$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer File: 00561825-d26a-4ad1-954b-7ae435a3f4a1.cer (raw, json) Hash identifier: h52oIrvTISUzIMmPukUtebzT4lJYcdsIa+tWtNXtiU4= Subject key identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B959FEFC3C04DDFE2847BD900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 12:45:24 +0000 Certificate not after: Sun 23 Jan 2028 13:45:24 +0000 Subordinate resources: IP: 134.174.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:9f:ef:c3:c0:4d:df:e2:84:7b:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 20 12:45:24 2025 GMT Not After : Jan 23 13:45:24 2028 GMT Subject: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:02:2a:99:e3:0e:a0:2e:da:bd:d8:21:28: e3:01:b6:bb:eb:72:64:a1:8e:c8:3b:cd:92:b6:c5: 64:12:28:50:fe:c8:b2:92:79:69:63:2a:bc:2e:94: ee:dd:42:06:51:02:f6:c3:10:f2:3e:3f:0f:12:e4: 29:7e:3d:c1:7c:54:31:ef:9f:ed:36:22:a7:8b:3f: 09:64:2a:27:f2:a3:20:65:e9:e9:fb:25:1c:01:1f: ab:c2:57:0f:0b:2a:e5:4e:76:32:44:e9:43:bb:00: 76:c7:a9:8d:17:cf:ff:05:f0:e2:b7:a8:8d:f3:02: 56:2e:c4:a4:72:98:79:86:88:06:41:4a:40:32:24: dc:16:52:f7:0f:52:45:e2:b5:d8:24:2b:79:da:2a: 71:c6:2e:a9:37:3d:4c:0a:11:72:59:9a:b4:e4:32: c8:8a:09:20:59:80:74:55:af:f3:34:10:1a:ce:28: 35:3b:60:e9:59:8c:34:a6:fd:b1:59:bd:6e:60:79: fe:b2:2d:a0:51:f3:80:23:7b:6c:32:cc:05:cd:4d: 7b:8d:cd:63:17:3e:f8:c4:1d:24:21:60:8d:5d:97: 60:77:5e:7f:cc:ed:c3:c4:1c:8f:e5:16:2a:d0:2c: df:b5:74:a8:eb:e8:bc:92:de:be:2e:62:dd:c9:69: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 134.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a3:8c:87:e8:8c:07:d4:78:4d:cb:bd:ed:6d:d7:4d:11:48: 5e:e7:06:a4:94:2d:17:35:e9:88:e8:51:90:ac:ce:3f:e8:90: 58:ab:7f:0d:b4:1d:04:03:b6:eb:2c:4f:ce:c2:2a:02:a7:d4: 95:77:d9:dc:58:a2:39:fe:f8:5e:20:48:85:63:6a:89:84:d9: 97:8a:75:33:f6:e2:71:e0:5d:7e:f3:70:17:6c:00:c7:31:75: e2:c9:53:db:12:84:7f:bf:7b:4a:91:55:f8:e3:be:fb:69:14: 1e:b1:3d:3b:58:bb:b3:63:6a:b3:ee:91:58:37:7c:d1:73:72: da:14:80:05:ae:24:86:87:36:f0:42:86:d7:bd:cd:4e:8e:2e: 57:e2:4d:69:f3:7b:45:59:a5:2a:53:5d:a1:f4:8e:94:eb:dd: ad:28:e5:1a:c6:a5:94:df:a7:b4:ee:66:27:9b:0f:bd:98:fa: 5b:ed:13:b0:46:5b:68:e6:1f:12:8c:19:c3:94:e2:f8:4e:30: c3:ae:09:91:44:40:39:de:9b:a2:fd:e7:16:ec:82:a9:61:04: c6:8d:69:43:ac:56:58:a1:03:06:cf:87:bd:f9:c0:8b:c3:26: e9:5d:a6:71:39:cd:f2:2f:c1:9f:8a:fe:1e:85:33:2c:fb:e7: 88:bd:2c:be -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEuVn+/DwE3f4oR72QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMDEyNDUyNFoXDTI4MDEyMzEzNDUyNFowLzEtMCsGA1UEAxMk MDA1NjE4MjUtZDI2YS00YWQxLTk1NGItN2FlNDM1YTNmNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj4CKpnjDqAu2r3YISjjAba763JkoY7IO82S tsVkEihQ/siyknlpYyq8LpTu3UIGUQL2wxDyPj8PEuQpfj3BfFQx75/tNiKniz8J ZCon8qMgZenp+yUcAR+rwlcPCyrlTnYyROlDuwB2x6mNF8//BfDit6iN8wJWLsSk cph5hogGQUpAMiTcFlL3D1JF4rXYJCt52ipxxi6pNz1MChFyWZq05DLIigkgWYB0 Va/zNBAazig1O2DpWYw0pv2xWb1uYHn+si2gUfOAI3tsMswFzU17jc1jFz74xB0k IWCNXZdgd15/zO3DxByP5RYq0CzftXSo6+i8kt6+LmLdyWnqBQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLANnEWjw6zEW4jrbu/n6nHEGs77MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w MDU2MTgyNS1kMjZhLTRhZDEtOTU0Yi03YWU0MzVhM2Y0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAwNTYxODI1LWQyNmEtNGFkMS05 NTRiLTdhZTQzNWEzZjRhMS8wMDU2MTgyNS1kMjZhLTRhZDEtOTU0Yi03YWU0MzVh M2Y0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCGrjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOo4yH6IwH1HhNy73tbddN EUhe5waklC0XNemI6FGQrM4/6JBYq38NtB0EA7brLE/OwioCp9SVd9ncWKI5/vhe IEiFY2qJhNmXinUz9uJx4F1+83AXbADHMXXiyVPbEoR/v3tKkVX44777aRQesT07 WLuzY2qz7pFYN3zRc3LaFIAFriSGhzbwQobXvc1Oji5X4k1p83tFWaUqU12h9I6U 692tKOUaxqWU36e07mYnmw+9mPpb7ROwRlto5h8SjBnDlOL4TjDDrgmRREA53pui /ecW7IKpYQTGjWlDrFZYoQMGz4e9+cCLwybpXaZxOc3yL8Gfiv4ehTMs++eIvSy+ -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:03 2025 by rpki-client