$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer File: a5227ba9-e279-4048-a93b-e62de3502f68.cer (raw, json) Hash identifier: 5nuScmNjAcR9o6u2uQD/1XinVZ8g5wV7b+2AO+BoFsg= Subject key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B99CFF55367B1E207B3153E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:23 +0000 Certificate not after: Tue 25 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 395896 IP: 64.89.48.0/20 IP: 2620:d3:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:cf:f5:53:67:b1:e2:07:b3:15:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 22 00:45:23 2025 GMT Not After : Jan 25 01:45:23 2028 GMT Subject: CN=a5227ba9-e279-4048-a93b-e62de3502f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:9a:e8:50:8a:56:8d:e9:0d:c2:f2:41:17: 33:c9:74:43:ab:3e:f7:55:27:64:65:8d:7e:97:c4: 9d:10:04:6d:bf:43:a5:2a:4f:6c:3f:11:15:47:ef: 34:c1:63:ba:b3:04:3e:6c:b3:25:5d:f0:19:da:a1: 37:23:6e:86:09:d4:4f:fa:38:29:62:10:6b:a6:b7: 90:d7:ef:ad:b8:1e:ab:90:85:0b:e9:46:20:9a:6b: 7b:24:e6:1c:51:07:50:97:66:dc:3d:cb:74:c1:ab: 68:dc:24:93:ab:0d:b0:5b:dd:6f:3d:f8:d7:3b:aa: 1d:a1:d2:66:ae:45:2f:69:2f:2a:9a:a9:e3:e2:2d: 7d:a6:c2:39:b5:8e:45:64:b1:bb:5f:66:3d:a5:ee: 7a:3d:6b:d1:4f:e2:fb:2b:bd:cb:a4:3e:0b:d1:71: 2c:2c:99:3a:2a:98:ea:ec:8e:d0:3e:f5:7a:f9:26: c3:52:e3:62:ab:bf:92:8e:51:65:f1:09:db:b5:8a: ca:02:67:01:d5:d9:a5:67:46:e7:1d:7f:ac:02:cb: 98:5a:73:b2:14:38:88:b0:8a:b9:94:93:83:69:57: a8:fa:ea:1c:ca:d8:dd:16:ff:f6:9e:0a:83:db:cf: 16:e8:ed:68:5e:8f:10:4b:77:fd:0a:e8:16:b9:72: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.89.48.0/20 IPv6: 2620:d3:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395896 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f2:d1:70:d6:77:09:30:c6:94:25:16:e0:4e:7b:b0:c5:0e: 8e:e7:25:b7:78:56:0b:fc:05:6e:45:ec:5c:86:12:db:83:91: 9f:9c:7a:d2:ec:22:ff:8e:91:92:b0:18:c9:fd:a9:b9:eb:e8: ec:63:d7:dd:52:5b:03:44:c2:82:95:87:23:88:99:05:ba:21: cf:ae:01:dc:fe:82:7b:aa:79:3b:31:23:51:28:65:d6:92:b8: b5:4b:21:31:25:d2:5b:54:a0:bd:88:af:37:25:2b:69:80:c7: 4b:1c:b8:4a:8a:15:5f:00:f6:0c:85:3d:42:48:b6:03:56:04: 5a:43:1e:04:07:41:a7:e3:38:4e:8b:c2:43:d6:2f:82:1f:aa: 98:f2:a7:85:3d:de:57:1b:dd:ff:12:5e:65:48:e3:8f:48:2c: 60:81:4a:2c:37:23:1c:b1:13:8d:98:1a:70:9a:0c:c2:c8:52: fa:aa:05:66:f5:da:97:bc:98:a2:fc:d6:9c:33:92:55:b3:55: 96:bd:9a:42:45:08:b7:c3:39:4e:d3:dd:db:a3:4d:6b:ba:cd: 13:6a:57:4c:74:1b:68:2e:ab:eb:1e:d8:11:13:c8:71:ec:5c: 09:14:85:f6:c6:bd:99:c3:31:4f:f2:9c:f0:69:09:f4:f5:52: d2:37:89:6e -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEuZz/VTZ7HiB7MVPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMjAwNDUyM1oXDTI4MDEyNTAxNDUyM1owLzEtMCsGA1UEAxMk YTUyMjdiYTktZTI3OS00MDQ4LWE5M2ItZTYyZGUzNTAyZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/2a6FCKVo3pDcLyQRczyXRDqz73VSdkZY1+ l8SdEARtv0OlKk9sPxEVR+80wWO6swQ+bLMlXfAZ2qE3I26GCdRP+jgpYhBrpreQ 1++tuB6rkIUL6UYgmmt7JOYcUQdQl2bcPct0wato3CSTqw2wW91vPfjXO6ododJm rkUvaS8qmqnj4i19psI5tY5FZLG7X2Y9pe56PWvRT+L7K73LpD4L0XEsLJk6Kpjq 7I7QPvV6+SbDUuNiq7+SjlFl8QnbtYrKAmcB1dmlZ0bnHX+sAsuYWnOyFDiIsIq5 lJODaVeo+uocytjdFv/2ngqD288W6O1oXo8QS3f9CugWuXJqLwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFEQC8s484lvF+Rec60pbSzw6PpbwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h NTIyN2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJkZTM1MDJmNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E1MjI3YmE5LWUyNzktNDA0OC1h OTNiLWU2MmRlMzUwMmY2OC9hNTIyN2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJkZTM1 MDJmNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARAWTAwDwQCAAIwCQMHACYgANPgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGCngwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAPLRcNZ3CTDGlCUW4E57sMUO juclt3hWC/wFbkXsXIYS24ORn5x60uwi/46RkrAYyf2puevo7GPX3VJbA0TCgpWH I4iZBbohz64B3P6Ce6p5OzEjUShl1pK4tUshMSXSW1SgvYivNyUraYDHSxy4SooV XwD2DIU9Qki2A1YEWkMeBAdBp+M4TovCQ9Yvgh+qmPKnhT3eVxvd/xJeZUjjj0gs YIFKLDcjHLETjZgacJoMwshS+qoFZvXal7yYovzWnDOSVbNVlr2aQkUIt8M5TtPd 26NNa7rNE2pXTHQbaC6r6x7YERPIcexcCRSF9sa9mcMxT/Kc8GkJ9PVS0jeJbg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:30 2025 by rpki-client