$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer File: 20345bca-b793-4f14-a066-8653ac933903.cer (raw, json) Hash identifier: KxYsoP7NwFo69aslcfRApnie9C/1XsKZvMMapcS8Ueo= Subject key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B56CF8DA1B1ECF1A48C0BD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Sep 2025 00:45:24 +0000 Certificate not after: Sat 01 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 33144 IP: 206.41.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:cf:8d:a1:b1:ec:f1:a4:8c:0b:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 28 00:45:24 2025 GMT Not After : Jan 1 01:45:24 2028 GMT Subject: CN=20345bca-b793-4f14-a066-8653ac933903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:91:49:9f:5e:cf:5b:7e:1b:22:d7:18:d3: 0f:cc:f1:3c:b8:e9:68:f8:72:d9:df:2b:e9:8b:c0: f0:8f:71:6d:e3:5c:08:30:3b:b1:90:19:62:87:90: 6d:7f:07:e7:b8:7b:5d:44:0d:53:fa:3d:26:95:5b: 82:6a:4f:b4:32:88:6d:e9:a2:b8:47:a3:86:be:e4: c2:03:4d:fd:03:1b:26:9e:f0:02:dc:32:20:e9:78: 04:9b:f5:50:7d:79:bb:8a:f0:d7:da:78:b9:be:72: be:23:7d:d7:87:fe:59:25:49:56:6b:c5:91:b1:b6: 2a:d7:05:db:6c:52:73:3d:7a:78:18:08:ed:60:6b: 36:4c:7c:32:a2:ce:39:3d:4a:17:ca:47:1a:52:ee: fe:b8:6a:0b:3d:01:7d:8b:9b:97:99:f4:1a:05:7e: 0c:47:80:1c:34:75:e7:77:c2:8e:9d:68:ab:8c:43: 79:52:0e:6c:2d:37:fa:1f:e7:70:61:ce:c9:4f:cd: 7a:2a:e8:3b:b4:d6:c3:2a:05:4f:6c:6e:6c:40:3b: 11:86:e0:06:b3:1c:86:01:57:c6:2f:ce:9d:f4:9b: 5f:57:f9:dc:f9:c7:38:77:9a:db:00:a5:b6:dd:ea: 65:b4:48:9f:0a:7f:8e:3c:05:c4:e8:25:52:ee:6e: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 206.41.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33144 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3a:2c:39:77:66:b8:1b:9b:1a:f0:37:95:3b:0d:22:c5:6a: 2f:7a:45:1f:87:44:60:92:69:c8:f1:c6:0d:c3:38:ab:08:97: 71:9f:b8:c0:14:d2:13:95:14:76:9b:1c:b9:79:04:a3:ef:1b: e0:77:73:6e:8f:e6:67:0d:43:e6:72:bf:a7:ea:d2:b5:43:bd: 7c:fd:84:04:58:a3:46:70:f2:6a:fa:5e:83:7a:cf:21:93:6b: c3:a8:58:a6:2e:94:2d:ac:12:a8:9f:0d:58:f7:49:ed:fb:ed: 1f:09:d4:47:0d:b5:6e:73:25:04:82:78:c4:31:16:f6:16:ea: a5:1a:85:c6:03:16:54:83:9d:2a:fb:c7:47:cb:ee:95:74:6e: d0:2b:0c:16:58:f1:30:d8:8c:60:9e:5d:49:2e:be:45:3e:c0: b5:00:4d:2c:7a:dd:2a:45:2d:b9:97:15:55:a2:2a:bd:8a:61: b0:18:ff:f6:4c:b7:9f:ae:10:cf:88:4c:a0:33:15:89:1b:13: f2:58:54:52:49:56:d8:12:20:ec:98:63:25:46:a3:f1:e9:b5: 68:41:e7:22:b5:7c:92:1f:2c:72:ce:4b:1d:fa:0c:21:af:fd: fe:02:bb:f7:be:f7:3c:d5:57:60:1f:68:19:61:0d:49:ff:bf: 8f:8a:cf:07 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtWz42hsezxpIwL0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkyODAwNDUyNFoXDTI4MDEwMTAxNDUyNFowLzEtMCsGA1UEAxMk MjAzNDViY2EtYjc5My00ZjE0LWEwNjYtODY1M2FjOTMzOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth2RSZ9ez1t+GyLXGNMPzPE8uOlo+HLZ3yvp i8Dwj3Ft41wIMDuxkBlih5BtfwfnuHtdRA1T+j0mlVuCak+0Moht6aK4R6OGvuTC A039AxsmnvAC3DIg6XgEm/VQfXm7ivDX2ni5vnK+I33Xh/5ZJUlWa8WRsbYq1wXb bFJzPXp4GAjtYGs2THwyos45PUoXykcaUu7+uGoLPQF9i5uXmfQaBX4MR4AcNHXn d8KOnWirjEN5Ug5sLTf6H+dwYc7JT816Kug7tNbDKgVPbG5sQDsRhuAGsxyGAVfG L86d9JtfV/nc+cc4d5rbAKW23epltEifCn+OPAXE6CVS7m7n/QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBBrIxeniKefq7T05TODuYufu860MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y MDM0NWJjYS1iNzkzLTRmMTQtYTA2Ni04NjUzYWM5MzM5MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzIwMzQ1YmNhLWI3OTMtNGYxNC1h MDY2LTg2NTNhYzkzMzkwMy8yMDM0NWJjYS1iNzkzLTRmMTQtYTA2Ni04NjUzYWM5 MzM5MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATOKTAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIF4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGE6LDl3ZrgbmxrwN5U7DSLFai96RR+HRGCSacjxxg3DOKsI l3GfuMAU0hOVFHabHLl5BKPvG+B3c26P5mcNQ+Zyv6fq0rVDvXz9hARYo0Zw8mr6 XoN6zyGTa8OoWKYulC2sEqifDVj3Se377R8J1EcNtW5zJQSCeMQxFvYW6qUahcYD FlSDnSr7x0fL7pV0btArDBZY8TDYjGCeXUkuvkU+wLUATSx63SpFLbmXFVWiKr2K YbAY//ZMt5+uEM+ITKAzFYkbE/JYVFJJVtgSIOyYYyVGo/HptWhB5yK1fJIfLHLO Sx36DCGv/f4Cu/e+9zzVV2AfaBlhDUn/v4+Kzwc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:00 2025 by rpki-client