$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer File: 0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer (raw, json) Hash identifier: JZHKqw5eRgrJKV9MIyHaccrX8jCBHEwF5MfiCW9NO0g= Subject key identifier: 39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B99CFF59C09F38AF27A5B5080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 2604:5f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:9c:09:f3:8a:f2:7a:5b:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=0c21d90e-4e01-463d-b595-f0bc4e7fa374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:5a:ab:7c:bc:42:ae:c3:36:b0:02:4f:d7: ed:96:98:27:00:c6:45:51:b5:2e:73:1d:0f:92:3f: 71:55:6c:74:f3:02:51:82:bf:5b:a4:a5:3d:29:5e: 39:cf:f2:80:cd:d9:eb:0e:48:90:12:70:e1:d2:38: 73:14:09:19:d1:14:2e:86:89:e5:f5:0a:2e:e7:c6: 0c:59:b5:3f:26:ce:d9:13:da:51:0c:52:ab:21:0e: ba:d4:18:75:8c:c1:d3:1f:bb:38:98:f6:16:5d:29: bd:a2:8d:cc:b6:e2:79:44:e9:48:59:e6:9d:de:a3: b1:60:1d:4d:51:37:80:90:55:08:a0:7c:5e:7e:65: 53:da:7d:0c:1b:9a:5e:a6:0d:63:9e:1c:85:57:bc: fd:3e:8b:e9:e3:52:8a:58:4c:8f:28:94:f0:71:39: 45:b9:4e:03:ae:e5:2b:e7:dd:3f:58:5c:39:98:c3: 3f:23:60:b2:71:fd:ab:3c:5e:4e:14:0a:50:82:57: 62:7a:01:77:8c:2f:c4:31:16:02:94:0a:b9:ef:78: 50:54:36:89:b9:77:ca:c6:51:d8:6f:f9:c1:b5:ee: 5d:0d:33:bd:76:38:7b:93:7b:dd:52:73:20:61:fb: da:e7:b5:69:87:b1:df:e1:77:14:fa:cd:46:1d:c2: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2604:5f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:57:02:0c:97:71:2f:75:58:16:9c:01:87:cd:c3:2d:17: a3:9a:6d:76:ea:64:18:1c:38:56:21:24:5b:ec:b6:fb:84:54: b2:e7:18:be:58:34:dc:bd:44:d8:c4:96:71:6b:44:77:ef:7f: 4f:f6:67:69:b9:52:34:c4:16:ad:b3:4d:31:b0:22:21:09:62: d6:6b:51:21:9b:4c:0a:03:03:08:3c:62:c1:82:97:34:5f:ae: d3:d4:52:f4:73:52:c4:42:e2:93:c8:4e:e4:d7:1e:b4:59:82: 15:6b:82:35:0a:16:dc:f6:4d:c2:43:d9:0f:1a:72:1a:e6:77: eb:6a:44:0f:37:4b:29:9d:72:0d:0c:04:b7:52:9f:33:93:58: c9:39:1e:fa:ea:54:fe:d3:ac:1c:4a:7a:70:3c:57:bf:49:a7: bd:0d:30:84:33:24:7b:7a:ea:9b:e8:b9:1d:ee:62:1d:c4:b6: cf:cc:07:bc:9e:9c:ba:ee:d8:d7:3e:52:c7:52:e9:c0:d3:b2: 04:17:74:f4:f5:0b:a5:20:69:c1:9a:c8:9f:61:96:38:3b:20: f6:49:55:a7:ec:ef:9e:7f:78:df:24:33:5e:d3:53:6c:30:9c: 0e:10:8b:2c:a8:9b:ab:f5:60:57:4b:53:fc:84:c6:ee:48:78: 97:10:d6:7f -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEuZz/WcCfOK8npbUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk MGMyMWQ5MGUtNGUwMS00NjNkLWI1OTUtZjBiYzRlN2ZhMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Slaq3y8Qq7DNrACT9ftlpgnAMZFUbUucx0P kj9xVWx08wJRgr9bpKU9KV45z/KAzdnrDkiQEnDh0jhzFAkZ0RQuhonl9Qou58YM WbU/Js7ZE9pRDFKrIQ661Bh1jMHTH7s4mPYWXSm9oo3MtuJ5ROlIWead3qOxYB1N UTeAkFUIoHxefmVT2n0MG5pepg1jnhyFV7z9Povp41KKWEyPKJTwcTlFuU4DruUr 590/WFw5mMM/I2Cycf2rPF5OFApQgldiegF3jC/EMRYClAq573hQVDaJuXfKxlHY b/nBte5dDTO9djh7k3vdUnMgYfva57Vph7Hf4XcU+s1GHcIuRQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFDkFq+gVOxTmmVTELyyjw0R1efGgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w YzIxZDkwZS00ZTAxLTQ2M2QtYjU5NS1mMGJjNGU3ZmEzNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzBjMjFkOTBlLTRlMDEtNDYzZC1i NTk1LWYwYmM0ZTdmYTM3NC8wYzIxZDkwZS00ZTAxLTQ2M2QtYjU5NS1mMGJjNGU3 ZmEzNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBF8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGqeVwIMl3EvdVgWnAGH zcMtF6OabXbqZBgcOFYhJFvstvuEVLLnGL5YNNy9RNjElnFrRHfvf0/2Z2m5UjTE Fq2zTTGwIiEJYtZrUSGbTAoDAwg8YsGClzRfrtPUUvRzUsRC4pPITuTXHrRZghVr gjUKFtz2TcJD2Q8achrmd+tqRA83Symdcg0MBLdSnzOTWMk5HvrqVP7TrBxKenA8 V79Jp70NMIQzJHt66pvouR3uYh3Ets/MB7yenLru2Nc+UsdS6cDTsgQXdPT1C6Ug acGayJ9hljg7IPZJVafs755/eN8kM17TU2wwnA4Qiyyom6v1YFdLU/yExu5IeJcQ 1n8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:21 2025 by rpki-client