$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/013ad54b-fbbf-492d-b002-f7f7c670fb5c.cer File: 013ad54b-fbbf-492d-b002-f7f7c670fb5c.cer (raw, json) Hash identifier: TlYNOgHDHSoW86scSl0fSyWTr+/9gG5rtT+yF833oo4= Subject key identifier: 46:90:A8:DB:77:09:90:30:C4:9A:FE:2D:22:35:88:A3:3C:32:4E:7D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B72C03A89BA0F3A7A6EDE0760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/013ad54b-fbbf-492d-b002-f7f7c670fb5c/013ad54b-fbbf-492d-b002-f7f7c670fb5c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/013ad54b-fbbf-492d-b002-f7f7c670fb5c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 00:57:10 +0000 Certificate not after: Tue 11 Jan 2028 01:57:10 +0000 Subordinate resources: IP: 208.93.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c0:3a:89:ba:0f:3a:7a:6e:de:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 8 00:57:10 2025 GMT Not After : Jan 11 01:57:10 2028 GMT Subject: CN=013ad54b-fbbf-492d-b002-f7f7c670fb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:13:0d:e0:55:f6:1b:42:f3:9c:18:f9:fd: a8:9f:6b:6f:57:02:d6:3c:60:4b:04:61:82:05:cb: 39:76:60:b6:f8:e3:76:0b:e3:b5:64:59:24:20:68: 01:95:be:8e:06:e8:91:11:ec:5d:63:98:dc:ad:5e: c6:f0:cd:21:94:99:75:36:55:0e:db:3c:4e:b7:ec: fd:7b:9d:80:aa:a4:b2:14:93:92:e7:4f:7e:6d:92: 48:16:41:90:4b:83:a8:fa:67:f5:d5:8b:1e:30:99: c7:df:14:dc:dc:38:24:2c:b9:8b:35:77:1e:02:7c: d0:14:ce:55:7e:64:ee:5d:f1:9b:55:18:19:27:0d: 0b:90:da:e1:ec:a2:b9:36:3f:20:36:80:83:b6:98: a7:75:3d:e2:6f:c5:70:0a:5c:25:64:32:66:2d:6c: d8:be:58:47:91:67:f3:bc:ac:39:aa:8c:d3:30:cb: 4a:22:35:f8:10:1b:84:92:2c:f1:c0:aa:7b:a9:ba: bb:b9:d5:e8:0c:b5:8b:ca:13:82:cd:a3:f6:f0:6e: e3:b5:d3:1d:f7:93:46:6c:18:6d:b0:68:02:4f:79: d8:cf:7b:7e:df:15:82:09:50:ed:68:88:68:c6:91: 24:00:04:41:e4:c7:d5:a0:88:86:bc:13:88:43:9e: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:A8:DB:77:09:90:30:C4:9A:FE:2D:22:35:88:A3:3C:32:4E:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/013ad54b-fbbf-492d-b002-f7f7c670fb5c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/013ad54b-fbbf-492d-b002-f7f7c670fb5c/013ad54b-fbbf-492d-b002-f7f7c670fb5c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 208.93.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:16:58:21:87:f3:67:86:51:b0:b6:0d:66:ef:ac:67:50: f0:6f:96:8a:10:6f:4a:0f:6b:ad:07:46:a6:5f:fc:60:f8:37: f4:1b:52:80:8b:47:ca:43:14:51:86:7d:57:a1:dc:1a:02:f7: 1c:2a:75:32:56:06:5f:08:96:16:c6:ec:85:b5:e4:67:fa:cc: 4a:cb:c4:f1:03:e6:df:6a:d4:f9:b5:ff:36:c6:50:8d:d3:a3: 97:9a:b8:20:5a:75:f9:df:d6:b4:77:72:6e:99:18:93:3e:8d: a6:52:db:34:8a:9e:d5:50:ae:58:69:3c:5a:0b:57:64:aa:eb: 1d:2e:76:10:64:b8:fa:39:0a:e1:ff:c4:3e:9a:05:b7:9a:40: d0:ad:a4:40:b4:89:ac:0d:0f:10:4a:68:ed:b3:a1:f9:c3:05: 47:ae:50:d0:c4:b1:99:45:17:83:aa:85:3e:c6:b4:19:33:f4: eb:53:72:78:5a:ea:9a:74:9b:89:4d:48:7a:08:52:e3:65:09: 5f:e3:06:35:ff:de:29:06:58:c8:bc:f7:d3:b1:bf:1e:e8:22: 9c:b7:8f:58:00:e7:a1:58:e5:5f:98:0f:06:49:f0:f4:24:7e: 44:37:95:35:ef:24:04:1d:1a:c7:f3:6e:90:32:fd:57:47:ad: 65:bf:1e:1a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEtywDqJug86em7eB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAwODAwNTcxMFoXDTI4MDExMTAxNTcxMFowLzEtMCsGA1UEAxMk MDEzYWQ1NGItZmJiZi00OTJkLWIwMDItZjdmN2M2NzBmYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQTDeBV9htC85wY+f2on2tvVwLWPGBLBGGC Bcs5dmC2+ON2C+O1ZFkkIGgBlb6OBuiREexdY5jcrV7G8M0hlJl1NlUO2zxOt+z9 e52AqqSyFJOS509+bZJIFkGQS4Oo+mf11YseMJnH3xTc3DgkLLmLNXceAnzQFM5V fmTuXfGbVRgZJw0LkNrh7KK5Nj8gNoCDtpindT3ib8VwClwlZDJmLWzYvlhHkWfz vKw5qozTMMtKIjX4EBuEkizxwKp7qbq7udXoDLWLyhOCzaP28G7jtdMd95NGbBht sGgCT3nYz3t+3xWCCVDtaIhoxpEkAARB5MfVoIiGvBOIQ54q6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEaQqNt3CZAwxJr+LSI1iKM8Mk59MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w MTNhZDU0Yi1mYmJmLTQ5MmQtYjAwMi1mN2Y3YzY3MGZiNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzAxM2FkNTRiLWZiYmYtNDkyZC1i MDAyLWY3ZjdjNjcwZmI1Yy8wMTNhZDU0Yi1mYmJmLTQ5MmQtYjAwMi1mN2Y3YzY3 MGZiNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQXYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKE4WWCGH82eGUbC2DWbv rGdQ8G+WihBvSg9rrQdGpl/8YPg39BtSgItHykMUUYZ9V6HcGgL3HCp1MlYGXwiW FsbshbXkZ/rMSsvE8QPm32rU+bX/NsZQjdOjl5q4IFp1+d/WtHdybpkYkz6NplLb NIqe1VCuWGk8WgtXZKrrHS52EGS4+jkK4f/EPpoFt5pA0K2kQLSJrA0PEEpo7bOh +cMFR65Q0MSxmUUXg6qFPsa0GTP061NyeFrqmnSbiU1IeghS42UJX+MGNf/eKQZY yLz307G/HuginLePWADnoVjlX5gPBknw9CR+RDeVNe8kBB0ax/NukDL9V0etZb8e Gg== -----END CERTIFICATE-----Generated at Wed Oct 8 17:02:31 2025 by rpki-client