$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer File: 2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer (raw, json) Hash identifier: BVNjW14zsaZtAS7fKFt7CmPs87uZ+Ct9DrztWCRWO2k= Subject key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BA92AB5B27EE5E87C6B1B2CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 12:45:22 +0000 Certificate not after: Sun 30 Jan 2028 13:45:22 +0000 Subordinate resources: IP: 207.228.200.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:2a:b5:b2:7e:e5:e8:7c:6b:1b:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 27 12:45:22 2025 GMT Not After : Jan 30 13:45:22 2028 GMT Subject: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:1b:82:53:fc:63:43:9c:8f:e3:33:52:b7: 14:b6:f2:6b:54:cc:b6:b5:c6:a2:c0:3f:78:ec:95: 47:78:e4:c7:7a:4e:c1:17:0a:7e:39:89:cb:05:dd: 81:fe:67:0c:e3:58:cf:d1:04:21:0c:ac:9c:d2:dd: 4e:b2:1f:43:cb:76:02:20:98:6e:39:99:32:e9:51: 27:5b:bd:b4:7f:32:5b:9a:4a:25:d9:d8:fc:bd:c9: 4d:67:7b:1c:bd:b4:46:44:4c:9e:13:8e:87:5d:f9: 4d:4e:18:a8:d2:54:50:64:2a:f3:fa:0b:94:dc:31: b7:91:ae:af:ba:55:14:f6:4d:4e:66:b5:15:df:84: 19:e6:7f:14:05:fd:58:3b:29:41:1b:37:6e:8f:2c: 9f:d5:d4:a5:b5:7a:3b:00:a9:b4:92:bb:d7:13:ac: 44:bd:fe:c7:cf:99:c1:35:d0:ec:6f:8a:65:12:84: 74:bc:e6:a8:0e:be:c3:74:c6:80:77:74:a9:ef:d2: 39:0b:eb:51:e4:c7:15:d4:9e:4b:2b:e7:76:af:10: 17:5f:24:fa:94:07:5b:c9:85:5c:a9:4b:c1:f6:36: f7:f7:08:0a:b1:41:c5:6d:2a:21:23:7d:b3:c6:b1: 03:7d:13:8d:eb:0c:b0:6c:4d:8e:fd:eb:c4:5b:60: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 207.228.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f6:06:39:56:9e:7c:58:d1:fc:d7:c0:fd:f3:a5:d2:6c:b5: 37:39:46:06:02:16:55:34:5b:c9:83:a2:14:71:3d:ba:3e:d2: 46:f0:be:b5:fd:0f:e0:19:10:c7:44:8f:69:07:30:77:3c:a8: 27:5e:6d:81:5c:0d:4f:ff:7c:e7:24:7b:95:b3:23:16:74:06: 74:d5:f6:5d:6e:67:92:a9:ef:1a:66:71:80:02:28:89:8f:23: ce:78:25:ac:f9:8e:2b:b7:79:23:c3:e3:79:84:72:11:cd:16: 76:cc:bb:bc:92:e3:4c:79:c1:dc:e4:0a:8c:f1:36:8c:af:83: 77:10:01:d7:7f:11:a7:5c:81:e6:26:d3:b3:5a:b8:cb:af:fc: be:8d:0c:a9:ef:2a:dd:ae:00:07:37:e8:59:15:b3:b0:7d:5a: 00:43:2b:2b:ed:f2:6d:f4:33:20:e4:e5:b6:bc:ec:33:5d:7a: 55:67:91:ce:d0:b1:e7:f8:20:08:29:7b:6a:d2:94:a1:e3:44: e6:d7:67:85:d1:31:44:e9:94:fe:0b:c9:38:c9:43:86:6b:d0: d5:ae:ff:a4:59:7a:30:ae:37:d4:f9:8c:4c:30:3e:0b:c9:eb: 6c:3f:99:a0:3d:e5:ca:fa:e1:bb:b5:60:b7:bf:39:4a:ca:b9: e8:d1:a4:f8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEupKrWyfuXofGsbLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyNzEyNDUyMloXDTI4MDEzMDEzNDUyMlowLzEtMCsGA1UEAxMk MmMyYjExMjQtZjQzMy00NDQwLWI1MmMtOGYwYjU2NTBlMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUbglP8Y0Ocj+MzUrcUtvJrVMy2tcaiwD94 7JVHeOTHek7BFwp+OYnLBd2B/mcM41jP0QQhDKyc0t1Osh9Dy3YCIJhuOZky6VEn W720fzJbmkol2dj8vclNZ3scvbRGREyeE46HXflNThio0lRQZCrz+guU3DG3ka6v ulUU9k1OZrUV34QZ5n8UBf1YOylBGzdujyyf1dSltXo7AKm0krvXE6xEvf7Hz5nB NdDsb4plEoR0vOaoDr7DdMaAd3Sp79I5C+tR5McV1J5LK+d2rxAXXyT6lAdbyYVc qUvB9jb39wgKsUHFbSohI32zxrEDfRON6wywbE2O/evEW2BgKQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF/u4r9//l4yHymVbH3sXb4uIdDBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8y YzJiMTEyNC1mNDMzLTQ0NDAtYjUyYy04ZjBiNTY1MGUyYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzJjMmIxMTI0LWY0MzMtNDQ0MC1i NTJjLThmMGI1NjUwZTJiYi8yYzJiMTEyNC1mNDMzLTQ0NDAtYjUyYy04ZjBiNTY1 MGUyYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALP5MgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT/YGOVaefFjR/NfA/fOl 0my1NzlGBgIWVTRbyYOiFHE9uj7SRvC+tf0P4BkQx0SPaQcwdzyoJ15tgVwNT/98 5yR7lbMjFnQGdNX2XW5nkqnvGmZxgAIoiY8jznglrPmOK7d5I8PjeYRyEc0Wdsy7 vJLjTHnB3OQKjPE2jK+DdxAB138Rp1yB5ibTs1q4y6/8vo0Mqe8q3a4ABzfoWRWz sH1aAEMrK+3ybfQzIOTltrzsM116VWeRztCx5/ggCCl7atKUoeNE5tdnhdExROmU /gvJOMlDhmvQ1a7/pFl6MK431PmMTDA+C8nrbD+ZoD3lyvrhu7Vgt785Ssq56NGk +A== -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:49 2025 by rpki-client