$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer File: 7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer (raw, json) Hash identifier: CZJtYSlv/NwmyBfPkbbc5uRjwvi97raGjVH6lq4u7vA= Subject key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B5C64EB03FD33C5A490266740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 00:45:24 +0000 Certificate not after: Mon 03 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 55254 AS: 395158 IP: 72.46.80.0/22 IP: 104.37.112.0/22 IP: 162.211.184.0/22 IP: 168.100.192.0/19 IP: 172.96.20.0/22 IP: 205.201.30.0/23 IP: 205.220.192.0/20 IP: 216.10.232.0/23 IP: 2602:ffcd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:64:eb:03:fd:33:c5:a4:90:26:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 30 00:45:24 2025 GMT Not After : Jan 3 01:45:24 2028 GMT Subject: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:70:c1:18:2a:3d:64:7e:12:a8:0f:65:4b: d8:20:d6:88:31:d7:b7:99:93:c7:f0:9d:ee:d1:9b: bc:f1:fc:65:76:20:41:67:61:f6:cb:a7:f8:58:55: af:e4:36:d4:41:36:0a:d1:df:69:04:f8:d7:6f:7a: 8e:ec:ce:13:e4:01:49:f9:c3:cf:a7:61:70:0b:4d: 79:aa:1f:8a:b0:03:0e:c4:6f:19:36:2f:3f:49:91: 99:00:58:62:f7:da:6a:f5:8e:13:09:43:38:7d:c3: b1:bd:ad:a2:93:af:23:0b:31:5a:76:cf:40:8f:e6: 0f:a2:2d:ec:0b:cd:9e:2e:2f:f8:cc:65:83:63:e9: 69:b7:dc:b3:ef:53:47:18:b2:11:de:fc:7e:be:16: 51:a6:b0:2a:8e:2d:dc:e5:74:f3:7b:55:8b:9e:4e: ab:61:56:80:8b:f8:36:52:bd:40:5e:be:38:a4:24: f1:54:12:76:02:ee:13:3f:ee:5d:b5:7f:83:9b:31: 1b:1e:bb:a5:c6:9f:2b:55:6e:30:c3:ac:9c:8a:7f: 10:26:9a:0a:d9:9a:fd:0b:48:f5:7f:d9:d3:4d:ab: 73:ca:82:fb:3a:41:d5:51:9a:54:bd:4c:15:1a:54: e3:b9:ff:79:d0:e5:2c:68:0a:6e:ad:80:82:56:b8: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 72.46.80.0/22 104.37.112.0/22 162.211.184.0/22 168.100.192.0/19 172.96.20.0/22 205.201.30.0/23 205.220.192.0/20 216.10.232.0/23 IPv6: 2602:ffcd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55254 395158 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fa:db:0d:f7:d1:43:83:83:30:f5:6d:05:97:87:78:23:22: 43:f8:6d:d2:47:af:e9:4a:fb:f1:97:0d:8f:1a:b5:5a:ca:26: d6:f7:ca:12:52:5b:e9:0f:86:d3:82:6f:bb:ec:3a:aa:88:3e: 2e:0e:38:76:49:71:0c:3e:4e:07:f3:8f:3e:e4:c7:e4:cf:c1: f6:8c:0c:dd:ef:44:5a:81:7d:d6:38:40:1f:0f:f8:1b:24:93: a5:08:6c:24:0f:3d:4d:30:e3:b2:95:08:24:8a:9b:58:07:ed: a4:c1:b7:42:0f:9b:ca:b2:24:1a:9c:96:16:14:ea:28:b4:cf: f2:e2:53:15:c0:3c:48:13:09:49:8a:54:86:d6:ff:21:da:f5: 2e:f6:38:1a:c3:27:bf:0a:dd:e5:2d:cc:35:28:22:b3:21:18: 0d:24:ce:70:76:1f:d1:1c:c3:fc:bf:ce:ab:47:0d:ea:e3:f2: b7:d3:b9:cd:2c:5c:e9:81:30:68:8c:e5:d6:55:22:91:31:cb: db:5c:5d:60:15:a9:d7:8c:d4:2f:15:79:cc:ba:e7:85:c5:b3: cb:43:b9:39:eb:ce:63:76:60:2b:c6:0e:69:8b:cd:7a:f8:d5: b8:0a:eb:74:47:52:fc:34:6a:81:db:d1:3b:6b:aa:9e:98:d9: 00:42:b8:a2 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEtcZOsD/TPFpJAmZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkzMDAwNDUyNFoXDTI4MDEwMzAxNDUyNFowLzEtMCsGA1UEAxMk N2ZmNjg3OGQtM2I3ZS00YzY3LWE5MWEtZTIxZjEwNDJmOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbtwwRgqPWR+EqgPZUvYINaIMde3mZPH8J3u 0Zu88fxldiBBZ2H2y6f4WFWv5DbUQTYK0d9pBPjXb3qO7M4T5AFJ+cPPp2FwC015 qh+KsAMOxG8ZNi8/SZGZAFhi99pq9Y4TCUM4fcOxva2ik68jCzFads9Aj+YPoi3s C82eLi/4zGWDY+lpt9yz71NHGLIR3vx+vhZRprAqji3c5XTze1WLnk6rYVaAi/g2 Ur1AXr44pCTxVBJ2Au4TP+5dtX+DmzEbHrulxp8rVW4ww6ycin8QJpoK2Zr9C0j1 f9nTTatzyoL7OkHVUZpUvUwVGlTjuf950OUsaApurYCCVrhtgQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFEiEA3N6QN1RyfFLzRFIkG3h3QydMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZmY2ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFmMTA0MmY5ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdmZjY4NzhkLTNiN2UtNGM2Ny1h OTFhLWUyMWYxMDQyZjllOC83ZmY2ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFmMTA0 MmY5ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwWQYIKwYBBQUH AQcBAf8ESjBIMDYEAgABMDADBAJILlADBAJoJXADBAKi07gDBAWoZMADBAKsYBQD BAHNyR4DBATN3MADBAHYCugwDgQCAAIwCAMGBCYC/80AMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwDX1gIDBgeWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGT62w330UODgzD1bQWXh3gjIkP4 bdJHr+lK+/GXDY8atVrKJtb3yhJSW+kPhtOCb7vsOqqIPi4OOHZJcQw+Tgfzjz7k x+TPwfaMDN3vRFqBfdY4QB8P+Bskk6UIbCQPPU0w47KVCCSKm1gH7aTBt0IPm8qy JBqclhYU6ii0z/LiUxXAPEgTCUmKVIbW/yHa9S72OBrDJ78K3eUtzDUoIrMhGA0k znB2H9Ecw/y/zqtHDerj8rfTuc0sXOmBMGiM5dZVIpExy9tcXWAVqdeM1C8Vecy6 54XFs8tDuTnrzmN2YCvGDmmLzXr41bgK63RHUvw0aoHb0Ttrqp6Y2QBCuKI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:21 2025 by rpki-client