$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0.cer File: 55dee63f-73f3-40c2-82e6-22c18183f4e0.cer (raw, json) Hash identifier: idZ1NnD6ue1bPJOGR/Lqw8pyZv+x3bYu1stoxp9d7M0= Subject key identifier: CB:5A:50:8D:B1:D3:5D:B6:A3:05:C6:08:C7:12:DD:1D:71:E3:68:93 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC43EA3ACCD189EB1900EE820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/55dee63f-73f3-40c2-82e6-22c18183f4e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 12:45:25 +0000 Certificate not after: Tue 09 Nov 2027 13:45:25 +0000 Subordinate resources: IP: 167.253.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:3e:a3:ac:cd:18:9e:b1:90:0e:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 6 12:45:25 2025 GMT Not After : Nov 9 13:45:25 2027 GMT Subject: CN=55dee63f-73f3-40c2-82e6-22c18183f4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:df:aa:cd:9b:0f:9c:8d:f9:81:0b:95:ca: e6:da:88:0d:8a:8b:ab:95:85:c8:07:a5:64:a0:05: a5:5e:45:8a:27:cf:52:81:da:d8:4c:a3:21:1f:f4: a1:75:bb:5e:13:2d:90:08:4b:5e:1c:79:7f:75:48: 59:a0:0b:b8:a5:e3:93:ec:51:29:a0:06:3b:bb:d1: 82:07:66:68:b6:d1:4c:f0:9b:9f:cf:cb:98:88:0f: 8d:2c:8c:cc:fe:35:28:49:e1:d2:ec:6f:02:2e:85: f1:3a:5e:97:be:d4:e5:a2:59:28:91:a3:89:0f:02: e6:41:86:66:0e:07:7d:9f:38:e4:1d:fe:60:c9:1c: 00:50:d8:10:8f:6c:d9:3e:b5:1c:56:68:d5:6b:3b: 72:55:82:f7:06:35:0b:bf:3e:3a:33:7d:e1:84:7d: b7:57:66:25:c0:da:48:a1:6b:19:89:13:5a:0c:2e: 65:41:48:47:81:19:c5:09:c1:6c:fd:af:f5:2f:23: b5:3a:53:40:76:fe:33:00:86:cb:5d:fa:4d:59:09: 96:50:10:d9:f6:1e:ed:3f:37:b1:37:97:24:9c:b5: c6:9d:c1:2f:15:cb:66:7b:8f:5f:7d:2f:dc:71:b9: 02:95:c7:97:1f:a8:c3:5b:55:fa:b2:1c:e9:1b:f0: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5A:50:8D:B1:D3:5D:B6:A3:05:C6:08:C7:12:DD:1D:71:E3:68:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/55dee63f-73f3-40c2-82e6-22c18183f4e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d4:fc:27:a8:1f:2d:86:43:fc:67:8b:d0:77:78:8e:83:92: b0:20:78:08:73:3a:02:f9:94:1b:90:4b:00:38:62:a4:b5:a6: f8:42:ad:77:62:5b:28:bc:ad:ae:e6:e6:4c:06:da:b5:f8:69: d9:2e:f3:dd:fb:bc:53:c2:c1:ba:21:86:03:9b:e5:07:be:80: be:17:d3:df:89:c0:a6:9e:9a:b1:69:fc:0b:d7:0b:99:73:7a: b6:0e:b6:ba:6e:f7:af:26:ec:7f:36:39:8d:65:33:80:f3:7e: d3:cc:4f:56:f4:30:f7:14:ad:e1:0c:cd:a1:00:37:7a:c2:02: e8:0c:e8:24:38:31:23:30:3e:77:4d:41:b5:ea:fa:57:7b:80: ee:0b:c7:2c:ff:06:fc:01:ba:6b:d2:55:00:4d:4c:39:86:3e: 20:90:cc:39:ac:3b:3a:81:8e:be:32:11:94:fe:d4:01:d2:a3: d4:b4:73:a8:2f:b2:77:4d:60:68:fc:fc:b3:8d:52:b2:08:b9: 38:06:dd:be:ea:c7:9a:98:d9:0e:1a:1b:21:f2:a2:d1:0c:df: b4:39:9e:2f:33:46:1f:5c:8d:32:63:d5:ea:ac:2d:74:94:05: b6:b9:63:85:10:e7:1d:9a:4d:3d:78:04:bf:c4:7c:5c:a5:8b: 44:95:f5:5e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErEPqOszRiesZAO6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNjEyNDUyNVoXDTI3MTEwOTEzNDUyNVowLzEtMCsGA1UEAxMk NTVkZWU2M2YtNzNmMy00MGMyLTgyZTYtMjJjMTgxODNmNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV3fqs2bD5yN+YELlcrm2ogNiourlYXIB6Vk oAWlXkWKJ89SgdrYTKMhH/ShdbteEy2QCEteHHl/dUhZoAu4peOT7FEpoAY7u9GC B2ZottFM8Jufz8uYiA+NLIzM/jUoSeHS7G8CLoXxOl6XvtTlolkokaOJDwLmQYZm Dgd9nzjkHf5gyRwAUNgQj2zZPrUcVmjVaztyVYL3BjULvz46M33hhH23V2YlwNpI oWsZiRNaDC5lQUhHgRnFCcFs/a/1LyO1OlNAdv4zAIbLXfpNWQmWUBDZ9h7tPzex N5cknLXGncEvFctme49ffS/ccbkClceXH6jDW1X6shzpG/BJhwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMtaUI2x0122owXGCMcS3R1x42iTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 NWRlZTYzZi03M2YzLTQwYzItODJlNi0yMmMxODE4M2Y0ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzU1ZGVlNjNmLTczZjMtNDBjMi04 MmU2LTIyYzE4MTgzZjRlMC81NWRlZTYzZi03M2YzLTQwYzItODJlNi0yMmMxODE4 M2Y0ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/WQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABtT8J6gfLYZD/GeL0Hd4 joOSsCB4CHM6AvmUG5BLADhipLWm+EKtd2JbKLytrubmTAbatfhp2S7z3fu8U8LB uiGGA5vlB76AvhfT34nApp6asWn8C9cLmXN6tg62um73rybsfzY5jWUzgPN+08xP VvQw9xSt4QzNoQA3esIC6AzoJDgxIzA+d01Bter6V3uA7gvHLP8G/AG6a9JVAE1M OYY+IJDMOaw7OoGOvjIRlP7UAdKj1LRzqC+yd01gaPz8s41Ssgi5OAbdvurHmpjZ DhobIfKi0QzftDmeLzNGH1yNMmPV6qwtdJQFtrljhRDnHZpNPXgEv8R8XKWLRJX1 Xg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:08 2025 by rpki-client