$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer File: 7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer (raw, json) Hash identifier: nnO14zxZ3iQ9UyMWZa3IvahvXo+xUvxCWbGOiOMLx6Q= Subject key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B99CFF58430E98574E1888480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 36427 IP: 2620:8e:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:84:30:e9:85:74:e1:88:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8d:3a:13:5c:6b:d8:74:15:44:15:4a:64:81: 6f:69:36:e4:0b:92:27:2d:19:e6:37:e0:23:e1:c4: e3:0a:bc:62:4d:64:5e:5b:31:b6:8f:86:dd:bf:84: 9a:52:fe:ee:6c:6c:de:1a:7b:95:5a:a8:52:d4:dc: 04:b4:bb:4a:bc:6b:a3:2c:29:35:48:49:d3:1d:81: 57:d6:ad:70:71:fe:7f:6c:be:8a:2c:6d:ca:02:75: 69:45:bc:ca:82:a6:c9:9b:de:c4:9e:61:31:18:a7: 1a:d5:ee:03:57:eb:51:b7:fa:44:3e:db:60:f8:fd: de:3f:fc:be:ff:d5:5e:63:9d:da:98:2d:79:12:2f: 42:ac:e3:a0:d0:39:eb:4f:0b:0a:1d:4e:f7:9d:e0: e0:f3:7d:a3:59:36:19:72:14:e0:64:30:23:0d:9e: 02:61:f0:b2:20:98:b9:c7:e8:e7:d0:cb:19:a1:13: dc:a8:b5:d0:e8:df:5b:a0:15:99:f9:62:ca:a6:83: c3:1e:eb:e1:f8:55:8b:ac:9b:14:31:af:6a:4e:71: 66:b9:10:6a:32:b2:5e:4a:f6:68:92:91:af:a0:1d: 9e:0a:45:f7:3b:1f:3c:82:3b:92:06:33:c9:7b:5d: 52:f8:c6:5a:02:ea:51:9c:bc:c4:1d:38:f3:59:40: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:8e:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8a:86:92:cf:07:55:f8:95:ab:08:0b:09:56:54:c2:af:0a: a7:71:b2:2d:d4:11:b1:51:f3:04:c9:71:9b:80:7a:bf:bd:a4: 9e:91:ee:34:05:98:51:ae:43:7e:80:60:e2:a7:cd:3a:83:31: ad:fb:f6:d6:d8:85:90:b2:34:15:a9:57:5d:87:f4:2d:b7:c0: 72:0e:b6:6b:38:72:16:26:77:ed:2a:e2:5d:c8:d1:43:32:75: b1:39:08:42:da:48:94:8d:ed:3a:a6:80:55:8e:ba:83:74:42: 1c:75:ce:bf:12:91:72:1f:e2:a5:ed:c7:71:90:77:d9:44:b8: 00:40:cf:34:ee:57:33:b3:10:3a:f3:4e:33:07:1b:8d:1a:d7: 2f:46:7e:37:a7:31:63:25:f6:b2:fe:fe:76:5d:0f:dc:63:a7: 04:a1:a2:8a:59:e6:12:1b:9d:80:0b:b9:ab:50:80:6b:2f:dc: 94:8b:86:ae:6a:af:be:76:bb:29:fb:b6:22:c3:e4:41:17:f8: 1f:e9:ef:e7:c7:ac:75:39:e9:35:aa:af:ea:1f:6e:df:47:13: 31:32:19:77:94:8d:71:82:63:04:03:ec:db:6d:f7:2a:56:b7: 3e:ea:aa:5b:7f:1c:b8:f3:a0:2b:20:35:8f:49:82:78:bf:ff: 1b:c9:1d:a4 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEuZz/WEMOmFdOGIhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk N2U5MGU0ZDUtYjgzOC00YWU3LWI3YzgtOGFhYTRlMTgzZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+I06E1xr2HQVRBVKZIFvaTbkC5InLRnmN+Aj 4cTjCrxiTWReWzG2j4bdv4SaUv7ubGzeGnuVWqhS1NwEtLtKvGujLCk1SEnTHYFX 1q1wcf5/bL6KLG3KAnVpRbzKgqbJm97EnmExGKca1e4DV+tRt/pEPttg+P3eP/y+ /9VeY53amC15Ei9CrOOg0DnrTwsKHU73neDg832jWTYZchTgZDAjDZ4CYfCyIJi5 x+jn0MsZoRPcqLXQ6N9boBWZ+WLKpoPDHuvh+FWLrJsUMa9qTnFmuRBqMrJeSvZo kpGvoB2eCkX3Ox88gjuSBjPJe11S+MZaAupRnLzEHTjzWUB3ZwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFLcG4bJBM14JY2kb7J3zr4ODI1HEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZTkwZTRkNS1iODM4LTRhZTctYjdjOC04YWFhNGUxODNmYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdlOTBlNGQ1LWI4MzgtNGFlNy1i N2M4LThhYWE0ZTE4M2ZhZi83ZTkwZTRkNS1iODM4LTRhZTctYjdjOC04YWFhNGUx ODNmYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACOgAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAI5LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADKKhpLPB1X4lasICwlWVMKvCqdxsi3UEbFR8wTJcZuA er+9pJ6R7jQFmFGuQ36AYOKnzTqDMa379tbYhZCyNBWpV12H9C23wHIOtms4chYm d+0q4l3I0UMydbE5CELaSJSN7TqmgFWOuoN0Qhx1zr8SkXIf4qXtx3GQd9lEuABA zzTuVzOzEDrzTjMHG40a1y9GfjenMWMl9rL+/nZdD9xjpwShoopZ5hIbnYALuatQ gGsv3JSLhq5qr752uyn7tiLD5EEX+B/p7+fHrHU56TWqr+ofbt9HEzEyGXeUjXGC YwQD7Ntt9ypWtz7qqlt/HLjzoCsgNY9Jgni//xvJHaQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:39:54 2025 by rpki-client