$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer File: 4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer (raw, json) Hash identifier: WOHlYzizij78LD1qCABlEBTeDGAQO+Dt5gHiqbCMcMI= Subject key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABA793B784744478043263780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Aug 2025 00:45:23 +0000 Certificate not after: Sat 06 Nov 2027 00:45:23 +0000 Subordinate resources: IP: 167.253.16.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:79:3b:78:47:44:47:80:43:26:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 3 00:45:23 2025 GMT Not After : Nov 6 00:45:23 2027 GMT Subject: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:82:7e:73:62:d4:b6:7f:71:d5:ca:17:89: f6:90:83:0a:1e:85:df:66:5d:50:84:9f:8d:3e:e2: 66:48:fc:60:60:6c:4e:1c:c1:e0:80:6b:9f:d7:c3: df:e7:f6:9f:7c:ee:79:d0:5d:e3:ae:a4:2f:6e:ef: 87:c9:1c:31:53:f6:56:44:71:0a:9a:7e:54:6b:60: f0:0b:2c:8b:ae:50:7c:61:32:3f:15:06:42:7e:83: 38:ac:b2:9c:40:05:a0:1d:77:c2:05:fd:74:0f:9c: 83:f1:fc:88:4d:a7:3e:73:f6:44:f1:d9:72:9c:ea: 99:5b:45:fd:78:a2:b0:11:1d:dd:e2:02:08:96:74: c8:46:d8:36:b9:ce:be:d0:67:5a:0a:fd:ea:70:a9: 29:3a:a9:fa:0e:8e:b5:73:c3:4a:fd:82:dd:f8:da: df:68:34:5c:57:40:bd:96:c3:ae:a8:33:50:96:da: bc:fe:af:7b:b9:06:54:32:e2:7f:03:b1:07:6d:b0: 17:0b:70:68:1a:a8:32:68:95:27:45:44:af:f8:61: d5:f0:c7:19:81:74:c6:51:28:92:4b:18:52:38:c6: 03:4a:09:91:4d:68:0a:ba:0d:87:2b:44:95:b3:79: b7:83:b3:6b:70:07:98:a1:c2:9d:2e:c6:97:88:2c: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:87:b0:b8:70:25:d6:a6:39:f3:11:3f:7d:16:c3:3f:46:83: fb:0a:cc:d5:49:af:bd:7e:ee:5a:70:ea:e6:af:34:d3:05:42: 57:45:29:22:9b:ae:4e:d7:7a:47:a8:26:47:e3:05:dd:15:d3: 72:d7:a5:7b:81:f5:55:55:80:ae:f6:b9:9f:8e:17:e0:20:c1: 5d:59:0b:de:3a:0b:63:6f:49:35:af:74:77:7a:68:6c:77:80: 23:17:a9:f1:64:01:de:50:f4:99:73:fd:8c:96:ca:e8:22:4b: 5a:9f:1c:f9:ad:2d:d3:b7:50:df:33:20:8f:b4:4d:c4:0b:c8: 75:48:38:ef:d6:28:f5:07:50:2f:f4:4f:bf:48:f7:bf:e7:38: ef:c7:01:3f:1c:2e:51:a1:71:5f:29:53:59:02:4a:21:e6:5f: 52:aa:8c:71:6e:0f:44:4e:af:f1:8f:f0:33:61:18:33:85:a9: 07:64:8d:f5:f7:c9:56:0f:1b:90:fb:24:be:9b:5a:cb:72:18: 6f:32:94:6a:5b:85:a7:57:b4:b8:f4:3b:f0:93:73:2f:4c:a9: 53:a5:cb:8e:7c:a0:52:cd:c6:84:f6:ac:a5:d0:ba:e9:f0:7b: 9c:e7:e4:a0:0a:5d:53:67:48:b3:c1:7c:a1:f1:ec:aa:86:dc: 2a:54:5c:23 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEq6eTt4R0RHgEMmN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwMzAwNDUyM1oXDTI3MTEwNjAwNDUyM1owLzEtMCsGA1UEAxMk NGRmYzUxZDYtN2UxZS00OGM0LWFjOWItZGJjMDAyNTIwM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkmCfnNi1LZ/cdXKF4n2kIMKHoXfZl1QhJ+N PuJmSPxgYGxOHMHggGuf18Pf5/affO550F3jrqQvbu+HyRwxU/ZWRHEKmn5Ua2Dw CyyLrlB8YTI/FQZCfoM4rLKcQAWgHXfCBf10D5yD8fyITac+c/ZE8dlynOqZW0X9 eKKwER3d4gIIlnTIRtg2uc6+0GdaCv3qcKkpOqn6Do61c8NK/YLd+NrfaDRcV0C9 lsOuqDNQltq8/q97uQZUMuJ/A7EHbbAXC3BoGqgyaJUnRUSv+GHV8McZgXTGUSiS SxhSOMYDSgmRTWgKug2HK0SVs3m3g7NrcAeYocKdLsaXiCzdLwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFD3Mku2qiN4aZEQV9uxBrg7/XYRpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1MjAzYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRkZmM1MWQ2LTdlMWUtNDhjNC1h YzliLWRiYzAwMjUyMDNiNS80ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1 MjAzYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/RAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO4ewuHAl1qY58xE/fRbD P0aD+wrM1UmvvX7uWnDq5q800wVCV0UpIpuuTtd6R6gmR+MF3RXTctele4H1VVWA rva5n44X4CDBXVkL3joLY29JNa90d3pobHeAIxep8WQB3lD0mXP9jJbK6CJLWp8c +a0t07dQ3zMgj7RNxAvIdUg479Yo9QdQL/RPv0j3v+c478cBPxwuUaFxXylTWQJK IeZfUqqMcW4PRE6v8Y/wM2EYM4WpB2SN9ffJVg8bkPskvptay3IYbzKUaluFp1e0 uPQ78JNzL0ypU6XLjnygUs3GhPaspdC66fB7nOfkoApdU2dIs8F8ofHsqobcKlRc Iw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:22 2025 by rpki-client