$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer File: dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer (raw, json) Hash identifier: 1KKxCP3IqrxVQ02P4z6cA4Kc5TJEhEJ7i0HQkzbTLik= Subject key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B21C48EA2E34DB252DE54D300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 399689 IP: 172.98.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:a2:e3:4d:b2:52:de:54:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:f5:68:b0:df:47:0e:15:3c:b8:95:6b:7f: 43:ea:b7:05:89:68:73:68:93:14:7e:6c:6a:46:15: 64:89:20:84:61:c9:ce:b3:e6:51:a7:1a:3f:56:6a: 09:9b:ff:25:ca:75:07:75:57:80:fe:9f:ba:23:a1: e4:47:17:ae:98:e7:80:1b:e6:3f:d7:cf:f7:12:a7: 54:c6:01:6c:b2:9d:99:8c:c5:e2:91:c9:47:20:4f: d3:8a:df:fc:6e:14:e8:a0:ac:25:32:4d:24:63:35: fd:04:bf:d5:f2:d1:51:c2:e0:3c:3c:f7:13:6d:e1: e8:2a:a9:b1:99:5f:25:e4:f5:83:01:e1:8f:8c:43: 19:bc:0c:0c:3e:ef:04:37:a9:56:12:aa:bd:a9:a1: 8c:33:2f:f3:a6:f1:2d:3e:02:d8:72:a5:21:e2:7e: 0a:e9:61:c7:7d:b0:1b:ca:81:ae:77:bb:88:0b:a9: 71:92:73:96:53:87:6a:a5:f0:52:d3:32:e3:a1:7e: 10:86:03:a5:a2:d2:98:1e:04:d6:4f:a1:30:1e:24: 79:83:35:07:e0:10:1f:43:6f:a3:01:a7:a2:7f:26: f9:e4:c0:fe:1e:9d:10:4c:39:60:33:a4:ba:45:1d: 2d:0f:7c:01:17:41:aa:67:b3:28:f6:a8:63:7e:40: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 172.98.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399689 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:02:09:a1:d7:5c:af:35:10:06:c5:28:b8:4f:42:ce:b3:99: d1:96:44:98:95:12:03:05:81:be:85:c0:90:a0:38:54:0a:3f: 49:b6:0b:0a:89:bf:85:03:28:0c:4f:37:e2:76:67:a1:98:68: 07:9f:14:9c:fd:03:a8:25:7a:bc:49:15:3b:97:16:a0:40:4c: 1d:02:0f:84:3c:e0:a4:06:0b:8a:73:66:2d:0b:95:8f:ed:9a: ad:4f:78:d8:34:66:19:d2:15:e5:2f:8a:0d:c7:c8:94:c2:0e: 61:e0:f5:68:3c:1e:ba:2a:1c:8a:e1:12:1d:8e:14:ef:81:fb: d1:34:e5:e3:3a:75:7f:52:92:2d:34:45:04:0d:11:62:c0:32: d8:d5:9b:8c:5f:1f:d3:6c:38:7d:36:98:76:93:f6:e0:68:ef: f9:42:b8:61:48:32:47:1d:83:da:25:62:d4:1c:01:d4:90:e1: 58:3e:f9:e6:f5:49:60:74:5e:fc:8e:f7:ed:17:6d:20:82:f4: c7:22:06:7d:79:da:8d:e4:d6:3e:c8:72:f1:1c:13:99:e5:9c: ef:ba:54:47:8e:d3:d1:ae:e8:29:9f:07:dd:b4:0e:c9:37:89: 5f:48:2c:91:06:21:11:c1:47:bb:51:40:4c:4b:e6:6e:c5:c5: f0:1c:16:9e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEshxI6i402yUt5U0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk ZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTExOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25X1aLDfRw4VPLiVa39D6rcFiWhzaJMUfmxq RhVkiSCEYcnOs+ZRpxo/VmoJm/8lynUHdVeA/p+6I6HkRxeumOeAG+Y/18/3EqdU xgFssp2ZjMXikclHIE/Tit/8bhTooKwlMk0kYzX9BL/V8tFRwuA8PPcTbeHoKqmx mV8l5PWDAeGPjEMZvAwMPu8EN6lWEqq9qaGMMy/zpvEtPgLYcqUh4n4K6WHHfbAb yoGud7uIC6lxknOWU4dqpfBS0zLjoX4QhgOlotKYHgTWT6EwHiR5gzUH4BAfQ2+j Aaeifyb55MD+Hp0QTDlgM6S6RR0tD3wBF0GqZ7Mo9qhjfkA9RwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFE2riyOhJ3uVRe7B53HP62MYiHO5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k ZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2RkZTFmZjZlLWQ2ODAtNDZjYy05 ZWIyLTQ4OTY4ZTUxMThlNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1 MTE4ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKsYhQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhlJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAgCCaHXXK81EAbFKLhPQs6zmdGWRJiVEgMFgb6FwJCgOFQK P0m2CwqJv4UDKAxPN+J2Z6GYaAefFJz9A6glerxJFTuXFqBATB0CD4Q84KQGC4pz Zi0LlY/tmq1PeNg0ZhnSFeUvig3HyJTCDmHg9Wg8HroqHIrhEh2OFO+B+9E05eM6 dX9Ski00RQQNEWLAMtjVm4xfH9NsOH02mHaT9uBo7/lCuGFIMkcdg9olYtQcAdSQ 4Vg++eb1SWB0XvyO9+0XbSCC9MciBn152o3k1j7IcvEcE5nlnO+6VEeO09Gu6Cmf B920Dsk3iV9ILJEGIRHBR7tRQExL5m7FxfAcFp4= -----END CERTIFICATE-----Generated at Fri Oct 10 15:26:27 2025 by rpki-client