$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer File: ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer (raw, json) Hash identifier: y6oMSl78Db8JbdyCWQXW6BzqWHXy90YmiKMHjaC2tv0= Subject key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B719AFE10247BE49D2FF39320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 15:06:20 +0000 Certificate not after: Mon 10 Jan 2028 16:06:20 +0000 Subordinate resources: IP: 170.166.0.0/16 IP: 170.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:9a:fe:10:24:7b:e4:9d:2f:f3:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 7 15:06:20 2025 GMT Not After : Jan 10 16:06:20 2028 GMT Subject: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:a8:83:38:7d:d3:34:dd:90:71:48:bd:fc: 99:92:91:3e:45:f4:e4:af:83:ff:24:1a:3d:21:bb: 0a:83:cd:7b:b3:c2:00:87:03:76:c5:7f:10:45:a4: 2b:51:94:d9:f3:9e:3d:c1:fe:aa:aa:f2:2a:c9:6c: 89:18:31:eb:13:28:9c:9b:05:39:2f:11:19:c5:e4: 3e:6f:c7:1c:18:01:ac:7a:2e:39:a8:07:3f:3f:a7: 93:88:78:cd:ae:88:07:dc:ec:75:21:f9:40:d6:7c: 16:04:64:1b:be:6b:11:c6:75:b7:f2:da:d2:2c:d8: 0e:f7:d5:ec:ab:64:d0:5a:95:f8:db:05:00:d3:a7: 0d:aa:0f:30:8f:e2:84:17:40:31:ed:94:85:91:f4: 5d:e4:0a:b5:15:14:40:78:74:04:5f:0a:43:db:76: f0:40:77:d7:1d:d3:5d:69:51:d9:7d:6c:4a:3f:b8: ae:94:09:18:c8:da:92:f8:69:93:b4:b5:f9:80:b1: 4c:9a:7c:55:f3:71:93:6d:0a:92:02:b9:d4:48:1c: 15:d9:ff:39:fb:41:cd:6f:93:13:37:16:c7:04:85: 26:b9:bc:bd:9a:5f:52:d1:7d:18:9a:04:b8:ce:00: ca:dc:63:13:92:f8:30:bd:6e:32:99:40:a0:30:72: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 170.166.0.0/16 170.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e2:fb:68:11:9d:a4:1d:e1:8a:17:d8:0d:ec:78:b9:84:2e: 65:11:88:4e:ab:ee:df:1a:37:f7:12:ea:3c:76:b1:52:4b:03: d5:19:51:65:96:c4:94:f9:fb:f9:9a:19:2f:ac:3f:d2:40:18: ec:4b:f0:5f:e5:03:c3:96:0c:e5:cb:d8:b2:fa:55:f6:c3:5f: 4e:e6:d9:4b:6b:4f:d8:32:df:38:35:5a:d3:60:f7:df:2e:bb: 88:ec:41:d8:22:9d:af:04:0d:cc:38:aa:15:d3:51:34:85:92: e2:07:d1:15:c2:fa:41:77:2c:5d:6b:da:60:e0:1c:20:49:c4: 0a:67:8f:df:55:c7:59:6f:64:79:a6:e9:c6:bb:97:ea:b9:76: 3c:31:42:3d:79:61:8b:97:24:d3:9c:31:6d:a5:57:98:79:65: 1d:c0:c8:e8:ca:df:94:8f:37:69:78:b6:5b:5a:cb:db:81:b9: ef:ab:c4:39:18:c0:0b:b1:5d:3c:94:e3:57:69:71:22:cc:b6: 8f:af:30:de:ed:0f:9e:d1:4e:33:65:36:0a:ae:7f:08:63:39: ac:4d:32:cb:45:d6:e2:15:46:6e:38:40:41:27:9e:7d:d2:b2: f5:1c:0c:c3:b1:d1:9a:83:55:0a:97:4a:8e:98:58:b0:dc:91: 72:3e:5c:e6 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEtxmv4QJHvknS/zkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTAwNzE1MDYyMFoXDTI4MDExMDE2MDYyMFowLzEtMCsGA1UEAxMk ZWE0YTUyZDYtNDZhNC00MmI1LWI5ZWEtZDQ0ZjViYTY4ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcuogzh90zTdkHFIvfyZkpE+RfTkr4P/JBo9 IbsKg817s8IAhwN2xX8QRaQrUZTZ8549wf6qqvIqyWyJGDHrEyicmwU5LxEZxeQ+ b8ccGAGsei45qAc/P6eTiHjNrogH3Ox1IflA1nwWBGQbvmsRxnW38trSLNgO99Xs q2TQWpX42wUA06cNqg8wj+KEF0Ax7ZSFkfRd5Aq1FRRAeHQEXwpD23bwQHfXHdNd aVHZfWxKP7iulAkYyNqS+GmTtLX5gLFMmnxV83GTbQqSArnUSBwV2f85+0HNb5MT NxbHBIUmuby9ml9S0X0YmgS4zgDK3GMTkvgwvW4ymUCgMHLNLwIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFFJ6SXS6goJo7Zc13L6rctaUkvY0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YTRhNTJkNi00NmE0LTQyYjUtYjllYS1kNDRmNWJhNjhkZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VhNGE1MmQ2LTQ2YTQtNDJiNS1i OWVhLWQ0NGY1YmE2OGRmMC9lYTRhNTJkNi00NmE0LTQyYjUtYjllYS1kNDRmNWJh NjhkZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCqpgMDAKrUMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFHi+2gRnaQd4YoX 2A3seLmELmURiE6r7t8aN/cS6jx2sVJLA9UZUWWWxJT5+/maGS+sP9JAGOxL8F/l A8OWDOXL2LL6VfbDX07m2UtrT9gy3zg1WtNg998uu4jsQdgina8EDcw4qhXTUTSF kuIH0RXC+kF3LF1r2mDgHCBJxApnj99Vx1lvZHmm6ca7l+q5djwxQj15YYuXJNOc MW2lV5h5ZR3AyOjK35SPN2l4tltay9uBue+rxDkYwAuxXTyU41dpcSLMto+vMN7t D57RTjNlNgqufwhjOaxNMstF1uIVRm44QEEnnn3SsvUcDMOx0ZqDVQqXSo6YWLDc kXI+XOY= -----END CERTIFICATE-----Generated at Wed Oct 8 15:43:36 2025 by rpki-client