$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15b6454c-4a2c-44ae-923c-e11748f2404b.cer File: 15b6454c-4a2c-44ae-923c-e11748f2404b.cer (raw, json) Hash identifier: 1gkNn6j5W5FFLDmCofMJXJwIUnIoECKFCZ98A3Gy63Q= Subject key identifier: ED:09:A3:5C:9D:8F:2B:B5:A5:54:88:31:63:EB:8F:37:B5:FA:85:C6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BAD5ABF2F29311D45A7723B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15b6454c-4a2c-44ae-923c-e11748f2404b/15b6454c-4a2c-44ae-923c-e11748f2404b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15b6454c-4a2c-44ae-923c-e11748f2404b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 00:45:23 +0000 Certificate not after: Tue 01 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 33020 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:5a:bf:2f:29:31:1d:45:a7:72:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 29 00:45:23 2025 GMT Not After : Feb 1 01:45:23 2028 GMT Subject: CN=15b6454c-4a2c-44ae-923c-e11748f2404b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:3f:ba:3b:cc:16:03:05:63:1b:8e:f6:e1: 37:e9:63:13:a8:de:50:6e:e3:57:d5:6f:c7:f6:5f: 1e:93:a7:e1:e2:9e:b9:08:34:cb:11:98:8d:42:19: 39:43:0c:2b:d3:92:42:ba:b0:61:4a:8a:b1:b8:fd: 00:e3:98:d6:5e:17:48:3d:d1:59:8f:a5:31:fd:1d: 00:7a:bc:95:ac:af:e0:77:a4:54:31:f4:41:51:30: 74:3f:57:f0:3d:a6:6b:1d:6b:b7:1d:f3:dc:fe:a3: f9:4e:f0:92:e2:0b:d8:9c:8b:10:27:e7:ed:0e:90: 89:f6:36:fc:dc:24:f4:4c:bb:25:aa:79:c1:24:62: fc:1e:d6:12:9c:10:b1:3e:20:ad:aa:85:8c:8f:02: ae:ef:1a:fd:7a:31:9f:29:4f:2e:aa:b7:17:ca:9f: 86:64:22:9c:6d:c2:06:4b:c2:cf:76:43:7a:d3:18: 58:33:6f:6a:f6:80:cd:f6:58:a2:b1:02:ec:25:e0: 75:3d:d5:68:ad:83:78:46:d8:58:eb:d2:24:fc:3b: 6a:0b:5b:b8:9d:7d:60:f2:31:01:82:5c:d7:f9:0e: d0:13:f7:aa:43:d0:7f:2b:40:d4:41:25:56:cc:8c: 85:f1:7a:4e:43:09:fd:e2:86:ea:ec:c4:0f:37:86: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:09:A3:5C:9D:8F:2B:B5:A5:54:88:31:63:EB:8F:37:B5:FA:85:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15b6454c-4a2c-44ae-923c-e11748f2404b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15b6454c-4a2c-44ae-923c-e11748f2404b/15b6454c-4a2c-44ae-923c-e11748f2404b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 33020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ee:27:85:a2:2c:e1:c0:72:c9:27:dd:db:88:d0:11:cb:53: e5:f0:84:5e:33:3d:57:93:59:fa:1a:20:58:d9:d0:0c:b3:c9: 7b:6a:d3:4c:e7:6b:c5:13:f2:29:40:f8:6c:a7:e5:40:6c:0c: 15:68:d5:f4:27:b6:ff:3b:95:a8:6a:9f:91:cd:10:e9:b6:70: e3:16:32:9a:e3:d4:b6:fb:98:73:78:5d:96:29:5a:71:3c:28: 3b:44:98:5a:f0:38:ac:07:62:18:9d:5f:13:e6:f0:3d:5b:98: 63:d0:4b:9e:12:56:83:07:d5:fe:19:99:26:d8:dd:84:1a:3d: 9a:17:02:84:42:96:25:07:f3:d2:7a:09:6a:d9:36:53:8b:eb: 55:2d:0b:5a:66:0e:ce:7e:40:8c:ef:f9:92:ba:96:91:4e:23: 3b:27:b6:77:ec:62:be:b8:90:19:44:e6:75:2b:5f:3a:b3:00: 8e:ae:0d:e1:72:85:1b:6b:6c:01:a4:59:db:12:66:00:46:17: cd:d6:68:bd:9f:5f:72:fa:62:ca:5e:b2:03:41:5a:4d:52:05: 24:f3:4c:1e:7a:f1:63:17:e8:27:3c:70:a2:ba:80:d8:52:34: 56:bf:77:13:09:47:e3:37:80:b3:de:66:b7:d3:60:73:b5:7c: fe:f6:ba:39 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEutWr8vKTEdRadyO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyOTAwNDUyM1oXDTI4MDIwMTAxNDUyM1owLzEtMCsGA1UEAxMk MTViNjQ1NGMtNGEyYy00NGFlLTkyM2MtZTExNzQ4ZjI0MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR8/ujvMFgMFYxuO9uE36WMTqN5QbuNX1W/H 9l8ek6fh4p65CDTLEZiNQhk5Qwwr05JCurBhSoqxuP0A45jWXhdIPdFZj6Ux/R0A eryVrK/gd6RUMfRBUTB0P1fwPaZrHWu3HfPc/qP5TvCS4gvYnIsQJ+ftDpCJ9jb8 3CT0TLslqnnBJGL8HtYSnBCxPiCtqoWMjwKu7xr9ejGfKU8uqrcXyp+GZCKcbcIG S8LPdkN60xhYM29q9oDN9liisQLsJeB1PdVorYN4RthY69Ik/DtqC1u4nX1g8jEB glzX+Q7QE/eqQ9B/K0DUQSVWzIyF8XpOQwn94obq7MQPN4ZwcQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFO0Jo1ydjyu1pVSIMWPrjze1+oXGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x NWI2NDU0Yy00YTJjLTQ0YWUtOTIzYy1lMTE3NDhmMjQwNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzE1YjY0NTRjLTRhMmMtNDRhZS05 MjNjLWUxMTc0OGYyNDA0Yi8xNWI2NDU0Yy00YTJjLTQ0YWUtOTIzYy1lMTE3NDhm MjQwNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAID8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFvuJ4WiLOHAcskn3duI0BHLU+Xw hF4zPVeTWfoaIFjZ0AyzyXtq00zna8UT8ilA+Gyn5UBsDBVo1fQntv87lahqn5HN EOm2cOMWMprj1Lb7mHN4XZYpWnE8KDtEmFrwOKwHYhidXxPm8D1bmGPQS54SVoMH 1f4ZmSbY3YQaPZoXAoRCliUH89J6CWrZNlOL61UtC1pmDs5+QIzv+ZK6lpFOIzsn tnfsYr64kBlE5nUrXzqzAI6uDeFyhRtrbAGkWdsSZgBGF83WaL2fX3L6YspesgNB Wk1SBSTzTB568WMX6Cc8cKK6gNhSNFa/dxMJR+M3gLPeZrfTYHO1fP72ujk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:23 2025 by rpki-client