$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer File: 3133c6b3-ff40-49eb-bad3-65967c11dca0.cer (raw, json) Hash identifier: U2U6kGpgrjXeVFBVK8W4Btsg0gyZ7zLFs0e1UUNuhGM= Subject key identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B784FBE53DB61E882B36D5108 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 00:45:22 +0000 Certificate not after: Thu 13 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 39945 IP: 208.67.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:4f:be:53:db:61:e8:82:b3:6d:51:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 10 00:45:22 2025 GMT Not After : Jan 13 01:45:22 2028 GMT Subject: CN=3133c6b3-ff40-49eb-bad3-65967c11dca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:57:fb:f7:c9:ac:a7:ee:53:42:72:b1:a8: 36:88:c6:96:0b:c5:23:81:5b:10:06:ba:32:ea:58: 0e:ce:b2:9c:85:70:0d:5f:75:3a:4d:bd:cf:b8:c3: fd:63:e7:14:cf:56:6a:b3:65:ed:36:1c:e0:b6:2b: ae:95:9d:0a:23:47:56:2e:dd:11:da:93:1e:b0:71: c9:17:fe:be:d3:ef:af:87:11:5a:40:fc:01:a5:4c: 86:5b:78:47:f4:59:c7:8d:78:e6:de:2e:10:ff:df: 7b:b7:f3:43:9d:53:d5:53:97:a5:5a:05:2e:3c:06: 9c:b3:c8:17:fd:fd:22:7f:ff:b3:4e:67:ae:47:23: 16:03:cd:ff:02:91:1e:77:f3:12:ef:a3:0d:fe:e1: 51:a5:35:0b:6d:fe:42:85:96:71:68:c8:1b:5f:fe: ee:48:bb:2e:c0:77:cd:7c:77:18:88:f1:9d:2b:2b: 7d:de:f9:8a:03:76:2b:36:6e:3b:0d:d1:f0:0d:c5: 34:ee:e6:76:b2:49:5d:bc:79:4d:bc:a1:fa:fc:0f: c6:94:2b:6c:12:9c:31:9a:70:92:17:2f:30:f2:03: 1a:1e:e7:84:88:8d:a4:4a:93:b4:06:fe:4d:63:9b: 43:fd:ab:b5:4e:e1:5e:15:bb:b8:76:09:c6:93:66: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.67.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:05:88:fc:71:cb:c9:65:ff:d1:c4:21:2a:45:ef:f6:ea:24: 47:ae:04:81:09:b4:ad:02:9c:fd:96:4a:e2:c0:4f:1b:f2:14: 2d:59:1a:e5:d7:e7:c6:0e:42:70:0a:5c:29:83:f2:79:9e:25: 3d:40:ee:72:47:3b:b1:e8:da:03:13:27:32:bf:d5:ec:12:e1: 17:21:27:cb:17:1d:2c:8d:08:60:3f:20:d3:58:26:98:47:21: de:83:61:ed:60:f3:47:81:2b:c8:49:f0:4d:f4:2d:ee:b7:77: e8:19:d0:47:df:31:93:42:49:a9:81:55:74:45:d5:52:4a:3a: 12:bb:1c:ff:c7:f2:e0:09:7e:4f:d7:bd:4d:c3:ee:ac:fc:a3: f5:f4:97:c6:e8:35:f0:10:a6:21:60:ed:ba:59:f1:dd:e4:72: 72:0f:8c:bf:09:b2:20:4d:49:aa:94:9a:22:b7:f9:87:07:17: 5f:d4:72:81:2a:ef:0a:70:b0:ef:a8:18:0e:e4:36:14:65:b9: cb:fc:f0:c9:39:81:70:6b:ae:52:e4:15:c9:32:0a:68:c5:41: 41:e0:2a:5d:2a:39:c4:4c:2c:c0:0f:6e:fd:c0:ec:d5:7e:2e: a0:ed:c0:16:cd:f1:c9:09:bf:f4:d8:9a:d5:05:b8:c3:cc:de: 2b:5b:24:dc -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEt4T75T22HogrNtUQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxMDAwNDUyMloXDTI4MDExMzAxNDUyMlowLzEtMCsGA1UEAxMk MzEzM2M2YjMtZmY0MC00OWViLWJhZDMtNjU5NjdjMTFkY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11X+/fJrKfuU0Jysag2iMaWC8UjgVsQBroy 6lgOzrKchXANX3U6Tb3PuMP9Y+cUz1Zqs2XtNhzgtiuulZ0KI0dWLt0R2pMesHHJ F/6+0++vhxFaQPwBpUyGW3hH9FnHjXjm3i4Q/997t/NDnVPVU5elWgUuPAacs8gX /f0if/+zTmeuRyMWA83/ApEed/MS76MN/uFRpTULbf5ChZZxaMgbX/7uSLsuwHfN fHcYiPGdKyt93vmKA3YrNm47DdHwDcU07uZ2skldvHlNvKH6/A/GlCtsEpwxmnCS Fy8w8gMaHueEiI2kSpO0Bv5NY5tD/au1TuFeFbu4dgnGk2aLdQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFPov/1mQf/WVjEKKEUYUCEDhEQWAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z MTMzYzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2N2MxMWRjYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMxMzNjNmIzLWZmNDAtNDllYi1i YWQzLTY1OTY3YzExZGNhMC8zMTMzYzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2N2Mx MWRjYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQQ+QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJwJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGoFiPxxy8ll/9HEISpF7/bqJEeuBIEJtK0CnP2WSuLATxvy FC1ZGuXX58YOQnAKXCmD8nmeJT1A7nJHO7Ho2gMTJzK/1ewS4RchJ8sXHSyNCGA/ INNYJphHId6DYe1g80eBK8hJ8E30Le63d+gZ0EffMZNCSamBVXRF1VJKOhK7HP/H 8uAJfk/XvU3D7qz8o/X0l8boNfAQpiFg7bpZ8d3kcnIPjL8JsiBNSaqUmiK3+YcH F1/UcoEq7wpwsO+oGA7kNhRlucv88Mk5gXBrrlLkFckyCmjFQUHgKl0qOcRMLMAP bv3A7NV+LqDtwBbN8ckJv/TYmtUFuMPM3itbJNw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:19:46 2025 by rpki-client