$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer File: 2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer (raw, json) Hash identifier: bu6K48OrlBXGvDuWkA3BU7IRKiyQcGiihMS5HYYHmZs= Subject key identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B99CFF5C392EB25A7DF67AD48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 208.68.28.0/22 IP: 208.75.160.0/21 IP: 2607:f088::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:c3:92:eb:25:a7:df:67:ad:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:97:06:9c:00:3c:9d:bf:ad:16:9d:8f:0b: ce:24:4a:04:7c:d1:80:96:e1:14:2a:30:8b:7c:81: 1b:a8:a9:cc:27:67:3a:55:dc:82:f5:05:73:9a:93: ca:bc:95:76:5b:fa:9a:cc:3f:d4:9f:7a:92:d4:c2: d3:7a:c4:37:12:40:5b:d5:e1:09:a6:18:18:09:fa: b3:af:90:0b:fa:e2:d8:b2:ce:65:f8:63:8b:ed:23: 68:8e:e9:07:f7:d9:25:6d:6c:56:17:ff:62:c3:16: c2:00:ef:a1:10:8c:fd:44:25:f9:bb:02:71:3e:32: 49:df:2f:c9:28:49:a6:f5:21:a5:df:45:15:51:04: f3:04:49:44:0f:0f:ec:7e:d6:ed:9c:a1:94:80:ca: 65:73:b0:7a:bc:f2:20:2c:50:91:2e:9d:c3:cf:67: f9:db:06:27:b3:4b:70:2f:a6:00:bb:81:64:0b:46: 44:76:6b:cd:df:09:83:bc:09:ea:83:50:b8:9c:eb: 46:c3:8d:6b:a5:4f:25:4c:69:eb:94:ea:9b:63:af: bb:ee:ea:02:ae:a6:3b:29:32:f2:a5:6e:0c:f2:d3: 55:59:7b:74:97:4f:52:dc:34:46:89:10:30:02:45: c5:f6:61:d7:bf:f1:f2:59:be:f6:41:10:48:2e:ae: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.68.28.0/22 208.75.160.0/21 IPv6: 2607:f088::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e5:84:b4:b3:17:b9:a4:2d:ca:dd:3d:8d:68:38:f5:9e:12: 33:34:e2:b7:ff:43:a1:bf:40:5a:cb:53:66:f3:ae:5f:88:93: e3:47:50:91:4a:52:3e:16:be:31:8e:fe:a0:a1:6e:c1:83:ff: 79:d1:1d:1d:c8:70:d3:a9:0a:29:8a:6d:b5:24:a0:97:32:87: fa:69:98:48:d5:56:d2:bb:37:4c:70:8e:3c:c4:f2:4d:15:8a: bd:c7:c8:da:69:ac:58:28:46:48:61:6f:be:1c:20:e8:11:b8: 64:5c:2b:5b:ac:ab:ec:76:ce:4f:4b:83:f6:89:57:06:6b:94: a6:57:59:b9:c7:d6:83:be:2b:2d:ae:b8:97:33:b3:e1:9a:eb: 65:2b:45:3f:03:ca:9b:4e:43:23:2a:c3:a7:03:28:60:97:dc: a1:05:b6:56:73:09:a7:50:9e:87:7b:0e:1c:28:a2:63:68:c7: 66:04:a5:91:c9:e8:4b:1f:09:a1:72:57:82:0f:bd:72:d4:fc: 1a:22:2d:c7:c0:bc:2f:a2:95:5d:f5:6c:c7:2d:49:a0:90:72: cb:ff:f1:7c:e4:d0:99:e6:0a:66:7a:7e:9e:7c:da:6b:98:6c: 79:ef:5b:7e:32:07:1d:c1:f7:37:b1:52:25:f1:3b:3a:4a:c2: 17:de:64:9b -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEuZz/XDkuslp99nrUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk MjY4NmM1ZjItMzVjOC00MjgyLWFlOWYtNThhMGJmOTliZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBGXBpwAPJ2/rRadjwvOJEoEfNGAluEUKjCL fIEbqKnMJ2c6VdyC9QVzmpPKvJV2W/qazD/Un3qS1MLTesQ3EkBb1eEJphgYCfqz r5AL+uLYss5l+GOL7SNojukH99klbWxWF/9iwxbCAO+hEIz9RCX5uwJxPjJJ3y/J KEmm9SGl30UVUQTzBElEDw/sftbtnKGUgMplc7B6vPIgLFCRLp3Dz2f52wYns0tw L6YAu4FkC0ZEdmvN3wmDvAnqg1C4nOtGw41rpU8lTGnrlOqbY6+77uoCrqY7KTLy pW4M8tNVWXt0l09S3DRGiRAwAkXF9mHXv/HyWb72QRBILq7E/wIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFP12v+xhN5GaU8kiO3R4T97CNs+BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y Njg2YzVmMi0zNWM4LTQyODItYWU5Zi01OGEwYmY5OWJlNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzI2ODZjNWYyLTM1YzgtNDI4Mi1h ZTlmLTU4YTBiZjk5YmU2OC8yNjg2YzVmMi0zNWM4LTQyODItYWU5Zi01OGEwYmY5 OWJlNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALQRBwDBAPQS6AwDQQCAAIwBwMFACYH8IgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGeWEtLMXuaQtyt09jWg49Z4SMzTit/9Dob9AWstTZvOuX4iT40dQkUpS Pha+MY7+oKFuwYP/edEdHchw06kKKYpttSSglzKH+mmYSNVW0rs3THCOPMTyTRWK vcfI2mmsWChGSGFvvhwg6BG4ZFwrW6yr7HbOT0uD9olXBmuUpldZucfWg74rLa64 lzOz4ZrrZStFPwPKm05DIyrDpwMoYJfcoQW2VnMJp1Ceh3sOHCiiY2jHZgSlkcno Sx8JoXJXgg+9ctT8GiItx8C8L6KVXfVsxy1JoJByy//xfOTQmeYKZnp+nnzaa5hs ee9bfjIHHcH3N7FSJfE7OkrCF95kmw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:42:57 2025 by rpki-client