$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer File: 716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer (raw, json) Hash identifier: VYl3jTiWwOUR+ROlgbbDP7Uq8kKEHgbgXIqqspK2pj8= Subject key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AB2192FC58EA67EC946F2D0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 00:45:23 +0000 Certificate not after: Wed 03 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 32121 IP: 142.152.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:19:2f:c5:8e:a6:7e:c9:46:f2:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 31 00:45:23 2025 GMT Not After : Nov 3 00:45:23 2027 GMT Subject: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:e7:98:4d:10:ce:df:a7:a6:85:33:a6:89: c2:bc:ec:6b:08:f9:c9:0d:69:21:f7:60:c9:2a:3c: 90:58:1e:bd:e3:c5:a7:99:3a:76:df:78:a2:31:e2: d8:8a:c6:71:70:a5:c4:0c:c0:95:db:16:ca:ba:42: 0c:f5:20:d0:e1:c7:2e:d6:b7:61:10:3d:cf:9c:e0: 31:cb:9b:3f:63:d3:07:bf:67:7b:ca:54:c9:9e:a2: 5e:89:f6:b0:1d:fc:a8:3b:4d:14:36:ae:1c:04:ed: 5b:9c:bf:83:05:c0:5d:3b:a0:b3:2d:6e:ab:6f:6d: aa:73:f7:20:8c:2f:12:94:32:ea:4b:7a:3e:4a:11: ba:7d:37:0d:3d:89:45:cc:be:37:d2:a0:bf:92:b2: 7b:91:94:20:54:e9:61:9a:d3:9f:0d:94:d7:e6:d5: 39:20:27:54:9f:a1:27:1b:5d:d8:49:a7:fd:cc:9e: d9:11:2d:5f:ce:8f:19:ad:7d:25:35:25:69:ad:a3: 05:9a:07:be:ac:06:57:08:32:72:f9:45:aa:1b:23: d1:7c:55:b0:06:8f:70:8d:61:b2:d0:ba:b5:fe:f0: 01:86:77:79:69:70:ac:d1:db:7e:a6:b0:27:18:6d: 46:b6:f3:09:19:b5:0a:3a:a0:52:64:89:83:55:1a: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 142.152.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0f:0f:bd:de:9a:27:17:a8:11:fe:fb:a1:4b:5a:0c:b9:6e: 34:2d:18:b2:09:40:3b:c0:22:78:0d:b8:47:76:bf:53:56:c2: 5a:fc:c7:c5:a8:56:13:6b:b6:f0:c3:57:04:5a:15:56:1d:6a: d4:f1:9e:90:d4:23:fe:9f:97:2f:b3:ca:f7:23:d9:a1:66:b9: a6:07:bd:73:ad:66:dd:48:6f:07:06:11:69:ed:91:6d:25:10: e2:51:cb:c8:2c:f8:ce:94:31:91:ae:79:ad:94:86:58:62:bb: 4e:35:2a:f3:ff:fe:4e:ab:71:31:02:44:cc:a5:86:59:7c:34: 37:73:63:10:0a:bf:06:2f:38:af:0c:f5:3f:8e:41:5d:9b:aa: d0:e1:0e:0a:c1:e4:94:f9:80:c1:fa:3a:36:a3:60:24:21:ac: ea:d1:6b:00:70:b1:d8:3e:e4:52:e4:55:ad:b8:0a:11:fd:f5: 27:ff:71:ee:f5:2a:2c:b1:d3:60:7d:4b:da:5b:c7:a8:f0:22: 0c:9a:51:46:09:a7:95:74:9c:db:9d:e4:7e:79:eb:7f:6e:51: fb:21:a6:e3:7b:06:d4:18:56:7d:8f:60:25:b5:28:8c:3c:84: df:06:9c:8d:82:77:88:83:1c:2a:db:19:b1:ab:42:db:73:dd: e9:0f:b4:29 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEqyGS/FjqZ+yUby0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDczMTAwNDUyM1oXDTI3MTEwMzAwNDUyM1owLzEtMCsGA1UEAxMk NzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6XnmE0Qzt+npoUzponCvOxrCPnJDWkh92DJ KjyQWB6948WnmTp233iiMeLYisZxcKXEDMCV2xbKukIM9SDQ4ccu1rdhED3PnOAx y5s/Y9MHv2d7ylTJnqJeifawHfyoO00UNq4cBO1bnL+DBcBdO6CzLW6rb22qc/cg jC8SlDLqS3o+ShG6fTcNPYlFzL430qC/krJ7kZQgVOlhmtOfDZTX5tU5ICdUn6En G13YSaf9zJ7ZES1fzo8ZrX0lNSVpraMFmge+rAZXCDJy+UWqGyPRfFWwBo9wjWGy 0Lq1/vABhnd5aXCs0dt+prAnGG1GtvMJGbUKOqBSZImDVRp5oQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFCCIA5+IZmfaQWlkm59FC1+hW1wSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzcxNmIzZjkxLTRkOWQtNDUyMC04 Y2E5LWNlMjYxNmMzN2Y0ZC83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZj MzdmNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOmDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ9 eTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBNDw+93ponF6gR/vuhS1oMuW40LRiyCUA7wCJ4DbhHdr9TVsJa /MfFqFYTa7bww1cEWhVWHWrU8Z6Q1CP+n5cvs8r3I9mhZrmmB71zrWbdSG8HBhFp 7ZFtJRDiUcvILPjOlDGRrnmtlIZYYrtONSrz//5Oq3ExAkTMpYZZfDQ3c2MQCr8G LzivDPU/jkFdm6rQ4Q4KweSU+YDB+jo2o2AkIazq0WsAcLHYPuRS5FWtuAoR/fUn /3Hu9SossdNgfUvaW8eo8CIMmlFGCaeVdJzbneR+eet/blH7IabjewbUGFZ9j2Al tSiMPITfBpyNgneIgxwq2xmxq0Lbc93pD7Qp -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:22 2025 by rpki-client