$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer File: d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer (raw, json) Hash identifier: 1YGhLRQfM35Kewtx+XRmGZVXX4/3VxsVrrXBDb+/uMg= Subject key identifier: 80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B4774CBE5F9601E65B31A2FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 12:45:25 +0000 Certificate not after: Sun 26 Dec 2027 13:45:25 +0000 Subordinate resources: IP: 199.175.42.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:74:cb:e5:f9:60:1e:65:b3:1a:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 22 12:45:25 2025 GMT Not After : Dec 26 13:45:25 2027 GMT Subject: CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:bc:81:f8:c9:cd:47:ad:5c:f8:08:37:93: ac:b6:c5:6b:88:2d:b8:f2:58:a2:35:c1:05:d7:e3: 14:64:e1:6e:3b:bd:68:6c:4f:26:44:59:6d:a0:1f: 1f:4e:21:36:3d:a6:8d:a1:ec:40:80:0b:c8:37:c6: c8:74:62:a9:54:57:61:54:09:d7:b1:a7:b2:b8:5e: 63:9b:0b:95:4d:9d:1d:34:2e:b7:df:02:1e:0d:77: 20:22:5b:74:4b:8e:9e:e2:22:6a:6c:5b:c8:67:ce: 24:b0:66:59:8e:cd:0c:99:4f:d5:34:9f:e9:c5:bf: 7c:6b:cc:c2:4c:eb:2c:36:af:70:b7:64:11:73:8d: e6:80:2b:b0:d7:b7:cd:7e:5f:ca:a5:8e:e6:72:22: 28:c1:a0:1f:b0:46:37:ba:16:c2:56:c2:f6:ef:4e: 35:75:26:03:8f:ff:45:97:9c:37:fc:e4:ab:d2:db: 1f:1e:d8:3a:02:af:c8:73:5a:98:42:d3:32:ef:13: 9b:c2:d4:20:e6:43:08:8a:f2:f3:55:20:be:7a:63: 4a:9f:30:1f:e2:15:e8:a1:7e:5a:5b:c2:18:8e:df: 73:62:d4:f6:c4:5f:4f:d9:72:ce:e3:a5:ac:bb:44: f7:6e:24:a0:83:ab:ed:c2:3f:14:eb:2f:06:e8:f9: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.175.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:44:39:04:18:e7:7f:67:08:08:88:16:0e:3f:17:e3:a6:44: d1:b7:27:fd:43:1d:c0:f4:7e:fd:b6:70:bf:05:83:14:99:ca: ec:eb:d6:07:99:88:f3:c7:84:c5:8d:0a:fe:5b:7e:94:21:26: 2d:84:01:c0:73:50:02:58:65:89:c7:1b:8d:0d:39:c8:aa:4b: 9b:29:92:05:73:0a:be:a4:82:b4:22:37:f5:fb:49:29:b1:b1: e9:39:69:5f:84:53:d8:32:2c:47:35:9d:41:f1:1a:ed:b8:2f: d5:1d:df:e9:a0:e4:11:3b:65:c2:a3:0b:a6:83:38:ad:4a:1d: c8:7e:2b:21:2d:66:24:b4:72:f5:1f:32:40:69:5e:e0:b1:8b: 51:f8:84:19:76:6c:40:88:f2:6b:e7:0c:00:13:23:f4:e5:66: 3b:96:f1:dc:ab:81:6c:0f:9e:f2:fc:ae:7d:0b:94:73:7f:34: d5:50:49:d5:7c:28:47:8d:c0:2e:5b:f7:18:a3:6e:47:73:7d: 9e:8c:7f:d3:26:e2:13:73:7c:40:bd:53:ba:fd:f9:98:d3:aa: df:79:6e:de:8d:39:25:ac:76:07:9b:3b:de:e3:de:b0:a2:91: 45:26:57:39:53:bf:e2:5a:f9:ec:c6:65:af:7b:8e:0a:23:77: 7f:ee:ad:4a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtHdMvl+WAeZbMaL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyMjEyNDUyNVoXDTI3MTIyNjEzNDUyNVowLzEtMCsGA1UEAxMk ZDEzMjNlNjMtYmM4Ny00OGZhLWFlYmQtZDZjNmYxYjAxZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYC8gfjJzUetXPgIN5OstsVriC248liiNcEF 1+MUZOFuO71obE8mRFltoB8fTiE2PaaNoexAgAvIN8bIdGKpVFdhVAnXsaeyuF5j mwuVTZ0dNC633wIeDXcgIlt0S46e4iJqbFvIZ84ksGZZjs0MmU/VNJ/pxb98a8zC TOssNq9wt2QRc43mgCuw17fNfl/KpY7mciIowaAfsEY3uhbCVsL27041dSYDj/9F l5w3/OSr0tsfHtg6Aq/Ic1qYQtMy7xObwtQg5kMIivLzVSC+emNKnzAf4hXooX5a W8IYjt9zYtT2xF9P2XLO46Wsu0T3biSgg6vtwj8U6y8G6PlElQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIABLpOfLHtlzhp5O86IxUyhkpr7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MTMyM2U2My1iYzg3LTQ4ZmEtYWViZC1kNmM2ZjFiMDFlZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QxMzIzZTYzLWJjODctNDhmYS1h ZWJkLWQ2YzZmMWIwMWVmNS9kMTMyM2U2My1iYzg3LTQ4ZmEtYWViZC1kNmM2ZjFi MDFlZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHryowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAkQ5BBjnf2cICIgWDj8X 46ZE0bcn/UMdwPR+/bZwvwWDFJnK7OvWB5mI88eExY0K/lt+lCEmLYQBwHNQAlhl iccbjQ05yKpLmymSBXMKvqSCtCI39ftJKbGx6TlpX4RT2DIsRzWdQfEa7bgv1R3f 6aDkETtlwqMLpoM4rUodyH4rIS1mJLRy9R8yQGle4LGLUfiEGXZsQIjya+cMABMj 9OVmO5bx3KuBbA+e8vyufQuUc3801VBJ1XwoR43ALlv3GKNuR3N9nox/0ybiE3N8 QL1Tuv35mNOq33lu3o05Jax2B5s73uPesKKRRSZXOVO/4lr57MZlr3uOCiN3f+6t Sg== -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:17 2025 by rpki-client