$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer File: 977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer (raw, json) Hash identifier: 3sT5wNTNut6Zs4sCExT0RYTfx+jh38oV9pDUNjiLnlo= Subject key identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BB0256F5D269C0D17C993ABD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 00:45:24 +0000 Certificate not after: Wed 02 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 22667 IP: 67.59.192.0/20 IP: 69.39.240.0/20 IP: 173.213.192.0/20 IP: 173.249.96.0/19 IP: 192.40.208.0/21 IP: 206.176.224.0/19 IP: 2604:8f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:25:6f:5d:26:9c:0d:17:c9:93:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 30 00:45:24 2025 GMT Not After : Feb 2 01:45:24 2028 GMT Subject: CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:7a:50:44:e5:f2:fa:1c:87:fc:1e:d7:69: 1e:66:b1:88:01:09:8a:a2:2d:1b:2b:c8:a0:41:65: 9c:3d:ed:31:c1:62:55:9f:7d:98:2b:bc:4e:45:03: 47:b3:35:67:a6:dd:97:f8:95:cb:87:c8:c2:9c:47: 06:3c:cb:e0:04:1c:3d:ae:0f:96:51:ee:c7:93:bd: da:04:57:03:96:0f:18:bc:1d:ee:52:d1:3b:fe:99: 8c:f1:ea:0d:57:d3:20:d9:03:d2:1d:d1:61:68:53: 85:15:6b:59:78:a0:20:2f:e8:7c:1b:65:f1:8a:f3: ec:be:7d:92:c2:e7:20:bf:07:49:95:aa:53:7d:cf: 0c:d5:cf:e5:f0:2c:1d:5a:0a:1d:62:1e:96:82:29: f6:90:9b:20:e4:a7:da:f1:6e:5f:c9:2e:39:17:dc: 54:53:a1:7d:c1:b9:9d:7f:c0:c1:b9:16:0a:39:c9: 21:69:26:f0:d7:d3:53:2c:f5:9c:52:ee:7a:eb:fc: 19:2d:cd:dd:1a:9f:53:79:ba:79:6c:51:a8:8d:6b: 54:b3:66:76:48:ff:2b:f4:5c:e2:86:ea:53:7b:60: c4:1e:79:5e:3e:0c:2f:ac:d2:c1:c3:d5:43:84:00: 74:72:eb:49:68:40:e6:ed:99:1a:12:21:fa:da:27: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 67.59.192.0/20 69.39.240.0/20 173.213.192.0/20 173.249.96.0/19 192.40.208.0/21 206.176.224.0/19 IPv6: 2604:8f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:99:08:b0:5b:db:98:cc:ad:97:6d:4a:ec:3d:56:d5:7b:fd: c2:e4:b2:f0:d0:22:ad:4d:15:7c:62:76:b9:47:a4:46:3b:da: c2:94:86:c5:cd:51:fa:b6:3e:41:dd:d0:7b:52:01:dd:bb:99: cf:25:69:80:b1:bc:57:52:57:12:5b:9d:d1:33:74:fa:40:fb: 35:da:16:25:f6:40:57:e2:a3:bb:99:9d:f1:71:d2:32:99:da: b8:5e:c3:30:6f:5f:0f:21:0f:c4:db:4a:8a:96:f9:33:ba:50: ad:be:a7:7b:af:22:9e:e1:2d:5e:2f:e8:ee:e6:9f:f2:cc:69: 0e:1f:cf:af:66:f3:8e:0f:18:b6:8d:48:d9:62:52:5f:ca:61: 41:84:24:6d:73:2e:43:07:b4:50:1b:73:20:27:98:62:ea:65: 7d:12:a2:aa:31:6b:c0:17:e3:c0:53:45:7e:53:2f:b5:83:d2: 3d:46:b0:ba:be:ed:68:10:69:b0:ba:58:f9:44:2d:88:81:8d: 85:98:af:c8:1b:e4:dd:71:60:43:f3:22:11:7b:d4:4c:a9:f6: 80:3c:55:64:f1:6f:1c:5c:84:d7:91:45:a8:10:64:db:fb:73: 77:20:1f:02:89:98:1b:0b:02:7a:30:65:30:20:07:51:e3:39: a1:4f:66:b6 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEuwJW9dJpwNF8mTq9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAzMDAwNDUyNFoXDTI4MDIwMjAxNDUyNFowLzEtMCsGA1UEAxMk OTc3YzBkM2EtMjg2Yy00YzU3LWE3Y2EtODRlYTU3ZDY0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMh6UETl8voch/we12keZrGIAQmKoi0bK8ig QWWcPe0xwWJVn32YK7xORQNHszVnpt2X+JXLh8jCnEcGPMvgBBw9rg+WUe7Hk73a BFcDlg8YvB3uUtE7/pmM8eoNV9Mg2QPSHdFhaFOFFWtZeKAgL+h8G2XxivPsvn2S wucgvwdJlapTfc8M1c/l8CwdWgodYh6Wgin2kJsg5Kfa8W5fyS45F9xUU6F9wbmd f8DBuRYKOckhaSbw19NTLPWcUu566/wZLc3dGp9Tebp5bFGojWtUs2Z2SP8r9Fzi hupTe2DEHnlePgwvrNLBw9VDhAB0cutJaEDm7ZkaEiH62ieZoQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFH742o0OkIdGMTDMvEfKhSzkExV2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NzdjMGQzYS0yODZjLTRjNTctYTdjYS04NGVhNTdkNjQzYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk3N2MwZDNhLTI4NmMtNGM1Ny1h N2NhLTg0ZWE1N2Q2NDNhMC85NzdjMGQzYS0yODZjLTRjNTctYTdjYS04NGVhNTdk NjQzYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARDO8ADBARFJ/ADBASt1cADBAWt+WADBAPAKNAD BAXOsOAwDQQCAAIwBwMFACYEj4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWIsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH5kIsFvbmMytl21K7D1W1Xv9wuSy8NAirU0VfGJ2uUekRjvawpSG xc1R+rY+Qd3Qe1IB3buZzyVpgLG8V1JXElud0TN0+kD7NdoWJfZAV+Kju5md8XHS MpnauF7DMG9fDyEPxNtKipb5M7pQrb6ne68inuEtXi/o7uaf8sxpDh/Pr2bzjg8Y to1I2WJSX8phQYQkbXMuQwe0UBtzICeYYuplfRKiqjFrwBfjwFNFflMvtYPSPUaw ur7taBBpsLpY+UQtiIGNhZivyBvk3XFgQ/MiEXvUTKn2gDxVZPFvHFyE15FFqBBk 2/tzdyAfAomYGwsCejBlMCAHUeM5oU9mtg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:10 2025 by rpki-client