeO+8fEGRTxEbrwPx1R11y32h6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCBB3NXFACicIQr676LwbIpH2WODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j MmIxZGJmNi1mZGVhLTQyMWItODk4ZS02NmJiOTEyMmVjODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2MyYjFkYmY2LWZkZWEtNDIxYi04 OThlLTY2YmI5MTIyZWM4NS9jMmIxZGJmNi1mZGVhLTQyMWItODk4ZS02NmJiOTEy MmVjODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbH+EAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKHGUIlOY/CC8X1oI0f8H S1aOxcJAS/AIy2ckCdXNi+I4PN9NkSoQ/ykNxyeCV2I0oAUbl1UNpAs8FifG+c2Y eMexw38N2RCdtKKzGss69SR6LGUpN7/utX60oB3GzS8Zbt+3WxpzvDICWI23Ee1S R2jp8sXwZ77hCYfLIQpyou2O/a/vWeWDwwlwqpZN+5d8WW9elHPUlxZRCj9B4WS9 N/iRjn5aonrMpVcVYhvjm4O6idubjBkvdvjVaq73WeTe28X1Lv5IfO/YyXei6TmD //tLnuxYRkfP4YCYsgArlGA5WsW08acvG5RyEgWLNdtqcimIszhRp2BjWCeXNdED 0g== -----END CERTIFICATE-----Generated at Fri Oct 10 15:25:23 2025 by rpki-client