$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer File: 0c2f5a4c-917e-4b90-8022-391847ae5699.cer (raw, json) Hash identifier: WyzahaLRwVvueeNvWLoe7q6fwUofHS9kLFOdfQ93sPM= Subject key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC2D94A1D0E0871AA8E854520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 00:45:23 +0000 Certificate not after: Tue 09 Nov 2027 01:45:23 +0000 Subordinate resources: IP: 204.235.240.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:d9:4a:1d:0e:08:71:aa:8e:85:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 6 00:45:23 2025 GMT Not After : Nov 9 01:45:23 2027 GMT Subject: CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:6a:1f:96:37:4e:92:f5:95:88:bc:bf:ab: 67:e1:72:a6:a8:e7:4a:d0:b8:b5:96:65:1b:ed:9b: 9b:01:92:8d:55:48:de:d9:e4:72:a7:a4:3c:0c:6c: 8c:8d:c4:11:d4:9a:c3:f7:7e:4a:0f:7b:64:29:a6: 1d:f2:e1:f6:05:f4:99:a1:68:b9:38:f2:df:60:17: 53:1f:cc:42:1d:eb:25:4a:d2:c7:74:57:ec:e1:ba: 02:32:f3:2d:c5:9b:d0:cc:45:68:e3:73:0b:9f:8e: 4b:4a:ac:4e:dd:b5:ec:f2:a7:89:d7:c3:ee:9d:96: d7:e7:8a:81:e1:ed:32:cf:33:71:39:7d:21:92:7c: 37:af:92:2c:78:61:f0:2d:fc:85:99:7a:17:f6:97: 91:9f:44:01:37:89:ff:9f:4d:b4:3d:7e:21:0c:41: 8a:57:e9:de:e6:20:80:81:b5:56:54:62:ef:32:cf: 6e:74:66:32:e8:63:5a:61:50:10:bf:50:f6:14:17: ea:73:f2:59:0a:4a:ff:19:f3:26:38:f4:80:f0:89: 68:0c:ea:24:99:89:b5:26:6e:f2:0d:93:b4:97:fa: e0:74:c8:45:7b:5a:2c:3a:29:e1:66:5a:1a:b6:b3: e3:10:17:71:a3:92:dd:c7:a5:30:f1:f8:c2:1c:93: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.235.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:19:ec:df:a1:5d:ec:70:02:77:e1:f8:85:0f:0a:5f:72:47: 35:13:8f:ae:f5:2b:74:16:f9:7d:65:ca:e4:5c:ca:e7:d2:95: c8:ea:9d:88:63:73:8b:a8:ef:19:3d:4b:80:2b:f7:43:ad:8b: 9b:e6:90:10:45:35:fc:18:56:92:3a:1c:36:ed:a3:59:83:af: 6b:9a:6e:2b:13:0c:da:f5:68:35:28:6a:36:90:88:08:0f:15: f2:29:a4:77:5f:8a:b3:60:9f:c4:1f:da:1a:03:ba:14:a2:93: 63:51:d3:10:26:d5:ca:8a:83:11:26:70:40:f1:67:5d:94:e2: 55:56:de:9c:5b:2f:a3:83:45:85:29:15:42:15:7b:54:7b:cb: 09:28:da:22:29:30:b4:02:df:53:b8:a9:39:6a:6b:fc:ff:e9: ca:39:e3:61:e4:eb:9e:a1:34:a1:5a:2d:d5:cd:08:42:a8:91: ed:65:64:2b:94:46:51:5f:39:a8:a1:25:99:2f:b9:42:54:57: e0:5a:85:4f:6a:d3:72:4c:0c:97:1b:14:e1:f3:d6:1a:95:f0: cb:cb:fa:fc:8f:28:c0:4c:c1:dd:2a:ed:15:7b:3b:8d:7b:be: c1:be:66:d4:03:30:8e:53:3d:9c:4f:64:28:98:48:e1:1a:3d: 64:a9:7b:f6 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErC2UodDghxqo6FRSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNjAwNDUyM1oXDTI3MTEwOTAxNDUyM1owLzEtMCsGA1UEAxMk MGMyZjVhNGMtOTE3ZS00YjkwLTgwMjItMzkxODQ3YWU1Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DpqH5Y3TpL1lYi8v6tn4XKmqOdK0Li1lmUb 7ZubAZKNVUje2eRyp6Q8DGyMjcQR1JrD935KD3tkKaYd8uH2BfSZoWi5OPLfYBdT H8xCHeslStLHdFfs4boCMvMtxZvQzEVo43MLn45LSqxO3bXs8qeJ18PunZbX54qB 4e0yzzNxOX0hknw3r5IseGHwLfyFmXoX9peRn0QBN4n/n020PX4hDEGKV+ne5iCA gbVWVGLvMs9udGYy6GNaYVAQv1D2FBfqc/JZCkr/GfMmOPSA8IloDOokmYm1Jm7y DZO0l/rgdMhFe1osOinhZloatrPjEBdxo5Ldx6Uw8fjCHJOl7wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCp30wTw6SiMnnWHDOP8X90UC3enMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w YzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdhZTU2OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzBjMmY1YTRjLTkxN2UtNGI5MC04 MDIyLTM5MTg0N2FlNTY5OS8wYzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdh ZTU2OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALM6/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJBns36Fd7HACd+H4hQ8K X3JHNROPrvUrdBb5fWXK5FzK59KVyOqdiGNzi6jvGT1LgCv3Q62Lm+aQEEU1/BhW kjocNu2jWYOva5puKxMM2vVoNShqNpCICA8V8imkd1+Ks2CfxB/aGgO6FKKTY1HT ECbVyoqDESZwQPFnXZTiVVbenFsvo4NFhSkVQhV7VHvLCSjaIikwtALfU7ipOWpr /P/pyjnjYeTrnqE0oVot1c0IQqiR7WVkK5RGUV85qKElmS+5QlRX4FqFT2rTckwM lxsU4fPWGpXwy8v6/I8owEzB3SrtFXs7jXu+wb5m1AMwjlM9nE9kKJhI4Ro9ZKl7 9g== -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:03 2025 by rpki-client