$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer File: a5114e69-a8e9-416a-a99b-8144e07664ce.cer (raw, json) Hash identifier: zfSn5uI1+RocVD0/Mjt/HpWhhOz/xNK6icdw41vqpdY= Subject key identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD2340EA3C65F347F3146BCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 12:45:24 +0000 Certificate not after: Sun 14 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 167.253.112.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:34:0e:a3:c6:5f:34:7f:31:46:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 11 12:45:24 2025 GMT Not After : Nov 14 13:45:24 2027 GMT Subject: CN=a5114e69-a8e9-416a-a99b-8144e07664ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:a2:0e:08:fe:95:70:f2:00:fa:e3:56:e7: cb:39:bc:71:cd:02:48:67:67:c0:23:ca:a6:66:cc: 8d:0c:de:a1:c2:ba:40:a0:02:b1:d1:6d:6a:42:c8: e9:0f:ec:a5:6d:55:5c:7f:09:7d:e1:86:6e:c7:89: b2:44:1e:58:2b:28:b8:ac:d2:ef:70:1e:cc:8d:e0: 63:c8:a2:05:4a:28:41:86:6c:d3:79:b2:68:c4:54: 8c:d1:e7:55:a5:46:2e:5c:f5:25:6a:68:0c:d8:ec: fa:bd:8c:df:9c:f7:8e:82:87:40:06:9e:28:e6:42: 1c:f3:80:bf:82:5c:53:c0:1f:f2:36:83:64:06:2b: 76:7d:93:36:f1:36:2a:72:cb:02:56:7a:84:b5:99: 37:d2:60:5d:c4:e0:b1:ec:b0:99:e6:de:2c:8d:36: 80:b6:c8:9e:97:39:f5:86:18:35:5d:1c:49:61:ae: e1:6b:c0:cd:e0:fb:52:1b:96:8a:1f:f2:95:c0:de: 54:af:1b:00:bf:5a:94:88:6d:6a:f4:92:37:1d:d6: e1:55:9a:12:1a:7a:ef:9a:fa:b4:03:aa:c6:ce:dc: 87:b7:8e:60:8b:3d:b3:7b:55:0b:73:f3:6d:ae:3a: aa:93:9a:54:74:d6:1c:62:15:e4:82:8b:5d:3f:4d: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:61:8c:33:51:79:f2:8f:a3:ba:47:4b:8e:36:3a:ab:a0:3f: f2:cc:85:a4:f1:7a:51:b1:d3:50:4d:0d:42:4b:52:2f:09:f4: 38:e7:2d:26:08:f2:04:7a:03:8c:c6:58:ce:67:f9:58:07:07: b7:d1:b9:b3:1c:5a:10:be:f3:fc:0b:87:5b:59:f5:12:89:1d: 88:e9:f1:10:b0:1a:b2:ab:56:cf:e9:e3:00:07:ad:cf:03:4a: bb:9c:1e:0f:64:e3:3c:be:a9:b9:b5:a4:ee:8e:91:42:8e:3f: a4:bd:2f:4d:af:42:3d:17:98:28:e5:e4:c9:07:91:cd:5b:1a: a7:0f:d6:d0:d8:04:92:4c:dd:76:c7:30:be:48:66:1d:ed:42: 44:da:3a:62:10:ad:cb:3c:9a:bb:6c:a3:c0:01:d9:46:9c:25: 27:d4:b9:68:e5:97:b0:95:91:bb:53:62:5e:fe:0a:82:67:71: 61:e1:f5:fa:d3:3d:4a:4c:2f:51:c8:8f:fe:97:f0:81:23:0b: cc:ac:32:50:53:f1:97:ed:b7:75:45:2b:41:be:19:47:cd:d5: 77:4b:a2:c6:d8:66:63:2e:91:6f:d2:f6:c6:49:da:20:99:d5: ce:6d:31:7b:89:ea:96:6a:29:11:5c:68:5a:3d:58:ac:d2:d4: a3:3f:ba:fc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErSNA6jxl80fzFGvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMTEyNDUyNFoXDTI3MTExNDEzNDUyNFowLzEtMCsGA1UEAxMk YTUxMTRlNjktYThlOS00MTZhLWE5OWItODE0NGUwNzY2NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsmiDgj+lXDyAPrjVufLObxxzQJIZ2fAI8qm ZsyNDN6hwrpAoAKx0W1qQsjpD+ylbVVcfwl94YZux4myRB5YKyi4rNLvcB7MjeBj yKIFSihBhmzTebJoxFSM0edVpUYuXPUlamgM2Oz6vYzfnPeOgodABp4o5kIc84C/ glxTwB/yNoNkBit2fZM28TYqcssCVnqEtZk30mBdxOCx7LCZ5t4sjTaAtsielzn1 hhg1XRxJYa7ha8DN4PtSG5aKH/KVwN5UrxsAv1qUiG1q9JI3HdbhVZoSGnrvmvq0 A6rGztyHt45giz2ze1ULc/Ntrjqqk5pUdNYcYhXkgotdP01sZQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHp4DIR2SpvVgFajcGiWEVB/d/9EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h NTExNGU2OS1hOGU5LTQxNmEtYTk5Yi04MTQ0ZTA3NjY0Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E1MTE0ZTY5LWE4ZTktNDE2YS1h OTliLTgxNDRlMDc2NjRjZS9hNTExNGU2OS1hOGU5LTQxNmEtYTk5Yi04MTQ0ZTA3 NjY0Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/XAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWGGMM1F58o+jukdLjjY6 q6A/8syFpPF6UbHTUE0NQktSLwn0OOctJgjyBHoDjMZYzmf5WAcHt9G5sxxaEL7z /AuHW1n1EokdiOnxELAasqtWz+njAAetzwNKu5weD2TjPL6pubWk7o6RQo4/pL0v Ta9CPReYKOXkyQeRzVsapw/W0NgEkkzddscwvkhmHe1CRNo6YhCtyzyau2yjwAHZ RpwlJ9S5aOWXsJWRu1NiXv4KgmdxYeH1+tM9SkwvUciP/pfwgSMLzKwyUFPxl+23 dUUrQb4ZR83Vd0uixthmYy6Rb9L2xknaIJnVzm0xe4nqlmopEVxoWj1YrNLUoz+6 /A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:58 2025 by rpki-client