$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer File: 5fdb7f4d-8de9-45c3-95a2-05764802f794.cer (raw, json) Hash identifier: 6MjtB7yGm7UlsYER5EvpXxE5MWow3GBhpc4JU4fWivA= Subject key identifier: 6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B11047343E7078577774F00A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 192.101.250.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:43:e7:07:85:77:77:4f:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=5fdb7f4d-8de9-45c3-95a2-05764802f794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:ce:34:10:ea:01:1c:b6:26:82:0a:41:60: 51:ac:b8:c3:a7:22:c6:9a:5b:80:26:4f:9a:8a:a6: fb:c5:92:54:0d:04:67:73:60:ab:2b:f7:65:f2:dd: 13:fb:62:26:e9:69:48:df:98:69:f7:b0:59:7a:ed: 24:0a:b4:5b:24:61:e4:cf:52:5d:ce:fd:77:1b:9a: 70:cd:8f:9c:69:4f:0a:ab:51:fa:e1:33:06:80:91: 87:a2:14:87:f4:c1:a9:3a:29:ff:8c:3b:2a:52:17: 4a:53:8d:d3:ab:ee:b7:ec:5a:1a:48:52:dc:7c:1a: 6d:7e:b9:4c:bf:1d:81:56:9e:e8:b4:2f:e8:e1:53: 26:5e:7a:3d:53:87:89:4d:33:31:51:94:5d:e0:89: 10:06:48:82:c1:62:06:b8:4c:5a:d7:29:11:65:40: f9:e3:1d:14:ad:c0:78:c9:aa:91:0c:cd:49:36:bf: 94:8b:ab:83:01:7c:d5:45:89:35:2b:61:b7:7a:56: 9e:f0:27:02:01:bf:37:e9:c4:8f:cc:86:cd:ea:ee: 49:c4:6c:35:38:36:f4:0c:33:69:10:12:f3:ad:e8: 3e:92:a3:9e:54:3a:f0:97:f7:38:cf:d9:27:c0:c5: c5:df:b2:3a:33:24:d5:2b:06:da:f3:5f:82:6f:0e: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.101.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ec:5f:6c:95:ff:e0:0c:10:38:97:79:30:c5:38:3a:c3:96: 98:b0:e0:c8:a4:39:ad:fb:f0:ea:75:85:ff:26:35:22:73:4b: ac:82:03:1d:0f:a0:63:88:3d:c5:15:38:81:08:e1:e0:7e:13: cd:df:6d:f3:e0:dc:3c:76:d9:2b:34:20:6e:19:47:68:8f:e9: ab:db:55:49:e1:af:29:8d:db:99:69:3b:73:76:7f:5f:82:e3: ca:d2:b6:57:5c:b5:4a:2e:4a:6e:7e:be:f2:c1:82:a2:5c:50: 1f:47:e9:a6:40:11:e0:63:02:c3:64:e5:75:51:4a:57:42:88: 92:a8:a0:c0:a3:b2:7b:5b:1c:1c:e6:60:8c:d2:56:20:20:e1: 63:f5:67:ab:f2:e0:0f:ac:f2:a3:56:35:ff:3f:0c:c6:dd:1b: a0:fb:2e:71:f3:7f:03:15:59:c1:05:42:48:db:81:5b:8b:e7: 05:8a:95:4b:8f:0f:ef:70:90:18:1b:a2:29:29:59:b3:4b:bb: c1:33:d5:7d:69:bd:74:94:b2:16:21:5f:cd:c2:a2:3a:de:5f: 65:7e:e6:8a:7d:a3:a6:f6:9d:cb:e2:3d:7d:ec:fb:d3:f4:25: 86:60:61:14:e8:28:94:fc:51:f9:7c:13:05:cc:4a:5d:76:b9: 69:b8:0d:0e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsRBHND5weFd3dPAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk NWZkYjdmNGQtOGRlOS00NWMzLTk1YTItMDU3NjQ4MDJmNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJXONBDqARy2JoIKQWBRrLjDpyLGmluAJk+a iqb7xZJUDQRnc2CrK/dl8t0T+2Im6WlI35hp97BZeu0kCrRbJGHkz1Jdzv13G5pw zY+caU8Kq1H64TMGgJGHohSH9MGpOin/jDsqUhdKU43Tq+637FoaSFLcfBptfrlM vx2BVp7otC/o4VMmXno9U4eJTTMxUZRd4IkQBkiCwWIGuExa1ykRZUD54x0UrcB4 yaqRDM1JNr+Ui6uDAXzVRYk1K2G3elae8CcCAb836cSPzIbN6u5JxGw1ODb0DDNp EBLzreg+kqOeVDrwl/c4z9knwMXF37I6MyTVKwba81+Cbw4T4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGu4t9xYWMv7XueUgUWFVP1lyqSjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZmRiN2Y0ZC04ZGU5LTQ1YzMtOTVhMi0wNTc2NDgwMmY3OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVmZGI3ZjRkLThkZTktNDVjMy05 NWEyLTA1NzY0ODAyZjc5NC81ZmRiN2Y0ZC04ZGU5LTQ1YzMtOTVhMi0wNTc2NDgw MmY3OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAZfowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUOxfbJX/4AwQOJd5MMU4 OsOWmLDgyKQ5rfvw6nWF/yY1InNLrIIDHQ+gY4g9xRU4gQjh4H4Tzd9t8+DcPHbZ KzQgbhlHaI/pq9tVSeGvKY3bmWk7c3Z/X4LjytK2V1y1Si5Kbn6+8sGColxQH0fp pkAR4GMCw2TldVFKV0KIkqigwKOye1scHOZgjNJWICDhY/Vnq/LgD6zyo1Y1/z8M xt0boPsucfN/AxVZwQVCSNuBW4vnBYqVS48P73CQGBuiKSlZs0u7wTPVfWm9dJSy FiFfzcKiOt5fZX7min2jpvady+I9fez70/QlhmBhFOgolPxR+XwTBcxKXXa5abgN Dg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:56 2025 by rpki-client