$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.cer File: 8f25cc5f-7916-4dd3-810e-a2383e3c90f2.cer (raw, json) Hash identifier: fWxykxLEmZWsozZLv99Rb9iFcDR2twa9i4UjZS+cSnA= Subject key identifier: 69:89:93:4A:46:BE:E3:A2:AB:8D:3A:A1:D0:35:BC:E0:5C:1F:80:36 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B72487C5C5784F55900242900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 20:55:54 +0000 Certificate not after: Mon 10 Jan 2028 21:55:54 +0000 Subordinate resources: IP: 192.133.254.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:48:7c:5c:57:84:f5:59:00:24:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 7 20:55:54 2025 GMT Not After : Jan 10 21:55:54 2028 GMT Subject: CN=8f25cc5f-7916-4dd3-810e-a2383e3c90f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:1b:d7:67:76:62:9a:f0:24:4e:14:54:1a: e0:3e:3e:fa:8f:c5:16:0c:c3:86:12:7b:c5:b1:b0: a8:ae:d6:ad:7e:31:12:31:2a:d8:9c:d8:8f:c6:41: fa:5a:4e:43:86:29:74:22:88:ea:5b:3b:82:4a:7d: a7:bd:5e:84:51:9d:55:63:f1:3c:74:f5:2a:76:37: 6d:d2:1e:55:a5:02:51:51:6f:13:57:d5:ca:f9:a5: f4:ca:29:5d:9f:31:ab:44:97:79:9f:8c:98:39:49: 60:60:cc:50:9b:6d:68:1b:13:0e:fa:2b:a3:d4:10: 50:6d:87:5f:a4:64:94:cc:b1:77:2a:2a:3b:03:7d: 0e:1b:db:42:0a:48:4f:2b:45:64:59:88:e6:16:88: ed:31:0b:f6:c7:8d:36:c8:fb:c8:fb:68:91:3c:3b: 43:80:a1:43:e3:54:3f:15:68:f7:70:74:99:9e:6d: e7:63:d2:ac:09:95:9e:a1:b2:2f:12:af:34:de:37: 4c:30:f7:b0:40:b8:9c:6f:85:4e:40:c3:0b:fe:2b: 4b:06:62:a5:a7:ef:d3:d2:73:20:a6:26:77:f9:a5: ef:ca:93:78:5a:0a:d7:e8:08:1b:23:0e:ab:ce:2b: 20:0a:fb:46:f9:fc:ff:da:67:5a:72:43:a4:27:b6: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:89:93:4A:46:BE:E3:A2:AB:8D:3A:A1:D0:35:BC:E0:5C:1F:80:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.133.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:be:ea:ee:28:9d:db:b8:9a:88:5c:72:f1:a0:60:93:c5:07: 25:94:cc:da:f9:48:09:4c:e3:19:d8:97:ff:6f:b9:cf:18:c9: 14:97:2b:94:79:c8:1a:a5:90:a0:a8:8e:31:0d:05:26:df:89: 96:60:46:40:23:9b:fd:9a:be:40:4b:fc:b5:98:e2:8b:46:c1: f3:bd:36:ae:26:bd:90:eb:3e:21:a5:41:42:de:f2:d1:3f:f5: 83:99:56:d3:9b:6a:bd:ad:c7:f4:41:ce:51:22:03:29:0f:da: b4:7b:f7:b8:2c:d6:7c:61:b1:ae:39:8b:85:05:44:71:1d:2f: 07:02:69:4b:6e:31:fa:7c:32:ae:ce:66:e2:5c:03:6c:9e:af: 23:26:76:87:11:b0:d0:e9:d1:cf:25:d4:b6:4e:87:e7:e1:3a: 85:66:4d:08:1b:ae:9b:2e:6e:5b:aa:79:64:d7:a3:3a:37:bb: 2b:e1:d0:ff:f0:d5:35:06:b9:33:02:3e:de:cd:96:a4:ae:b7: 37:47:a1:05:5f:30:60:5d:77:cb:e3:0a:60:27:4c:25:da:fb: 93:19:d1:6c:98:d5:bb:1c:f0:f6:25:b7:dd:a3:96:a6:6a:ee: 6d:ff:e6:91:1f:ef:64:d8:62:7d:f3:71:a2:c3:a4:83:81:85: d9:92:d0:2f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtySHxcV4T1WQAkKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAwNzIwNTU1NFoXDTI4MDExMDIxNTU1NFowLzEtMCsGA1UEAxMk OGYyNWNjNWYtNzkxNi00ZGQzLTgxMGUtYTIzODNlM2M5MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+cb12d2YprwJE4UVBrgPj76j8UWDMOGEnvF sbCortatfjESMSrYnNiPxkH6Wk5Dhil0IojqWzuCSn2nvV6EUZ1VY/E8dPUqdjdt 0h5VpQJRUW8TV9XK+aX0yildnzGrRJd5n4yYOUlgYMxQm21oGxMO+iuj1BBQbYdf pGSUzLF3Kio7A30OG9tCCkhPK0VkWYjmFojtMQv2x402yPvI+2iRPDtDgKFD41Q/ FWj3cHSZnm3nY9KsCZWeobIvEq803jdMMPewQLicb4VOQMML/itLBmKlp+/T0nMg piZ3+aXvypN4WgrX6AgbIw6rzisgCvtG+fz/2mdackOkJ7bYTwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGmJk0pGvuOiq406odA1vOBcH4A2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 ZjI1Y2M1Zi03OTE2LTRkZDMtODEwZS1hMjM4M2UzYzkwZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhmMjVjYzVmLTc5MTYtNGRkMy04 MTBlLWEyMzgzZTNjOTBmMi84ZjI1Y2M1Zi03OTE2LTRkZDMtODEwZS1hMjM4M2Uz YzkwZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAhf4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI77q7iid27iaiFxy8aBg k8UHJZTM2vlICUzjGdiX/2+5zxjJFJcrlHnIGqWQoKiOMQ0FJt+JlmBGQCOb/Zq+ QEv8tZjii0bB8702ria9kOs+IaVBQt7y0T/1g5lW05tqva3H9EHOUSIDKQ/atHv3 uCzWfGGxrjmLhQVEcR0vBwJpS24x+nwyrs5m4lwDbJ6vIyZ2hxGw0OnRzyXUtk6H 5+E6hWZNCBuumy5uW6p5ZNejOje7K+HQ//DVNQa5MwI+3s2WpK63N0ehBV8wYF13 y+MKYCdMJdr7kxnRbJjVuxzw9iW33aOWpmrubf/mkR/vZNhiffNxosOkg4GF2ZLQ Lw== -----END CERTIFICATE-----Generated at Fri Oct 10 14:37:20 2025 by rpki-client