$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer File: 28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer (raw, json) Hash identifier: j4aRXVnfTJRiU8ksOTMSfdxak6r57awIsDIZdNOkmN8= Subject key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B74436AEED0BC7FA2D71F5500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 13:57:18 +0000 Certificate not after: Sat 07 Nov 2026 18:52:51 +0000 Subordinate resources: AS: 33228 AS: 402074 IP: 208.92.236.0/22 IP: 2602:f85e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:43:6a:ee:d0:bc:7f:a2:d7:1f:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 13:57:18 2025 GMT Not After : Nov 7 18:52:51 2026 GMT Subject: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:4b:50:07:e9:da:62:1e:25:7a:bc:1e:70: cd:30:23:15:e0:ab:94:36:00:22:27:fd:39:2b:29: a8:b4:7e:4f:fe:b1:b4:df:21:f7:f2:02:e8:02:38: c5:ae:3b:38:58:84:76:bf:15:24:61:60:eb:23:b3: 8c:c3:05:0a:e8:e2:0e:2f:5e:24:59:fa:02:4e:b6: 9c:60:1e:71:1c:f0:cd:fb:69:b8:cf:69:c1:b8:f1: c7:82:15:f0:ae:d5:eb:92:5b:01:47:c2:c0:65:73: f1:0d:7e:d4:14:45:07:c0:54:88:07:d0:69:ea:c1: 1e:80:0b:99:27:99:1c:6e:5d:f6:33:71:46:c3:5a: 7f:79:9c:2a:25:9f:13:82:89:e4:69:65:5b:0e:70: 70:bf:dc:19:d5:b8:b8:8a:bb:05:f4:65:02:3f:02: b1:05:b4:96:d0:8a:bb:51:d7:b2:4e:1a:5d:ca:08: e9:34:d7:9e:cc:37:44:2d:b5:37:8c:63:c7:7a:8a: 81:38:99:86:2b:12:eb:c3:17:0e:17:0f:32:0e:16: 0c:75:26:95:99:fd:08:09:13:34:a6:5d:e1:5a:5e: 07:9b:e3:e9:89:0a:2c:32:f5:13:12:d6:de:cb:45: 0b:3a:65:64:3a:71:b3:ba:cb:1a:1f:d3:c0:57:a8: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33228 402074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:40:cd:45:6e:10:ad:22:80:8f:84:87:10:50:c0:80:84:c4: 8c:5e:77:16:86:1b:ce:66:e4:47:f4:f4:06:91:3c:ea:43:78: c0:ed:2e:39:7c:bd:58:2b:0a:2b:e5:4b:9f:07:8c:70:d0:85: ff:55:d0:cc:56:f1:ca:f1:fd:18:c5:85:38:e7:19:16:36:ea: bc:ac:e2:c5:6d:bc:25:68:5b:38:08:e7:04:47:e7:ce:6d:70: 5c:bb:e4:29:8b:f9:fa:0d:ee:aa:fc:49:e3:38:ad:d9:db:34: a5:3b:ef:6d:1c:e4:69:1d:5f:6d:e5:46:77:c3:2a:8b:d0:e1: dd:b9:09:f3:db:b6:56:50:e6:cf:4f:16:83:57:2d:27:f0:de: c1:c7:84:14:ca:52:17:40:54:b7:bc:d6:be:af:53:15:75:38: 34:fb:f4:9f:06:fc:87:6a:d8:40:8e:c3:a0:e2:fe:79:12:d3: 1d:44:49:38:db:1c:50:db:ec:6c:b3:43:f1:d6:29:c6:f8:43: 6a:56:a3:36:11:87:44:75:ec:b5:d1:a5:25:eb:4b:a5:16:f6: 00:6b:f5:25:c2:fe:8c:f6:70:6f:c3:39:7a:53:0c:9f:cc:86: 76:56:b2:95:49:71:95:09:15:0b:e2:fb:e3:f7:f0:ae:1e:c6: df:92:c4:3e -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt0Q2ru0Lx/otcfVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODEzNTcxOFoXDTI2MTEwNzE4NTI1MVowLzEtMCsGA1UEAxMk MjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgyMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRlLUAfp2mIeJXq8HnDNMCMV4KuUNgAiJ/05 KymotH5P/rG03yH38gLoAjjFrjs4WIR2vxUkYWDrI7OMwwUK6OIOL14kWfoCTrac YB5xHPDN+2m4z2nBuPHHghXwrtXrklsBR8LAZXPxDX7UFEUHwFSIB9Bp6sEegAuZ J5kcbl32M3FGw1p/eZwqJZ8TgonkaWVbDnBwv9wZ1bi4irsF9GUCPwKxBbSW0Iq7 UdeyThpdygjpNNeezDdELbU3jGPHeoqBOJmGKxLrwxcOFw8yDhYMdSaVmf0ICRM0 pl3hWl4Hm+PpiQosMvUTEtbey0ULOmVkOnGzussaH9PAV6h8lwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHi9Lp4PbXHfoXpr9AIkA1CzGXx4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y OGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzI4YmMzYWYxLTg3ZTctNGFkNS1i YTljLTdlZWJkYmQ4MjBkYi8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJk ODIwZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALQXOwwDgQCAAIwCAMGBCYC+F4AMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwCBzAIDBiKaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFxAzUVuEK0igI+EhxBQ wICExIxedxaGG85m5Ef09AaRPOpDeMDtLjl8vVgrCivlS58HjHDQhf9V0MxW8crx /RjFhTjnGRY26rys4sVtvCVoWzgI5wRH585tcFy75CmL+foN7qr8SeM4rdnbNKU7 720c5GkdX23lRnfDKovQ4d25CfPbtlZQ5s9PFoNXLSfw3sHHhBTKUhdAVLe81r6v UxV1ODT79J8G/Idq2ECOw6Di/nkS0x1ESTjbHFDb7GyzQ/HWKcb4Q2pWozYRh0R1 7LXRpSXrS6UW9gBr9SXC/oz2cG/DOXpTDJ/MhnZWspVJcZUJFQvi++P38K4ext+S xD4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:12 2025 by rpki-client