$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2.cer File: a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2.cer (raw, json) Hash identifier: 3bmn5TFAsIjPEcwSQLD/R9yHUxunl6tmFkVLG2CuoYE= Subject key identifier: B7:E8:50:A9:EE:C0:00:2B:11:EB:7D:6B:75:B4:06:EF:B6:95:3C:4F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BC1034FC48BC82CF8D35FE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 01:45:23 +0000 Certificate not after: Tue 08 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 15212 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:03:4f:c4:8b:c8:2c:f8:d3:5f:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 5 01:45:23 2025 GMT Not After : Feb 8 01:45:23 2028 GMT Subject: CN=a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:4b:db:ed:b3:01:5c:62:c1:17:0e:7e:fe: c2:c9:03:62:a5:02:16:8d:1c:13:e7:b4:14:5f:c2: 42:19:1e:0d:69:bd:04:8b:64:75:0e:e6:a4:cb:8c: 80:ec:22:93:ba:9f:d2:ad:f5:db:10:94:4c:3d:e0: fd:18:52:dd:8d:38:97:d1:92:52:09:cd:cb:e6:2b: 39:f6:33:6e:c7:bf:90:f2:da:40:e6:10:85:78:70: 1b:c1:b8:bb:5e:d3:b6:ab:a4:ea:1a:7e:6f:fa:97: 1e:7c:17:92:80:7f:01:e7:32:37:c0:3d:55:11:b7: 83:33:68:23:1e:fc:ce:76:08:ee:20:63:2f:3f:c1: 98:1d:e2:d3:0a:30:7e:2e:c6:f7:53:dd:aa:fb:94: ff:04:8a:46:4b:ea:87:22:3c:91:8c:56:2c:28:b6: a0:0f:16:64:7c:38:cd:4e:82:88:93:82:ef:0b:bf: dc:f3:74:29:0f:5a:f3:29:a5:cf:f7:ee:a0:dc:5a: 24:93:d4:0d:95:72:19:cf:ca:99:85:4e:c6:ab:13: 38:21:f6:f7:da:45:bd:ef:c3:e4:3d:ea:9b:0f:f7: f5:e3:f0:fa:c0:a2:3a:9c:fb:f4:85:5e:3f:b8:9d: 7f:a6:fb:d8:a2:91:b3:07:87:0a:e8:2e:dc:7e:d6: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:50:A9:EE:C0:00:2B:11:EB:7D:6B:75:B4:06:EF:B6:95:3C:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2/a6c3afb0-b13e-4e59-8ea6-9e5c78f9b4e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 15212 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b6:ea:13:9e:18:8b:39:cf:68:32:bd:67:c6:9b:77:f6:93: 24:19:eb:5d:7b:cc:64:b3:54:4d:e9:a4:f8:86:a0:f2:9a:7d: d0:bf:f5:9e:ff:05:ec:9e:eb:c3:9b:75:37:4a:7d:86:21:25: 3a:56:15:57:c2:78:a1:61:98:d7:93:75:c8:f9:ce:6f:14:c6: 47:c8:c3:6f:c9:aa:0d:a6:6c:e0:fd:cc:43:b1:2c:4f:26:25: 63:42:50:be:d8:6e:ad:be:9f:13:76:3b:86:c3:d3:c2:6b:77: ca:0d:2b:32:59:53:bd:a9:13:bd:91:b8:11:98:9e:3a:9a:81: c1:0f:27:82:9b:a5:46:71:8d:ba:f7:1f:84:73:d4:54:e4:c8: 25:2b:51:d0:f2:3a:e8:a5:39:9a:79:24:cd:0b:15:9f:d6:b5: 8b:de:69:7c:f5:41:7a:42:0b:48:f9:9d:f1:ed:50:76:a9:ad: 8f:f5:f1:68:19:d2:c5:4f:91:5d:ca:59:01:97:98:3b:83:9d: f3:ff:f7:3d:f8:81:05:ef:ad:b0:b9:87:6b:80:f8:a2:b7:f7: c2:e1:a0:54:ff:5f:62:92:4a:df:83:92:72:aa:1d:1b:5a:f7: 92:ff:e8:39:fe:2f:85:85:65:4d:11:85:6a:b2:12:5d:a8:b8: 97:15:d1:4c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEvBA0/Ei8gs+NNf5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwNTAxNDUyM1oXDTI4MDIwODAxNDUyM1owLzEtMCsGA1UEAxMk YTZjM2FmYjAtYjEzZS00ZTU5LThlYTYtOWU1Yzc4ZjliNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5hL2+2zAVxiwRcOfv7CyQNipQIWjRwT57QU X8JCGR4Nab0Ei2R1Duaky4yA7CKTup/SrfXbEJRMPeD9GFLdjTiX0ZJSCc3L5is5 9jNux7+Q8tpA5hCFeHAbwbi7XtO2q6TqGn5v+pcefBeSgH8B5zI3wD1VEbeDM2gj HvzOdgjuIGMvP8GYHeLTCjB+Lsb3U92q+5T/BIpGS+qHIjyRjFYsKLagDxZkfDjN ToKIk4LvC7/c83QpD1rzKaXP9+6g3Fokk9QNlXIZz8qZhU7GqxM4Ifb32kW978Pk PeqbD/f14/D6wKI6nPv0hV4/uJ1/pvvYopGzB4cK6C7cftZ9swIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLfoUKnuwAArEet9a3W0Bu+2lTxPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h NmMzYWZiMC1iMTNlLTRlNTktOGVhNi05ZTVjNzhmOWI0ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E2YzNhZmIwLWIxM2UtNGU1OS04 ZWE2LTllNWM3OGY5YjRlMi9hNmMzYWZiMC1iMTNlLTRlNTktOGVhNi05ZTVjNzhm OWI0ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICO2wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAabbqE54YiznPaDK9Z8abd/aTJBnr XXvMZLNUTemk+Iag8pp90L/1nv8F7J7rw5t1N0p9hiElOlYVV8J4oWGY15N1yPnO bxTGR8jDb8mqDaZs4P3MQ7EsTyYlY0JQvthurb6fE3Y7hsPTwmt3yg0rMllTvakT vZG4EZieOpqBwQ8ngpulRnGNuvcfhHPUVOTIJStR0PI66KU5mnkkzQsVn9a1i95p fPVBekILSPmd8e1Qdqmtj/XxaBnSxU+RXcpZAZeYO4Od8//3PfiBBe+tsLmHa4D4 orf3wuGgVP9fYpJK34OScqodG1r3kv/oOf4vhYVlTRGFarISXai4lxXRTA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:14 2025 by rpki-client