$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer File: 90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer (raw, json) Hash identifier: nG8G4pvduEmVedCQe4yCPr8+0vRbcPDcgXfO+8CQUz4= Subject key identifier: 94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ACE0409DF72F81481DCBC3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 167.253.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:09:df:72:f8:14:81:dc:bc:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=90352753-4ed5-4805-a661-e3c0ff7bc8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:60:ca:10:28:48:3a:4d:3d:29:39:b9:05: d1:93:91:80:fc:ab:48:88:e7:e4:c4:38:c5:a1:ae: 30:42:36:52:f9:ac:0c:b7:58:bf:f9:7c:75:56:b4: 3a:43:f1:d4:b0:1f:eb:d8:f7:9a:96:fa:a1:6e:c0: 9c:31:7a:f0:25:27:48:74:bf:f6:c1:0e:67:19:7a: 35:0a:f4:39:7f:37:bd:3a:6e:04:00:7a:e3:6f:11: a5:4a:a2:49:93:07:c2:75:95:1e:11:74:ff:f1:3c: 93:cb:de:54:15:bb:57:91:bc:d5:be:7b:43:2e:25: 06:71:9a:bb:b0:b0:74:f4:c2:ca:02:da:42:76:af: 7a:ea:99:7c:41:cc:3f:03:67:7c:5c:12:9c:39:ca: 1e:fb:1d:ae:ba:91:fd:db:ba:8b:49:86:7f:ce:68: 6a:3c:58:6b:a4:0f:58:00:3f:ac:53:d4:c8:86:97: ac:0b:f0:5f:1a:1d:7b:4c:37:77:d4:97:77:c0:90: 93:9e:1b:ee:ad:39:76:53:05:03:b7:f2:0d:d8:99: 61:bc:7b:de:41:a8:41:9b:fd:35:9c:16:fe:84:79: 87:ed:23:fb:a4:ac:20:fd:02:1d:34:ad:94:48:10: 27:18:fb:95:f0:55:a6:fe:06:02:d2:bc:3c:64:5d: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c6:75:2e:5b:c0:e8:70:e7:4b:02:49:9c:02:70:0f:b3:48: ec:7e:ff:ba:6c:41:41:ff:f6:0e:ab:56:ad:0d:ed:7b:35:49: 8c:04:4c:a4:7e:87:45:9e:6e:13:0a:ff:87:33:e9:e8:92:8b: bc:a5:a2:98:14:ec:f0:e0:aa:20:ae:80:86:6a:12:5b:58:df: 3a:3b:d6:e6:a6:d5:a5:d5:e9:94:de:f0:3f:28:09:c1:2c:a2: 47:04:05:0a:e1:fd:36:c5:52:f8:0c:e8:92:9b:23:9d:d0:47: dc:a0:76:c9:22:88:88:e4:66:75:85:49:24:f8:94:0f:47:3a: ae:6f:02:81:0f:23:53:af:ba:07:d4:75:fd:04:c1:6b:a1:36: 97:65:12:02:5e:85:8f:62:67:0f:d6:38:d5:dd:c7:fc:9f:9d: 49:6a:58:06:74:72:a6:b8:c7:e9:2e:23:04:bb:a4:73:8b:fd: 9d:bb:3f:60:bc:0f:a2:d6:5f:9f:56:d2:69:0c:e5:a5:22:2c: e7:8f:62:9f:ae:8d:34:2a:22:19:35:0d:59:8a:a0:8d:c5:93: 74:d4:f2:56:a3:c2:54:3e:6e:3c:b2:c4:a8:37:bc:27:61:9b: ee:43:ea:e0:24:8b:86:b7:46:e3:e6:f2:47:7d:6b:c6:6f:70: 9b:fd:9b:33 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErOBAnfcvgUgdy8PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk OTAzNTI3NTMtNGVkNS00ODA1LWE2NjEtZTNjMGZmN2JjOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5gyhAoSDpNPSk5uQXRk5GA/KtIiOfkxDjF oa4wQjZS+awMt1i/+Xx1VrQ6Q/HUsB/r2PealvqhbsCcMXrwJSdIdL/2wQ5nGXo1 CvQ5fze9Om4EAHrjbxGlSqJJkwfCdZUeEXT/8TyTy95UFbtXkbzVvntDLiUGcZq7 sLB09MLKAtpCdq966pl8Qcw/A2d8XBKcOcoe+x2uupH927qLSYZ/zmhqPFhrpA9Y AD+sU9TIhpesC/BfGh17TDd31Jd3wJCTnhvurTl2UwUDt/IN2JlhvHveQahBm/01 nBb+hHmH7SP7pKwg/QIdNK2USBAnGPuV8FWm/gYC0rw8ZF0fGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJRl5uIWVdkAUaVZtHxIJEfQesEcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 MDM1Mjc1My00ZWQ1LTQ4MDUtYTY2MS1lM2MwZmY3YmM4ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkwMzUyNzUzLTRlZDUtNDgwNS1h NjYxLWUzYzBmZjdiYzhmOC85MDM1Mjc1My00ZWQ1LTQ4MDUtYTY2MS1lM2MwZmY3 YmM4ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/ZgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa8Z1LlvA6HDnSwJJnAJw D7NI7H7/umxBQf/2DqtWrQ3tezVJjARMpH6HRZ5uEwr/hzPp6JKLvKWimBTs8OCq IK6AhmoSW1jfOjvW5qbVpdXplN7wPygJwSyiRwQFCuH9NsVS+AzokpsjndBH3KB2 ySKIiORmdYVJJPiUD0c6rm8CgQ8jU6+6B9R1/QTBa6E2l2USAl6Fj2JnD9Y41d3H /J+dSWpYBnRyprjH6S4jBLukc4v9nbs/YLwPotZfn1bSaQzlpSIs549in66NNCoi GTUNWYqgjcWTdNTyVqPCVD5uPLLEqDe8J2Gb7kPq4CSLhrdG4+byR31rxm9wm/2b Mw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:59 2025 by rpki-client