$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer File: 1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer (raw, json) Hash identifier: pjV/nbb5yzvnUxR4S7TSqLdIFnNV/vLF7GrG0YkhMlE= Subject key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B2FB9FA8FF9C7D37BF9314A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Sep 2025 00:45:25 +0000 Certificate not after: Sat 18 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 21529 IP: 74.118.48.0/22 IP: 149.112.12.0/24 IP: 199.195.142.0/23 IP: 2606:1fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:b9:fa:8f:f9:c7:d3:7b:f9:31:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 14 00:45:25 2025 GMT Not After : Dec 18 01:45:25 2027 GMT Subject: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:26:b8:21:bd:a1:30:ec:a7:2c:c3:ef:8c: ba:51:f9:5f:2b:23:ef:fd:d5:b7:fa:e3:d9:78:37: 9d:68:d1:76:d9:56:52:89:d9:6e:75:57:cf:33:af: 5b:6f:00:bd:d3:b4:7a:38:6c:1c:f7:c4:e3:d0:6f: 97:95:2f:da:24:fa:0a:3a:5b:c7:5e:38:ba:91:55: 17:16:4b:61:90:34:66:64:16:e6:0b:f9:0a:f6:fb: 65:85:79:16:39:61:3a:7a:88:3d:dc:f2:07:36:67: 9e:52:83:b8:cb:dd:cd:d9:37:ee:3d:2f:fc:d3:5c: 28:8e:35:d8:ca:9f:bd:55:c5:b1:99:f0:24:31:5f: 7e:9a:89:d3:47:23:4e:de:0d:17:f6:80:1e:b9:92: 62:92:a5:64:4c:80:80:b8:4f:54:8a:96:37:80:3f: c2:33:85:cd:90:9d:63:23:6e:f3:09:db:f8:71:e9: a7:a0:fa:91:91:b8:89:b5:05:c9:54:24:41:09:71: 38:92:a1:59:d5:06:ef:28:ca:94:6c:4b:0c:e6:85: 18:ba:d8:a4:90:f7:dc:eb:36:de:24:5a:6e:1b:8b: e2:c6:ea:5c:54:e0:0e:2c:03:c4:b8:86:56:27:e5: 64:0f:5f:97:bb:ef:99:6f:d8:4c:a0:2a:99:75:ab: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 74.118.48.0/22 149.112.12.0/24 199.195.142.0/23 IPv6: 2606:1fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:88:3d:53:27:11:fe:cc:18:ba:d5:75:08:bf:ae:9a:3a:09: 22:cb:7d:a8:16:2c:f7:8d:45:11:f4:d8:65:a5:2d:25:bf:b3: 8d:81:a7:c6:d6:2a:f7:8a:9b:0f:c1:33:0f:5e:e8:49:b9:4a: 39:ab:93:2a:4f:9e:29:2d:98:15:ef:a9:9e:88:d2:5a:26:46: 40:b6:dd:e7:6a:62:83:63:68:a3:14:b3:9f:b1:db:d9:67:f6: 86:c1:8f:f0:39:07:f7:51:fe:30:47:73:95:e5:dd:88:52:b6: af:78:f1:69:25:8e:84:c7:bf:81:8e:e6:b3:56:9c:b2:09:a0: 1b:50:0a:6d:00:7a:58:16:12:1a:2b:f1:cb:36:b6:a4:d1:d7: d0:da:1a:63:17:fa:81:f0:37:e1:54:ca:04:fe:18:f6:26:80: 65:fa:97:11:50:9b:da:1e:f3:0d:62:97:99:d6:67:ec:61:cf: b9:34:7b:18:f7:ed:42:c5:cf:82:0c:66:ee:cb:7d:9e:05:19: 3d:81:4a:ca:5f:33:9c:90:3e:d5:d0:14:38:65:86:37:0d:c8: 42:6e:1f:68:db:da:6e:99:97:24:8c:d2:d1:b7:13:18:7d:23: c9:92:6f:58:20:fb:79:d0:fd:95:b2:4f:e1:e5:e0:5f:89:5b: 5f:3b:b9:7a -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEsvufqP+cfTe/kxSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNDAwNDUyNVoXDTI3MTIxODAxNDUyNVowLzEtMCsGA1UEAxMk MTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcxOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUUmuCG9oTDspyzD74y6UflfKyPv/dW3+uPZ eDedaNF22VZSidludVfPM69bbwC907R6OGwc98Tj0G+XlS/aJPoKOlvHXji6kVUX FkthkDRmZBbmC/kK9vtlhXkWOWE6eog93PIHNmeeUoO4y93N2TfuPS/801wojjXY yp+9VcWxmfAkMV9+monTRyNO3g0X9oAeuZJikqVkTICAuE9UipY3gD/CM4XNkJ1j I27zCdv4cemnoPqRkbiJtQXJVCRBCXE4kqFZ1QbvKMqUbEsM5oUYutikkPfc6zbe JFpuG4vixupcVOAOLAPEuIZWJ+VkD1+Xu++Zb9hMoCqZdasO4QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFDiLlTUsra887mjgKUWGDydI0NTBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x OTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzE5MzRmYTA1LWQ3YTMtNGI3ZC1i ZTVkLWRjODNkNGE3MTk5ZC8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRh NzE5OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJKdjADBACVcAwDBAHHw44wDQQCAAIwBwMFACYG H8AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVBkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZog9UycR/swY utV1CL+umjoJIst9qBYs941FEfTYZaUtJb+zjYGnxtYq94qbD8EzD17oSblKOauT Kk+eKS2YFe+pnojSWiZGQLbd52pig2NooxSzn7Hb2Wf2hsGP8DkH91H+MEdzleXd iFK2r3jxaSWOhMe/gY7ms1acsgmgG1AKbQB6WBYSGivxyza2pNHX0NoaYxf6gfA3 4VTKBP4Y9iaAZfqXEVCb2h7zDWKXmdZn7GHPuTR7GPftQsXPggxm7st9ngUZPYFK yl8znJA+1dAUOGWGNw3IQm4faNvabpmXJIzS0bcTGH0jyZJvWCD7edD9lbJP4eXg X4lbXzu5eg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:20 2025 by rpki-client