$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer File: cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer (raw, json) Hash identifier: yJDRdrbLBhDdt93ZVLk694l3NNcybsaWSCpg2crMkGk= Subject key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B13CF22C584DCC9DF5E557540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 40194 IP: 192.152.118.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:22:c5:84:dc:c9:df:5e:55:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:21:92:eb:7e:26:45:d6:ae:97:3c:bb:d2: 89:3d:88:70:90:23:59:12:90:79:22:4a:b2:7d:2c: 51:02:6d:3b:4f:66:1a:8a:00:a4:93:1b:63:2b:35: 9f:1a:9d:69:ed:51:3a:b7:52:70:ec:21:81:e1:3e: 29:03:0c:3a:85:3f:5d:ce:9e:b4:bb:83:fc:60:27: 45:f6:95:d7:6b:7f:02:ee:49:4a:75:06:6b:39:3d: dd:66:81:a9:a7:70:d4:71:08:d0:49:63:bf:f3:b7: e6:e4:3f:b0:80:76:d4:22:aa:23:e3:f0:48:79:f4: 4b:03:2a:ef:57:d3:eb:45:64:06:74:d7:5e:9a:77: f6:97:0b:8e:9d:4b:9b:68:89:ac:1b:b4:ca:97:80: 1b:82:ba:09:76:0c:e8:0b:d0:32:d5:e5:c4:40:fe: 49:0f:48:f2:5c:3e:1b:72:2b:92:47:bf:d0:1d:c5: a0:00:d5:08:ed:ac:95:24:95:dc:d6:fe:92:08:56: 72:c7:4a:32:dc:2f:e5:23:00:7c:af:af:21:66:55: d0:95:43:78:ab:32:84:e3:aa:dd:80:ea:9c:5a:ac: d1:93:cb:b5:db:b9:f0:97:8a:79:ee:26:15:c3:e6: 97:e8:a3:a2:30:cb:b6:ce:0c:20:20:09:46:10:ea: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.152.118.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40194 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2d:00:35:f8:f2:ae:3d:34:79:2a:ec:ff:58:28:ea:8c:37: 3a:cd:7f:92:1b:db:3e:18:95:05:d3:9b:e4:ff:60:98:07:78: a4:6b:5e:c1:b9:1d:5d:5d:3c:f3:45:f2:85:7b:41:fc:0d:a3: 64:ff:12:46:1a:76:e8:60:67:d8:2a:a2:df:07:39:94:bc:56: 19:47:91:4a:b3:c8:5d:e4:42:14:60:87:c7:d1:6b:69:62:a1: e2:25:3e:c7:09:9f:c7:2d:6d:48:b3:66:99:3b:20:f5:c6:93: 9c:9d:51:85:53:4e:ed:80:ab:f1:b3:ad:c1:08:cd:14:da:d3: c5:13:76:82:a4:3f:92:a6:c7:dd:d6:6d:29:9a:ba:0e:92:7d: 4a:27:16:c1:b8:d0:2b:7f:ba:5e:fb:b1:46:03:14:a2:e7:bc: 8f:ba:4e:37:8a:1d:34:ea:1b:6d:a0:14:7c:a5:ab:b3:96:9a: 9f:6f:01:fb:c5:cb:97:1f:a3:06:08:13:51:a0:b6:ec:82:5f: 52:28:91:e1:94:10:6b:7e:51:7f:be:62:63:b5:18:9a:a4:f9: 96:27:79:5f:8d:8e:cd:19:68:f1:dc:7f:94:a9:d2:f0:b8:85: 18:93:ba:14:3c:78:6b:e6:0c:3a:71:48:21:87:bb:87:46:cd: e4:f2:fe:cf -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsTzyLFhNzJ315VdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk Y2JkOWUzNGYtZTMwZC00MTg0LTk1NmEtN2UzZTIyY2VlNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuQhkut+JkXWrpc8u9KJPYhwkCNZEpB5Ikqy fSxRAm07T2YaigCkkxtjKzWfGp1p7VE6t1Jw7CGB4T4pAww6hT9dzp60u4P8YCdF 9pXXa38C7klKdQZrOT3dZoGpp3DUcQjQSWO/87fm5D+wgHbUIqoj4/BIefRLAyrv V9PrRWQGdNdemnf2lwuOnUubaImsG7TKl4AbgroJdgzoC9Ay1eXEQP5JD0jyXD4b ciuSR7/QHcWgANUI7ayVJJXc1v6SCFZyx0oy3C/lIwB8r68hZlXQlUN4qzKE46rd gOqcWqzRk8u127nwl4p57iYVw+aX6KOiMMu2zgwgIAlGEOoGuwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEkf3XYDqBbgy4rNhFQXcmBNhVa+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j YmQ5ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNlMjJjZWU2YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NiZDllMzRmLWUzMGQtNDE4NC05 NTZhLTdlM2UyMmNlZTZjOC9jYmQ5ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNlMjJj ZWU2YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAmHYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ0CMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADotADX48q49NHkq7P9YKOqMNzrNf5Ib2z4YlQXTm+T/YJgH eKRrXsG5HV1dPPNF8oV7QfwNo2T/EkYaduhgZ9gqot8HOZS8VhlHkUqzyF3kQhRg h8fRa2lioeIlPscJn8ctbUizZpk7IPXGk5ydUYVTTu2Aq/GzrcEIzRTa08UTdoKk P5Kmx93WbSmaug6SfUonFsG40Ct/ul77sUYDFKLnvI+6TjeKHTTqG22gFHylq7OW mp9vAfvFy5cfowYIE1GgtuyCX1IokeGUEGt+UX++YmO1GJqk+ZYneV+Njs0ZaPHc f5Sp0vC4hRiTuhQ8eGvmDDpxSCGHu4dGzeTy/s8= -----END CERTIFICATE-----Generated at Fri Oct 10 15:26:23 2025 by rpki-client