$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer File: e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer (raw, json) Hash identifier: Eu3o2doECzqEjMo0Ww8vOh7ANqlerV7gsLvyw5r6tJI= Subject key identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6FEFB0499C42731AAFA23500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 00:45:22 +0000 Certificate not after: Mon 10 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 198.74.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:ef:b0:49:9c:42:73:1a:af:a2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 00:45:22 2025 GMT Not After : Jan 10 01:45:22 2028 GMT Subject: CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:1d:17:64:a4:fc:db:e9:40:9b:1c:a7:44: e7:4c:0a:3f:0c:13:e0:43:7d:9f:0b:c2:39:49:b5: 3d:d8:ce:5f:07:d4:15:b3:3f:41:50:9f:23:09:1e: a9:d6:1a:bd:c8:1a:b0:e2:dc:b3:dd:c2:6e:31:c2: 66:b1:01:48:69:95:ed:8c:0c:d2:d6:53:ad:1a:be: 21:15:67:e2:cc:12:0f:0e:05:a0:b0:bf:ba:54:9a: 50:e0:8d:8f:46:5d:49:b4:a6:ca:21:cf:24:33:ab: 71:d3:08:c0:ea:dc:8a:96:c9:41:34:39:49:3f:0b: 1a:b0:10:42:05:92:da:1a:85:fc:02:f8:ab:a4:99: 15:d8:46:bb:a1:3c:c1:7c:b0:41:2f:3a:e5:1c:86: cb:0f:f1:d6:8b:f5:e4:e3:c6:6c:c0:e5:10:bc:58: 90:f9:59:b5:f6:68:f9:34:b1:2b:0a:b8:e2:f0:c0: a2:9e:a8:a0:5c:8e:a1:a8:5a:72:df:b4:ce:3c:fc: 41:69:67:7f:19:9d:dd:7b:9c:95:8f:6a:6c:9c:09: 55:d3:64:26:53:ad:7c:7f:88:c8:dd:ee:04:64:1a: e9:42:ea:f5:6f:cc:85:36:bf:ad:bc:4a:a8:57:cb: 35:f7:df:45:bb:b9:e3:80:c2:cb:c6:64:c5:f2:fe: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.74.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:be:d3:2f:db:13:21:cb:dd:d1:ec:a9:37:b3:df:d3:b9:9b: 02:88:6b:7a:73:9c:c0:c4:49:fe:92:86:39:a5:2a:d6:58:fc: d4:e0:20:7d:30:20:d3:5a:ff:3f:5e:b7:31:cd:23:a0:e7:e1: ae:73:9c:24:cd:20:0b:9d:4a:ff:1e:a9:3d:61:10:74:f4:67: 55:2a:c3:19:b6:d9:29:21:68:38:5b:e0:a0:a1:56:4b:1a:61: 6a:3a:59:ed:5b:ee:05:af:01:c7:7d:7c:1e:ae:4f:45:2b:e2: 84:46:f7:59:5e:de:39:ab:e5:31:6e:61:76:d5:f9:99:3e:de: f4:8c:b3:b2:bb:25:c3:8e:ee:2d:76:b3:ff:81:fc:dc:c5:41: 54:a8:35:23:a4:20:6b:65:bb:b1:6d:02:0b:c7:ca:f8:03:06: 19:3f:41:6c:59:f1:31:df:b0:6a:21:55:d9:b7:2e:b3:49:0d: 28:61:ec:90:a7:b8:27:df:ce:94:6f:c1:ac:81:00:0e:32:dd: 6f:a7:d0:bb:97:b4:02:4d:6d:22:94:e6:a3:f1:50:3e:0b:da: 59:0c:28:20:5b:4a:4b:c9:d2:0b:33:5a:b7:fb:f2:12:d5:27: b1:cf:4d:7a:d8:4b:92:d8:2f:94:6d:d1:25:1a:35:fb:94:fd: 34:0f:43:ee -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtv77BJnEJzGq+iNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzAwNDUyMloXDTI4MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk ZTlkOWI5ZGQtMGIyNy00MTFhLWE4YTQtMTIyNDc3NTEwY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kMdF2Sk/NvpQJscp0TnTAo/DBPgQ32fC8I5 SbU92M5fB9QVsz9BUJ8jCR6p1hq9yBqw4tyz3cJuMcJmsQFIaZXtjAzS1lOtGr4h FWfizBIPDgWgsL+6VJpQ4I2PRl1JtKbKIc8kM6tx0wjA6tyKlslBNDlJPwsasBBC BZLaGoX8AvirpJkV2Ea7oTzBfLBBLzrlHIbLD/HWi/Xk48ZswOUQvFiQ+Vm19mj5 NLErCrji8MCinqigXI6hqFpy37TOPPxBaWd/GZ3de5yVj2psnAlV02QmU618f4jI 3e4EZBrpQur1b8yFNr+tvEqoV8s1999Fu7njgMLLxmTF8v7VAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNA+h9uYrC6PcP+58YWoeknHvJ5oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l OWQ5YjlkZC0wYjI3LTQxMWEtYThhNC0xMjI0Nzc1MTBjZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U5ZDliOWRkLTBiMjctNDExYS1h OGE0LTEyMjQ3NzUxMGNkZi9lOWQ5YjlkZC0wYjI3LTQxMWEtYThhNC0xMjI0Nzc1 MTBjZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALGSgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAar7TL9sTIcvd0eypN7Pf 07mbAohrenOcwMRJ/pKGOaUq1lj81OAgfTAg01r/P163Mc0joOfhrnOcJM0gC51K /x6pPWEQdPRnVSrDGbbZKSFoOFvgoKFWSxphajpZ7VvuBa8Bx318Hq5PRSvihEb3 WV7eOavlMW5hdtX5mT7e9Iyzsrslw47uLXaz/4H83MVBVKg1I6Qga2W7sW0CC8fK +AMGGT9BbFnxMd+waiFV2bcus0kNKGHskKe4J9/OlG/BrIEADjLdb6fQu5e0Ak1t IpTmo/FQPgvaWQwoIFtKS8nSCzNat/vyEtUnsc9NethLktgvlG3RJRo1+5T9NA9D 7g== -----END CERTIFICATE-----Generated at Fri Oct 10 15:18:33 2025 by rpki-client