$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer File: 68dde036-7a4c-4a69-930a-c6ac94a87e56.cer (raw, json) Hash identifier: gKIGEruC4Q7MH4fjgyNOsmK7CkEuwAz/iqn5jK+rk/0= Subject key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BAA900E46BA80AAFC278AB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 00:45:22 +0000 Certificate not after: Mon 31 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 138.67.0.0/16 IP: 192.26.83.0/24 IP: 192.111.53.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:90:0e:46:ba:80:aa:fc:27:8a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 28 00:45:22 2025 GMT Not After : Jan 31 01:45:22 2028 GMT Subject: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:7c:10:0d:5f:d7:b9:8e:99:9c:d4:63:29: 8b:d9:09:07:1a:8e:eb:21:5f:b4:ce:fa:af:6f:a2: a4:6e:92:32:3d:36:f8:7c:3e:8a:54:a2:7b:13:c8: df:50:90:04:0d:40:79:c6:f2:1f:ed:47:c7:46:3c: 50:d7:2a:1b:c0:b2:56:73:22:c3:c6:a7:c9:15:3e: 37:4b:3e:8f:76:ce:ec:d1:cb:86:01:f2:24:9b:55: e8:15:cd:5a:8b:d4:84:93:1c:f5:61:08:b9:d3:85: a2:89:23:26:49:c6:13:9a:66:ec:a0:99:66:37:32: 04:17:e9:bd:20:98:9e:14:48:5e:3c:90:bb:f7:9a: ec:cf:e9:0e:ef:8f:7b:4a:26:c1:d7:30:62:22:81: 51:ec:8a:69:27:56:37:2d:f6:7a:df:85:df:61:f3: fa:7f:6e:af:89:56:75:06:34:d6:9b:c5:dd:dc:f1: 5a:55:3b:65:ca:89:67:e0:41:da:d0:63:ac:57:bf: a8:54:71:09:59:f1:a4:88:ab:2b:ae:f1:16:8e:e4: 00:44:8f:4e:fb:9b:98:60:91:8d:0e:25:15:6d:5c: 45:0b:64:75:9f:04:57:c8:77:a7:36:bd:5a:08:62: 1f:2b:59:92:bc:1b:e7:92:66:e5:4a:a4:ac:f8:9e: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 138.67.0.0/16 192.26.83.0/24 192.111.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:6b:f3:2b:99:2d:e8:e5:7a:c1:f9:3b:de:4b:96:5e:d4: 5b:98:69:00:16:11:25:09:91:7f:8f:5b:a0:11:00:cf:20:2b: 0d:ae:94:bf:2d:41:2b:52:23:28:5c:5e:12:61:79:82:48:d8: 7f:14:fe:fa:5b:a1:74:e6:81:b5:82:6a:fb:4b:ee:85:94:df: 0b:2e:82:0d:c9:14:62:f7:36:16:10:d0:56:25:2b:9a:79:79: 61:91:b3:d8:51:af:4f:b7:82:05:cf:08:0d:f5:33:8c:98:1f: 53:e2:9a:91:13:f8:cd:d1:28:e7:86:9e:e1:6b:1b:3c:fa:93: b5:02:a8:22:74:4f:22:0f:02:bb:1c:ab:ea:95:6d:1b:3f:b5: 76:9a:d5:b2:ae:ad:cc:0f:ad:57:52:24:55:1d:e1:14:a9:58: 75:6f:33:7d:13:40:4b:bb:ef:2e:3a:00:a6:54:3b:e9:dd:05: 92:2b:58:ee:4d:ba:0c:4b:20:96:34:c6:e1:e1:c1:71:54:12: 4a:0a:a2:2c:f4:59:22:e0:38:ca:5c:68:3c:50:a6:1c:23:74: 5d:9b:34:a4:32:9e:12:8d:cf:ba:5d:08:31:b0:f0:43:de:bc: 3a:42:6f:b7:40:64:74:02:d5:f2:5f:3a:be:80:21:f2:35:a8: b3:c7:21:33 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWEuqkA5GuoCq/CeKtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyODAwNDUyMloXDTI4MDEzMTAxNDUyMlowLzEtMCsGA1UEAxMk NjhkZGUwMzYtN2E0Yy00YTY5LTkzMGEtYzZhYzk0YTg3ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsh8EA1f17mOmZzUYymL2QkHGo7rIV+0zvqv b6KkbpIyPTb4fD6KVKJ7E8jfUJAEDUB5xvIf7UfHRjxQ1yobwLJWcyLDxqfJFT43 Sz6Pds7s0cuGAfIkm1XoFc1ai9SEkxz1YQi504WiiSMmScYTmmbsoJlmNzIEF+m9 IJieFEhePJC795rsz+kO7497SibB1zBiIoFR7IppJ1Y3LfZ634XfYfP6f26viVZ1 BjTWm8Xd3PFaVTtlyoln4EHa0GOsV7+oVHEJWfGkiKsrrvEWjuQARI9O+5uYYJGN DiUVbVxFC2R1nwRXyHenNr1aCGIfK1mSvBvnkmblSqSs+J53kQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFGzCjLLe/1Z2HTXPRwAJPZRhQLAIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 OGRkZTAzNi03YTRjLTRhNjktOTMwYS1jNmFjOTRhODdlNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY4ZGRlMDM2LTdhNGMtNGE2OS05 MzBhLWM2YWM5NGE4N2U1Ni82OGRkZTAzNi03YTRjLTRhNjktOTMwYS1jNmFjOTRh ODdlNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCKQwMEAMAaUwMEAMBvNTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnjmvz K5kt6OV6wfk73kuWXtRbmGkAFhElCZF/j1ugEQDPICsNrpS/LUErUiMoXF4SYXmC SNh/FP76W6F05oG1gmr7S+6FlN8LLoINyRRi9zYWENBWJSuaeXlhkbPYUa9Pt4IF zwgN9TOMmB9T4pqRE/jN0Sjnhp7haxs8+pO1AqgidE8iDwK7HKvqlW0bP7V2mtWy rq3MD61XUiRVHeEUqVh1bzN9E0BLu+8uOgCmVDvp3QWSK1juTboMSyCWNMbh4cFx VBJKCqIs9Fki4DjKXGg8UKYcI3RdmzSkMp4Sjc+6XQgxsPBD3rw6Qm+3QGR0AtXy Xzq+gCHyNaizxyEz -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:59 2025 by rpki-client