$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer File: 79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer (raw, json) Hash identifier: XkAgtXEH/2pHPK+HdOuPNIVPtwAGmJbBQWlYPwi967M= Subject key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B986A9C686F7FB2FDE46A2700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 12:45:23 +0000 Certificate not after: Mon 24 Jan 2028 13:45:23 +0000 Subordinate resources: IP: 66.59.196.0/22 IP: 172.98.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:6a:9c:68:6f:7f:b2:fd:e4:6a:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 21 12:45:23 2025 GMT Not After : Jan 24 13:45:23 2028 GMT Subject: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:7f:64:29:5e:5d:ef:92:26:5f:48:30:ff: af:26:3c:f9:4b:df:3b:51:9d:35:28:23:75:e6:56: 9c:23:5d:f6:a2:c8:9a:e2:4e:17:80:0c:9c:5e:d9: 90:b8:a6:2e:86:88:9e:08:c3:1a:7c:ef:29:91:50: 20:40:93:58:fd:f7:32:9c:02:d5:00:18:e9:d6:07: 1b:4f:2e:2f:d2:c8:d2:3b:c3:37:9c:a6:69:71:2b: c4:92:5c:1f:1e:f8:eb:96:2d:12:7d:4f:dd:72:56: 27:de:99:91:86:fb:a7:1b:45:48:c1:5a:2f:b9:06: fb:a2:db:ed:cd:94:cd:c5:eb:7f:78:0a:70:b9:79: a1:3f:70:0a:44:17:51:4f:ed:f0:6f:ff:26:39:8d: 14:71:91:7b:9e:1b:1c:88:02:c1:fa:e9:4f:c0:5d: 30:14:72:c4:43:31:92:2e:6b:a5:41:f8:2b:1f:66: 5e:49:76:3b:72:34:12:a0:a1:5f:0f:76:6d:78:00: 3c:fb:17:e6:c2:c5:8c:69:51:97:97:22:fb:32:88: 05:d6:39:b0:4d:13:6a:97:39:c3:c6:e1:6d:83:25: e2:e3:c8:71:c2:44:0c:51:4c:49:dc:cd:a9:09:8f: e5:c1:c5:ce:86:ed:62:8e:6e:3d:b7:b2:ee:88:47: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.59.196.0/22 172.98.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9e:10:77:a3:d9:2f:7e:d9:4b:c9:1d:63:be:ab:c0:c6:28: 37:fb:15:00:a6:22:00:25:04:51:34:80:58:9a:44:a1:d1:4b: b5:ba:17:e7:91:de:ae:33:2d:3d:7d:a2:27:9a:65:58:9d:d8: 28:4e:89:7f:e7:90:47:9c:6c:0d:b8:3a:c7:61:b2:aa:f3:8b: 0b:f2:07:2b:ab:49:cb:67:fb:82:6e:89:65:ec:8a:3c:46:10: f4:65:59:1d:e9:67:16:7b:83:fb:0b:0d:07:0f:b4:d3:29:58: 63:d8:21:41:e5:6f:f6:54:86:79:4b:ba:15:02:e8:78:52:53: ec:3d:bc:55:12:39:49:11:75:89:69:42:b5:a9:01:69:e1:b8: 36:7d:97:84:ea:a3:32:81:2f:43:ef:7e:b6:be:c3:c9:b8:5c: 6c:10:ed:32:0b:26:f4:46:c5:eb:ce:54:0c:7d:c2:ef:20:3a: ca:3d:75:12:21:02:ba:8d:71:88:00:b1:d2:b4:aa:be:ea:6b: 86:db:4f:71:5c:67:4c:a0:0f:2d:f2:98:10:bf:39:9d:67:23: f0:24:15:d8:68:7e:80:29:74:87:02:3b:03:6e:6f:51:51:36: fa:36:ae:26:90:31:74:1e:58:67:c6:aa:f9:9a:b6:2a:04:83: c9:7d:a1:87 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEuYapxob3+y/eRqJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMTEyNDUyM1oXDTI4MDEyNDEzNDUyM1owLzEtMCsGA1UEAxMk NzlkOTIwNDgtM2NiMC00MjA3LTk1Y2EtZWJmMWY2ZjRiYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoot/ZCleXe+SJl9IMP+vJjz5S987UZ01KCN1 5lacI132osia4k4XgAycXtmQuKYuhoieCMMafO8pkVAgQJNY/fcynALVABjp1gcb Ty4v0sjSO8M3nKZpcSvEklwfHvjrli0SfU/dclYn3pmRhvunG0VIwVovuQb7otvt zZTNxet/eApwuXmhP3AKRBdRT+3wb/8mOY0UcZF7nhsciALB+ulPwF0wFHLEQzGS LmulQfgrH2ZeSXY7cjQSoKFfD3ZteAA8+xfmwsWMaVGXlyL7MogF1jmwTRNqlznD xuFtgyXi48hxwkQMUUxJ3M2pCY/lwcXOhu1ijm49t7LuiEc2qQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFGOa9Tye0QYdMKEMalyZimGYQIPIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 OWQ5MjA0OC0zY2IwLTQyMDctOTVjYS1lYmYxZjZmNGJjN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzc5ZDkyMDQ4LTNjYjAtNDIwNy05 NWNhLWViZjFmNmY0YmM3Zi83OWQ5MjA0OC0zY2IwLTQyMDctOTVjYS1lYmYxZjZm NGJjN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJCO8QDBAKsYgwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEJ4Qd6PZL37Z S8kdY76rwMYoN/sVAKYiACUEUTSAWJpEodFLtboX55HerjMtPX2iJ5plWJ3YKE6J f+eQR5xsDbg6x2GyqvOLC/IHK6tJy2f7gm6JZeyKPEYQ9GVZHelnFnuD+wsNBw+0 0ylYY9ghQeVv9lSGeUu6FQLoeFJT7D28VRI5SRF1iWlCtakBaeG4Nn2XhOqjMoEv Q+9+tr7DybhcbBDtMgsm9EbF685UDH3C7yA6yj11EiECuo1xiACx0rSqvuprhttP cVxnTKAPLfKYEL85nWcj8CQV2Gh+gCl0hwI7A25vUVE2+jauJpAxdB5YZ8aq+Zq2 KgSDyX2hhw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:33 2025 by rpki-client