$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1518631-4496-4b2d-abc7-6f0a2b1ded41.cer File: d1518631-4496-4b2d-abc7-6f0a2b1ded41.cer (raw, json) Hash identifier: u71qsYQWBRFH2EUel7ZR5IKZ2YDwwZGtGKnl/8f6NfE= Subject key identifier: 6E:10:59:0F:B5:19:D5:C7:F9:CF:8B:A6:2E:89:51:EF:C5:02:67:85 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B1EF9DE9F2DE63CA716566C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1518631-4496-4b2d-abc7-6f0a2b1ded41/d1518631-4496-4b2d-abc7-6f0a2b1ded41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1518631-4496-4b2d-abc7-6f0a2b1ded41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 14671 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:de:9f:2d:e6:3c:a7:16:56:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=d1518631-4496-4b2d-abc7-6f0a2b1ded41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:0b:02:e6:45:b8:c0:d3:e0:0c:44:62:d5: fb:1c:7d:d3:df:47:9a:db:ae:ca:b9:60:9e:f2:b2: e9:9a:21:75:41:71:c9:5a:9c:f4:8c:e6:11:ba:04: 97:6f:cc:51:b2:03:52:10:7b:ea:aa:78:43:eb:c7: 89:1e:7f:fc:4a:f1:6a:e4:98:49:16:60:61:27:1a: 03:48:e8:39:c5:43:55:62:20:eb:42:59:88:cd:78: 70:a9:62:d4:9c:39:b0:16:44:64:f4:df:5c:2f:15: e3:b6:ae:27:e2:c7:ba:64:f9:7a:da:75:48:3f:40: 3f:01:9d:57:6b:df:a6:99:be:2c:c4:f1:18:75:4b: 9d:ef:7b:1f:6e:7c:ba:57:16:9d:dc:93:7a:72:26: 0e:73:36:36:be:fe:1c:c3:54:89:50:aa:8a:eb:f2: cb:e6:5a:41:be:86:ca:b1:e4:03:f4:5b:08:6f:70: 37:e9:c1:71:05:19:96:fc:38:92:6d:88:41:90:30: cc:0d:b5:8b:7c:4d:ee:f3:5c:05:11:78:d1:fe:aa: 9b:eb:1c:95:8f:b9:b3:3e:1a:95:c8:2a:e1:bf:5a: b2:36:35:56:f0:3b:0e:39:5a:cb:4d:c6:ce:39:3f: e5:a8:35:69:c2:a2:e8:cf:9d:86:a0:f9:32:2a:7f: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:10:59:0F:B5:19:D5:C7:F9:CF:8B:A6:2E:89:51:EF:C5:02:67:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1518631-4496-4b2d-abc7-6f0a2b1ded41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1518631-4496-4b2d-abc7-6f0a2b1ded41/d1518631-4496-4b2d-abc7-6f0a2b1ded41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:e4:ab:6f:4b:66:c1:2e:0b:7e:57:d2:f7:0c:c5:01:2b: 18:4d:1f:a3:9d:10:6a:0b:c7:74:21:7a:87:1e:c6:05:c8:0d: a8:54:93:3c:dc:4f:4c:5d:ed:4a:15:ca:0b:3f:95:94:c3:71: 59:ec:da:11:5f:71:bb:d2:90:fd:1c:12:61:dd:2e:e8:fa:bf: fd:a4:20:f3:fb:38:53:07:e6:9c:25:b1:05:d8:4e:a9:b2:5d: 0d:77:e4:85:d6:4d:de:54:f7:4c:42:de:42:17:00:23:48:bb: 92:b0:b3:9b:97:fc:39:3b:1e:46:76:96:78:2a:ec:a3:2c:93: f7:eb:68:f0:a7:14:f6:d2:6d:8c:45:ea:ab:ae:5b:b0:4e:60: 91:29:2b:a9:31:41:ad:9d:c3:cd:c0:4d:41:08:e1:90:52:4c: 8a:bc:fe:bd:cf:12:65:cb:06:ba:94:e8:f7:f6:26:a0:a0:2e: 25:2c:69:2c:09:5c:65:0d:da:7b:b8:78:06:39:f1:30:4d:93: 73:ac:52:f1:40:73:99:51:3d:f7:0c:89:23:e2:12:4d:c8:c6: 7a:96:5b:1b:13:ee:fb:71:24:6c:a7:c4:93:56:4b:a6:b8:00: f8:09:b6:2b:08:db:75:6c:bb:72:a7:3b:f5:d5:27:9b:2d:6a: 27:92:62:dd -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEse+d6fLeY8pxZWbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk ZDE1MTg2MzEtNDQ5Ni00YjJkLWFiYzctNmYwYTJiMWRlZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT0LAuZFuMDT4AxEYtX7HH3T30ea267KuWCe 8rLpmiF1QXHJWpz0jOYRugSXb8xRsgNSEHvqqnhD68eJHn/8SvFq5JhJFmBhJxoD SOg5xUNVYiDrQlmIzXhwqWLUnDmwFkRk9N9cLxXjtq4n4se6ZPl62nVIP0A/AZ1X a9+mmb4sxPEYdUud73sfbny6Vxad3JN6ciYOczY2vv4cw1SJUKqK6/LL5lpBvobK seQD9FsIb3A36cFxBRmW/DiSbYhBkDDMDbWLfE3u81wFEXjR/qqb6xyVj7mzPhqV yCrhv1qyNjVW8DsOOVrLTcbOOT/lqDVpwqLoz52GoPkyKn8pfwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG4QWQ+1GdXH+c+Lpi6JUe/FAmeFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MTUxODYzMS00NDk2LTRiMmQtYWJjNy02ZjBhMmIxZGVkNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QxNTE4NjMxLTQ0OTYtNGIyZC1h YmM3LTZmMGEyYjFkZWQ0MS9kMTUxODYzMS00NDk2LTRiMmQtYWJjNy02ZjBhMmIx ZGVkNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOU8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS/Lkq29LZsEuC35X0vcMxQErGE0f o50QagvHdCF6hx7GBcgNqFSTPNxPTF3tShXKCz+VlMNxWezaEV9xu9KQ/RwSYd0u 6Pq//aQg8/s4UwfmnCWxBdhOqbJdDXfkhdZN3lT3TELeQhcAI0i7krCzm5f8OTse RnaWeCrsoyyT9+to8KcU9tJtjEXqq65bsE5gkSkrqTFBrZ3DzcBNQQjhkFJMirz+ vc8SZcsGupTo9/YmoKAuJSxpLAlcZQ3ae7h4BjnxME2Tc6xS8UBzmVE99wyJI+IS TcjGepZbGxPu+3EkbKfEk1ZLprgA+Am2KwjbdWy7cqc79dUnmy1qJ5Ji3Q== -----END CERTIFICATE-----Generated at Fri Oct 10 15:25:23 2025 by rpki-client