$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer File: 95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer (raw, json) Hash identifier: IG/kHyKjn2PiCWbfMe8TgzRHTdUfo/UppC9TVxZhhck= Subject key identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B6A5A5722682927559025C200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 00:45:24 +0000 Certificate not after: Sat 08 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 399355 IP: 204.138.190.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:5a:57:22:68:29:27:55:90:25:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 5 00:45:24 2025 GMT Not After : Jan 8 01:45:24 2028 GMT Subject: CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:74:a8:86:76:12:eb:99:ca:71:7c:f9:67: 5e:23:16:77:6c:da:c1:67:55:9e:75:b0:95:46:74: c1:5e:21:25:33:7e:c3:b0:79:bd:cc:be:4f:dc:ad: 53:c8:8d:fb:5c:32:6c:9b:67:95:fd:70:51:e2:c9: 09:9b:2e:4e:f3:ad:fd:e8:ff:33:5d:97:15:14:40: 96:fe:27:f0:a4:de:42:37:a7:59:74:81:d5:22:21: 38:72:7e:0a:5c:29:73:56:9c:98:b9:46:5b:2f:dd: a9:de:82:4f:d3:a8:e8:75:97:55:49:0b:d6:51:77: 58:f6:76:98:5d:32:05:1b:27:69:5c:4f:b6:2e:ec: ee:29:f2:b2:93:d6:34:34:2e:d3:f8:a4:b0:a8:1d: 0e:72:b0:3f:dd:0b:7e:dc:3b:ef:5d:fc:e7:2b:b1: ce:cf:e9:34:b7:36:08:c3:4c:23:90:a6:ae:d2:28: b2:e2:88:4b:54:54:c1:5b:49:82:39:16:44:64:ee: 6e:f4:23:3f:3b:0f:65:36:27:bd:16:00:46:0b:00: 58:23:af:e1:02:f2:bb:6f:ac:fa:86:39:07:58:67: 59:e1:f9:a6:48:c8:b2:24:86:65:98:ed:01:f9:9b: 57:14:dc:34:d7:3b:95:09:76:ab:3f:0a:df:8a:1c: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.138.190.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399355 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:47:5e:b3:47:1f:a5:ef:bc:00:61:18:99:f7:95:85:66:24: 89:b7:2a:f0:6d:e3:70:e5:0a:a8:90:8f:3a:f4:04:53:28:8c: 79:9b:60:c2:61:5e:25:09:1f:21:a6:b1:09:1b:c8:a9:9d:b2: 1a:10:c6:d7:f9:b7:aa:6a:ec:51:92:84:46:bb:62:58:6d:ca: f9:bc:ef:15:9e:44:49:3d:e7:4f:de:55:12:f5:6a:49:1d:42: 60:0f:b5:e5:88:a0:7a:04:fc:9a:0e:da:fc:66:b5:14:bd:11: e4:b3:7f:e7:36:a9:fa:2d:cb:d8:c6:72:1b:5c:cb:05:cc:58: 13:f2:9d:37:25:86:3c:bf:21:ea:a2:e3:a5:d2:c4:c9:00:99: fe:da:ab:13:94:aa:3d:76:e7:e5:9c:b5:62:19:12:52:da:fd: 53:fe:5f:20:d2:9f:e6:db:44:9a:f3:be:4e:64:04:95:77:a4: a8:2d:35:18:27:cc:9c:c1:19:af:58:10:bb:00:a5:3e:15:7f: ee:c1:62:0d:75:12:36:2d:fd:76:37:aa:15:ca:6a:92:e6:ad: 39:a3:55:17:a8:f6:e0:7d:69:84:9a:a9:3a:64:a3:db:fa:d5: 39:1e:4a:a3:7b:18:10:4e:45:d8:d0:8e:94:4a:1b:46:5f:e9: 6e:6d:6f:a9 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtqWlciaCknVZAlwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwNTAwNDUyNFoXDTI4MDEwODAxNDUyNFowLzEtMCsGA1UEAxMk OTVhNWE4NmYtNzA2YS00NWI2LWJhZjItZGE0ZDRlNjJiMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz90qIZ2EuuZynF8+WdeIxZ3bNrBZ1WedbCV RnTBXiElM37DsHm9zL5P3K1TyI37XDJsm2eV/XBR4skJmy5O86396P8zXZcVFECW /ifwpN5CN6dZdIHVIiE4cn4KXClzVpyYuUZbL92p3oJP06jodZdVSQvWUXdY9naY XTIFGydpXE+2LuzuKfKyk9Y0NC7T+KSwqB0OcrA/3Qt+3DvvXfznK7HOz+k0tzYI w0wjkKau0iiy4ohLVFTBW0mCORZEZO5u9CM/Ow9lNie9FgBGCwBYI6/hAvK7b6z6 hjkHWGdZ4fmmSMiyJIZlmO0B+ZtXFNw01zuVCXarPwrfihz3BwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFASQhQbtRzfNscM81zrZ9VnIhTWXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NWE1YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRkNGU2MmIxMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk1YTVhODZmLTcwNmEtNDViNi1i YWYyLWRhNGQ0ZTYyYjEwZS85NWE1YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRkNGU2 MmIxMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMir4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhf7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHVHXrNHH6XvvABhGJn3lYVmJIm3KvBt43DlCqiQjzr0BFMo jHmbYMJhXiUJHyGmsQkbyKmdshoQxtf5t6pq7FGShEa7Ylhtyvm87xWeREk950/e VRL1akkdQmAPteWIoHoE/JoO2vxmtRS9EeSzf+c2qfoty9jGchtcywXMWBPynTcl hjy/Ieqi46XSxMkAmf7aqxOUqj125+WctWIZElLa/VP+XyDSn+bbRJrzvk5kBJV3 pKgtNRgnzJzBGa9YELsApT4Vf+7BYg11EjYt/XY3qhXKapLmrTmjVReo9uB9aYSa qTpko9v61TkeSqN7GBBORdjQjpRKG0Zf6W5tb6k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:18 2025 by rpki-client