$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer File: 3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer (raw, json) Hash identifier: AHI3y3Xxp5YSOCJ7Tfvhf/ZQrIHnuEu/KOh0218rvdA= Subject key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B97054650A1F516BE59A67B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 00:45:23 +0000 Certificate not after: Mon 24 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 205.236.245.0 -- 205.236.254.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:05:46:50:a1:f5:16:be:59:a6:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 21 00:45:23 2025 GMT Not After : Jan 24 01:45:23 2028 GMT Subject: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:81:80:63:18:dd:b5:6d:ca:13:cb:4c:13: 94:ee:8c:3c:d6:1c:ae:d7:b0:1d:f7:d6:3f:92:3d: da:f4:4d:e2:a5:aa:d6:45:fa:bf:2f:dc:59:13:a8: 69:59:f8:d5:a6:f1:9a:9d:23:2a:c2:bc:c0:01:f0: 52:3e:eb:d8:bc:a5:51:51:6c:48:f0:3c:49:b4:12: ea:31:53:17:f5:42:80:23:ef:64:f8:6b:c1:c5:c0: b9:86:e0:a2:40:9e:89:fe:62:a8:c4:a9:31:74:be: 00:ae:42:e8:79:f9:d5:4f:7c:a7:87:a3:07:13:e8: a5:bd:7e:63:27:43:44:68:99:4b:73:a2:68:89:78: ef:af:ca:0f:a9:9c:62:16:c8:f9:b4:34:f3:71:68: f9:7c:7d:60:85:60:e3:7a:b9:f4:1a:33:a1:a5:15: 19:a7:76:f6:1e:46:84:c3:2c:6e:d1:23:7f:21:8f: 3a:23:3f:9a:98:b4:90:c9:c5:3a:75:73:9a:f5:c3: b1:fd:de:75:0e:c6:9c:53:e5:c1:3d:71:1f:0b:19: 19:83:a5:61:09:f0:59:90:d2:f2:7e:98:94:29:b7: e8:33:93:cf:fe:a0:b2:49:e1:76:a1:6f:78:d0:71: c8:ea:71:f9:bb:b7:e8:55:00:43:90:2c:87:7d:33: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 205.236.245.0-205.236.254.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c6:46:ed:f5:03:11:46:11:c1:8f:85:bc:ef:db:c7:b0:90: b0:97:fe:62:c7:d3:b9:25:73:c7:29:bc:95:db:1b:c3:99:d4: b7:c3:ec:43:da:3a:c0:4f:76:7e:25:4b:b7:5e:be:6a:dd:96: 4f:07:37:d0:f0:b9:7e:aa:85:02:8e:4b:47:e5:d9:03:9f:88: d4:44:bc:e7:4b:2a:85:75:37:fa:3c:c8:56:46:01:46:d7:0b: fb:b3:79:a4:38:88:10:3b:41:72:16:e8:72:c9:d4:ca:60:f5: 01:ba:78:26:30:11:4a:34:78:0b:d5:91:ac:ae:a0:b5:ab:a4: 10:27:bf:cc:64:7e:53:41:69:e3:1a:af:5e:b8:18:8c:c4:69: e8:06:ad:40:99:20:c9:80:7f:b9:ee:4f:1b:fb:07:bd:4d:8d: a0:76:c3:12:6b:43:17:5f:a2:13:c9:98:25:55:0f:4a:ff:ac: 30:16:00:12:fe:be:36:99:93:a1:fd:8b:9e:6b:43:d6:59:93: c7:e8:02:54:a2:65:2e:3c:a4:24:d7:0d:2e:0a:44:76:27:bc: 4d:44:4b:da:8c:f1:8d:ee:8c:fa:72:fb:2b:5d:29:66:21:41: c5:3c:d4:67:99:3f:d2:6a:02:9a:c4:64:f7:51:6e:82:d1:44: b4:95:d3:82 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEuXBUZQofUWvlmme0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMTAwNDUyM1oXDTI4MDEyNDAxNDUyM1owLzEtMCsGA1UEAxMk M2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCKBgGMY3bVtyhPLTBOU7ow81hyu17Ad99Y/ kj3a9E3iparWRfq/L9xZE6hpWfjVpvGanSMqwrzAAfBSPuvYvKVRUWxI8DxJtBLq MVMX9UKAI+9k+GvBxcC5huCiQJ6J/mKoxKkxdL4ArkLoefnVT3ynh6MHE+ilvX5j J0NEaJlLc6JoiXjvr8oPqZxiFsj5tDTzcWj5fH1ghWDjern0GjOhpRUZp3b2HkaE wyxu0SN/IY86Iz+amLSQycU6dXOa9cOx/d51DsacU+XBPXEfCxkZg6VhCfBZkNLy fpiUKbfoM5PP/qCySeF2oW940HHI6nH5u7foVQBDkCyHfTN4vwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFIB5vbHxVi5tJDztfowXEC+mMCvJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z ZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNkMDIyZTRkLWEyZWMtNGQxNC05 MzQyLWE1MDNlYzYzY2FjMS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2 M2NhYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAM3s9QMEAM3s/jBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8xkbt9QMR RhHBj4W879vHsJCwl/5ix9O5JXPHKbyV2xvDmdS3w+xD2jrAT3Z+JUu3Xr5q3ZZP BzfQ8Ll+qoUCjktH5dkDn4jURLznSyqFdTf6PMhWRgFG1wv7s3mkOIgQO0FyFuhy ydTKYPUBungmMBFKNHgL1ZGsrqC1q6QQJ7/MZH5TQWnjGq9euBiMxGnoBq1AmSDJ gH+57k8b+we9TY2gdsMSa0MXX6ITyZglVQ9K/6wwFgAS/r42mZOh/Yuea0PWWZPH 6AJUomUuPKQk1w0uCkR2J7xNREvajPGN7oz6cvsrXSlmIUHFPNRnmT/SagKaxGT3 UW6C0US0ldOC -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:30 2025 by rpki-client