$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer File: 7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer (raw, json) Hash identifier: Xt8KsvUwjUYue8CRsOPHTXJcMlIGi9oWKw2HnmeqF1o= Subject key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BA7C561C9131F22F4AD0DE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 00:45:23 +0000 Certificate not after: Sun 30 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 2602:f883::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:c5:61:c9:13:1f:22:f4:ad:0d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 27 00:45:23 2025 GMT Not After : Jan 30 01:45:23 2028 GMT Subject: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:63:62:9f:39:28:e4:10:6f:89:28:4a:3d: 88:33:ae:df:4a:0c:71:32:de:84:a0:57:5d:b9:ef: a4:d6:8f:5c:9b:14:18:17:4a:29:f6:c7:99:0e:96: 27:a8:92:3b:27:8c:c1:4b:01:90:66:fb:78:a4:b0: 82:fd:54:95:0a:a4:43:93:d9:63:ac:3c:67:6f:c9: fd:10:c3:28:2d:39:fe:c1:00:44:0a:dd:db:02:81: 1f:f3:22:3c:2e:c4:00:de:79:36:2e:3f:19:37:36: 79:f3:d7:6d:72:ed:c7:ab:f1:e8:4d:a0:da:c6:46: 26:0c:1e:24:c7:d4:c5:23:aa:2c:3f:35:43:57:65: 01:a3:2f:f9:8b:f7:3e:3c:5f:f2:4d:48:de:55:6d: 07:d8:0a:ad:36:2f:4b:a1:c7:1a:b2:d3:43:22:91: d1:8b:6e:f2:60:13:3c:0c:46:5e:fe:57:ca:17:a9: 2e:ca:60:59:09:bf:8e:22:b8:9b:ac:13:99:eb:1f: 51:8e:14:16:a1:f3:92:a6:19:3d:95:84:63:5d:eb: 16:65:7a:23:15:cc:6a:1e:43:4d:c5:e5:2f:1c:da: 66:47:af:0d:70:70:54:48:1e:3e:8d:58:c3:a8:b5: 85:54:90:81:12:3d:7c:96:c8:e3:da:6a:f5:de:6d: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2602:f883::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:19:a8:c8:d2:5e:a4:27:14:86:bf:1d:9f:50:c9:29:d6:20: 76:c5:a7:fe:91:e2:2d:a0:53:5e:19:b6:b1:4b:b7:fc:90:ad: d9:5e:da:a6:8b:59:4b:1e:75:c2:fd:12:21:5f:da:34:69:32: d9:f3:9a:c6:f7:8b:b2:79:8e:81:5c:5f:b2:69:68:19:11:4b: 9a:86:77:84:56:8d:90:dc:2f:ff:18:03:3f:2e:49:af:c3:2d: 59:a7:0f:c4:5d:8c:fa:5d:c5:f3:c8:44:28:51:98:04:07:bc: 9b:66:f0:ff:b5:99:e3:da:0d:15:4a:25:e9:9e:31:30:71:24: fb:cf:b3:2d:b0:db:91:1e:f8:c7:5b:2d:1c:62:14:6f:69:2d: 27:56:3e:de:41:5c:bb:2b:c1:c5:ac:6e:f2:a9:7a:1f:76:bc: 40:6b:c2:bc:96:d0:fe:61:a7:8c:74:d4:a0:0b:f1:4a:68:30: 2b:d1:ab:b6:b8:cb:77:52:1d:f4:6e:9c:ff:80:90:da:9f:44: 31:04:16:29:f2:5d:18:30:c0:b7:02:81:34:34:b9:e1:7b:7f: e9:a8:d5:d1:e0:21:be:24:b1:b1:15:ae:cf:5c:42:a7:0c:f2: 42:6f:c3:02:81:2c:05:9c:df:2a:3c:d1:2e:11:a6:66:8b:55: d2:a4:91:82 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEunxWHJEx8i9K0N5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyNzAwNDUyM1oXDTI4MDEzMDAxNDUyM1owLzEtMCsGA1UEAxMk N2VlYjA4M2MtMWM1Mi00NGUyLWEzOWItMmZjOTAzY2Y5ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3NjYp85KOQQb4koSj2IM67fSgxxMt6EoFdd ue+k1o9cmxQYF0op9seZDpYnqJI7J4zBSwGQZvt4pLCC/VSVCqRDk9ljrDxnb8n9 EMMoLTn+wQBECt3bAoEf8yI8LsQA3nk2Lj8ZNzZ589dtcu3Hq/HoTaDaxkYmDB4k x9TFI6osPzVDV2UBoy/5i/c+PF/yTUjeVW0H2AqtNi9LoccastNDIpHRi27yYBM8 DEZe/lfKF6kuymBZCb+OIribrBOZ6x9RjhQWofOSphk9lYRjXesWZXojFcxqHkNN xeUvHNpmR68NcHBUSB4+jVjDqLWFVJCBEj18lsjj2mr13m2uiQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFO5eAxxU11BNUnvevQMoz/dhnpu3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZWViMDgzYy0xYzUyLTQ0ZTItYTM5Yi0yZmM5MDNjZjlkYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdlZWIwODNjLTFjNTItNDRlMi1h MzliLTJmYzkwM2NmOWRhMi83ZWViMDgzYy0xYzUyLTQ0ZTItYTM5Yi0yZmM5MDNj ZjlkYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAviDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5GajI0l6kJxSGvx2f UMkp1iB2xaf+keItoFNeGbaxS7f8kK3ZXtqmi1lLHnXC/RIhX9o0aTLZ85rG94uy eY6BXF+yaWgZEUuahneEVo2Q3C//GAM/Lkmvwy1Zpw/EXYz6XcXzyEQoUZgEB7yb ZvD/tZnj2g0VSiXpnjEwcST7z7MtsNuRHvjHWy0cYhRvaS0nVj7eQVy7K8HFrG7y qXofdrxAa8K8ltD+YaeMdNSgC/FKaDAr0au2uMt3Uh30bpz/gJDan0QxBBYp8l0Y MMC3AoE0NLnhe3/pqNXR4CG+JLGxFa7PXEKnDPJCb8MCgSwFnN8qPNEuEaZmi1XS pJGC -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:44 2025 by rpki-client