$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer File: 7dc3020d-633c-4147-90a4-2daf4afdc33d.cer (raw, json) Hash identifier: yx7Fva56LqZnjRGoJ9LV3v/t9ivok4txYX76RamlYy4= Subject key identifier: 1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B71A861384E84A0DC02DC0800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 15:33:18 +0000 Certificate not after: Sun 31 Oct 2027 12:45:37 +0000 Subordinate resources: AS: 401024 IP: 131.143.188.0/24 IP: 2602:f910::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:a8:61:38:4e:84:a0:dc:02:dc:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 15:33:18 2025 GMT Not After : Oct 31 12:45:37 2027 GMT Subject: CN=7dc3020d-633c-4147-90a4-2daf4afdc33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:59:a2:42:72:e0:6c:4c:c3:dd:f4:ee:3a: aa:9a:bf:b9:aa:78:ee:97:fc:91:f9:27:d6:4b:59: 08:01:a3:22:2e:65:b0:49:c6:00:cf:b5:99:84:01: d4:df:29:eb:f1:f2:2c:01:54:77:c3:9c:b5:43:0b: 18:8d:64:c4:41:83:49:85:73:00:d6:65:2c:9f:4c: 7d:05:b6:f0:32:28:af:a7:75:fe:92:a6:af:d8:d1: 50:ef:07:11:9f:13:6a:b2:81:c0:a6:90:d7:38:e5: 1d:f0:49:15:55:9a:ea:f4:91:e9:ce:d7:90:fe:cf: 75:54:d3:44:64:3c:32:90:ab:63:3e:c1:4f:18:76: 6f:24:86:80:3d:3d:99:89:ee:38:1c:7e:3b:bf:83: 1c:9d:57:fa:c5:b1:a0:4f:76:30:fc:f5:5b:cd:17: e5:46:46:13:d2:7f:31:88:8e:64:a0:11:f0:43:09: 49:b9:e2:25:60:c9:70:bd:25:e2:50:fb:30:0d:0e: 4d:28:73:a6:65:2b:87:f9:a0:02:66:10:00:32:6d: c6:4e:69:53:e8:da:a9:26:a3:06:fc:87:b9:77:9e: 3e:d7:0e:f3:29:fe:bc:cf:17:90:45:54:77:6f:16: 0a:01:80:bf:17:8b:ce:12:e4:ae:5f:c9:66:f0:56: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 131.143.188.0/24 IPv6: 2602:f910::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401024 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:52:ba:ee:c6:e5:c3:e1:97:07:32:84:67:0d:ce:77:8d:c8: a1:da:cd:71:67:5c:53:6c:c7:75:01:fe:3d:5a:33:26:1c:ed: 95:ad:a7:7b:ee:e3:2c:fb:7c:dc:64:c5:aa:a0:d6:c7:c1:76: 00:b5:fc:82:b6:32:28:a0:32:e3:6a:d9:08:68:41:b2:2c:b1: cb:d4:af:fd:28:48:e0:ad:4b:a5:55:a8:4b:db:79:68:8d:c8: 86:d9:b2:2f:78:21:0f:db:f8:5e:1b:2b:e1:67:f1:b2:36:42: 51:d3:c6:ab:62:18:04:92:12:eb:4d:ba:47:1b:a5:c5:dd:00: 18:e4:75:c9:b7:51:be:47:3b:c8:54:74:a4:76:7b:75:7f:4c: c5:cf:a5:46:49:9b:6b:72:ec:b4:ec:44:6a:8b:87:6c:ea:bd: ff:72:6a:0b:6f:8c:9d:b5:02:74:f6:73:01:18:83:1d:cd:d7: a4:44:75:ae:26:c3:20:fa:7c:91:c7:1f:b3:0b:a1:3b:f5:ba: fc:5a:2d:24:37:98:b9:84:ae:39:be:e3:e4:d2:2c:94:16:3c: 07:4e:c3:72:01:80:23:e2:ad:c4:e1:c9:1c:bb:71:ef:91:97: 1a:25:0c:40:4c:90:fc:de:97:e6:89:9d:d7:61:59:92:34:67: 88:86:ca:1b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtxqGE4ToSg3ALcCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNzE1MzMxOFoXDTI3MTAzMTEyNDUzN1owLzEtMCsGA1UEAxMk N2RjMzAyMGQtNjMzYy00MTQ3LTkwYTQtMmRhZjRhZmRjMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YxZokJy4GxMw9307jqqmr+5qnjul/yR+SfW S1kIAaMiLmWwScYAz7WZhAHU3ynr8fIsAVR3w5y1QwsYjWTEQYNJhXMA1mUsn0x9 BbbwMiivp3X+kqav2NFQ7wcRnxNqsoHAppDXOOUd8EkVVZrq9JHpzteQ/s91VNNE ZDwykKtjPsFPGHZvJIaAPT2Zie44HH47v4McnVf6xbGgT3Yw/PVbzRflRkYT0n8x iI5koBHwQwlJueIlYMlwvSXiUPswDQ5NKHOmZSuH+aACZhAAMm3GTmlT6NqpJqMG /Ie5d54+1w7zKf68zxeQRVR3bxYKAYC/F4vOEuSuX8lm8FYkmQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBxPjLLPq/zE0gibfK8Mhz8OiYMrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZGMzMDIwZC02MzNjLTQxNDctOTBhNC0yZGFmNGFmZGMzM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdkYzMwMjBkLTYzM2MtNDE0Ny05 MGE0LTJkYWY0YWZkYzMzZC83ZGMzMDIwZC02MzNjLTQxNDctOTBhNC0yZGFmNGFm ZGMzM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDj7wwDgQCAAIwCAMGACYC+RAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYegDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8UrruxuXD4ZcHMoRnDc53jcih 2s1xZ1xTbMd1Af49WjMmHO2Vrad77uMs+3zcZMWqoNbHwXYAtfyCtjIooDLjatkI aEGyLLHL1K/9KEjgrUulVahL23lojciG2bIveCEP2/heGyvhZ/GyNkJR08arYhgE khLrTbpHG6XF3QAY5HXJt1G+RzvIVHSkdnt1f0zFz6VGSZtrcuy07ERqi4ds6r3/ cmoLb4ydtQJ09nMBGIMdzdekRHWuJsMg+nyRxx+zC6E79br8Wi0kN5i5hK45vuPk 0iyUFjwHTsNyAYAj4q3E4ckcu3HvkZcaJQxATJD83pfmiZ3XYVmSNGeIhsob -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:37 2025 by rpki-client