$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer File: dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer (raw, json) Hash identifier: g7ME1pqZqj38hIMgBndy43CBvKYbP3JH14fudFKEy54= Subject key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6FEFB052CEDE67A574DDB3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 00:45:22 +0000 Certificate not after: Mon 10 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 11110 IP: 204.13.52.0/22 IP: 2604:3500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:ef:b0:52:ce:de:67:a5:74:dd:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 00:45:22 2025 GMT Not After : Jan 10 01:45:22 2028 GMT Subject: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:d1:b2:fd:3d:32:97:1e:d2:96:dc:53:75: 41:d6:42:97:4e:08:37:f5:a7:24:70:26:2a:c8:b4: 75:75:77:a1:e9:fb:f2:85:f7:af:f6:37:94:5b:c0: 3f:15:c3:27:9a:fa:6d:a1:d4:4e:e8:a8:3e:0a:0c: a8:dc:81:f3:d9:e4:a6:34:e5:94:89:c8:27:5b:d6: 21:67:24:47:c6:2c:ed:be:57:e5:3f:79:13:c9:e1: 66:b4:c2:fa:07:b0:0c:84:d1:ea:ad:90:fd:91:f3: 8c:be:bd:ab:14:db:6b:b3:44:50:12:e0:01:91:87: c6:f1:72:ea:c4:4b:7b:01:74:f2:1e:ba:98:e5:7b: 3d:a0:8b:7a:ed:05:6c:86:f9:38:25:f9:a7:c0:3a: 5b:87:84:d0:6e:4f:e0:72:04:ac:ff:c6:0c:bc:19: cf:b8:72:e5:f7:29:65:6d:e9:3c:72:5a:ac:ac:40: 73:ec:3c:ef:4f:d6:93:ad:04:e2:0d:10:24:b2:30: a4:f7:db:07:b7:56:20:7a:bc:b6:28:a6:55:4f:83: 6d:d3:16:37:96:d5:da:74:d1:4e:07:d3:75:0f:2e: 1a:99:ab:be:de:7c:c2:f5:72:8d:d0:4d:d0:a5:ad: a8:08:f0:24:0d:7a:66:93:17:0e:bc:40:29:cc:e9: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.13.52.0/22 IPv6: 2604:3500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:09:ef:6e:62:66:37:e2:d4:d7:68:2e:25:d4:a1:3a:11:8a: 24:f2:17:ec:e7:fc:76:06:e0:20:ad:56:34:c4:22:e9:f7:d5: bb:a9:5c:1e:a7:02:45:c7:ae:42:79:ce:6f:35:b9:52:5f:17: 31:c8:a9:5c:32:83:07:b6:a7:1c:5e:52:ca:00:c0:ae:17:32: 0b:fd:4b:89:34:d5:b8:e6:5d:58:37:eb:ae:82:07:af:d6:14: 41:65:f4:ab:17:9a:9a:bd:92:32:8b:7a:07:cc:81:21:48:65: 17:d5:7f:e1:f9:0e:67:6e:ea:42:92:ed:36:d8:b4:fc:92:39: 03:73:9f:0c:b5:39:ab:27:f8:ad:c2:86:8b:5c:cf:cc:85:e1: 60:8e:17:bb:99:4f:de:82:03:04:c0:77:08:38:e8:0d:27:17: 3a:41:fe:b6:fa:0c:83:86:31:18:23:a1:92:35:5d:0d:64:e8: cd:28:39:1d:34:36:6d:1b:3d:d4:67:5f:c4:cd:b6:80:9b:96: 94:75:cb:f2:5c:59:ff:59:e0:5f:91:ea:3c:b0:c0:84:58:1c: 83:60:a7:e9:24:5c:b3:d7:30:81:bf:7f:a7:ef:17:b0:b6:64: 93:60:1d:cd:65:06:17:e7:d9:68:58:ac:bf:52:a4:22:e4:c0: d5:00:af:a8 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEtv77BSzt5npXTds8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzAwNDUyMloXDTI4MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk ZGZiNTlkNzAtMGM2OS00MTM1LWIyZjAtNjFiZDRkMWE4MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumzRsv09Mpce0pbcU3VB1kKXTgg39ackcCYq yLR1dXeh6fvyhfev9jeUW8A/FcMnmvptodRO6Kg+Cgyo3IHz2eSmNOWUicgnW9Yh ZyRHxiztvlflP3kTyeFmtML6B7AMhNHqrZD9kfOMvr2rFNtrs0RQEuABkYfG8XLq xEt7AXTyHrqY5Xs9oIt67QVshvk4JfmnwDpbh4TQbk/gcgSs/8YMvBnPuHLl9yll bek8clqsrEBz7DzvT9aTrQTiDRAksjCk99sHt1Ygery2KKZVT4Nt0xY3ltXadNFO B9N1Dy4amau+3nzC9XKN0E3Qpa2oCPAkDXpmkxcOvEApzOnOmQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFD72ALYanfo0UPAah2tX2ODOxYcnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k ZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQxYTgyNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2RmYjU5ZDcwLTBjNjktNDEzNS1i MmYwLTYxYmQ0ZDFhODI2My9kZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQx YTgyNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALMDTQwDQQCAAIwBwMFACYENQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICK2YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFQnvbmJmN+LU12guJdShOhGKJPIX 7Of8dgbgIK1WNMQi6ffVu6lcHqcCRceuQnnObzW5Ul8XMcipXDKDB7anHF5SygDA rhcyC/1LiTTVuOZdWDfrroIHr9YUQWX0qxeamr2SMot6B8yBIUhlF9V/4fkOZ27q QpLtNti0/JI5A3OfDLU5qyf4rcKGi1zPzIXhYI4Xu5lP3oIDBMB3CDjoDScXOkH+ tvoMg4YxGCOhkjVdDWTozSg5HTQ2bRs91GdfxM22gJuWlHXL8lxZ/1ngX5HqPLDA hFgcg2Cn6SRcs9cwgb9/p+8XsLZkk2AdzWUGF+fZaFisv1KkIuTA1QCvqA== -----END CERTIFICATE-----Generated at Fri Oct 10 15:18:33 2025 by rpki-client