$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8e6a567-9253-4675-950a-044afd8ae640.cer File: a8e6a567-9253-4675-950a-044afd8ae640.cer (raw, json) Hash identifier: V/vhYcjUb/m2tQ/nZ9bxanIss1j4FLKtJVrax7U4ilw= Subject key identifier: 51:55:DF:06:D3:69:76:14:02:18:5F:AF:77:A2:B5:8E:22:ED:4D:CB Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE9EEDFB3E89475E07F217A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8e6a567-9253-4675-950a-044afd8ae640/a8e6a567-9253-4675-950a-044afd8ae640.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8e6a567-9253-4675-950a-044afd8ae640/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 00:45:24 +0000 Certificate not after: Tue 23 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 45.59.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ee:df:b3:e8:94:75:e0:7f:21:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 20 00:45:24 2025 GMT Not After : Nov 23 01:45:24 2027 GMT Subject: CN=a8e6a567-9253-4675-950a-044afd8ae640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:2d:46:4f:09:be:8f:c3:a9:24:1e:11:26: 2b:56:dc:bd:ac:0f:db:51:f3:ff:62:79:60:ec:1d: 5b:b6:54:7c:b0:2b:d3:a1:53:0b:ea:dd:0f:c9:e4: f7:51:7c:52:36:ec:d3:5f:ef:d2:54:bb:3a:4d:1c: d3:39:a5:0d:a9:81:3a:e6:bd:a7:93:82:4e:34:7d: e9:55:a5:27:33:5b:02:bf:85:9f:ca:87:a0:d9:e6: c5:e0:6a:e2:21:dc:c6:f1:f7:5b:50:90:1f:1b:ec: 85:75:d0:eb:52:38:91:49:47:23:b5:a4:ab:16:2d: ae:26:44:5a:96:9c:56:06:27:ce:f1:91:2b:33:bd: b4:5c:7e:aa:e0:8b:a1:c5:5b:d8:1f:2a:8a:eb:99: 98:2a:dc:03:f1:d1:a8:26:19:44:a5:d3:78:b8:fd: 32:76:8a:82:80:98:52:0d:0c:c1:50:e4:a9:8d:91: fc:ca:80:17:c7:c3:0c:44:50:a5:48:37:aa:ec:d9: 14:79:c4:0e:93:12:0d:4b:30:87:5f:2d:33:65:6d: cf:de:bf:cc:1e:71:ac:61:7d:3c:9d:b8:ec:b5:10: 58:a1:fa:61:5c:11:d9:96:26:84:aa:27:35:fb:e5: 34:13:80:a5:ef:63:ed:14:5b:1a:60:c4:56:36:e5: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:DF:06:D3:69:76:14:02:18:5F:AF:77:A2:B5:8E:22:ED:4D:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8e6a567-9253-4675-950a-044afd8ae640/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8e6a567-9253-4675-950a-044afd8ae640/a8e6a567-9253-4675-950a-044afd8ae640.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 45.59.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:39:6b:55:28:d4:5c:d3:b4:ba:33:ae:1b:08:48:34:89:9e: 46:f8:63:2b:ba:e3:2e:e8:22:1f:2b:58:d1:6e:ed:8b:bd:10: 8a:54:e5:09:49:a3:a7:91:e2:cc:d2:d1:ad:0f:4b:89:e8:cb: 4d:48:d4:22:04:47:09:31:7c:8b:49:64:76:c8:80:25:ff:01: 18:10:b2:d4:93:ff:a7:3c:57:f6:54:83:11:ce:cc:3a:45:1b: 69:b0:ba:e9:fc:8d:d0:65:00:a4:09:0a:ab:dc:b2:35:66:9a: d6:02:48:9f:89:a0:c2:09:89:61:7d:a4:b1:5c:61:ec:4a:ef: e8:70:d0:64:bc:d9:15:2f:cc:8e:10:f5:b3:fd:0e:79:09:16: d9:bd:2d:9e:1d:e1:ab:95:a8:7a:bc:b2:c3:08:d6:16:c8:a1: 04:7a:6a:cf:c4:d3:20:0c:26:0c:2c:35:c7:4b:bd:cb:5b:1b: 0b:72:b9:86:a0:b7:cd:21:ca:9f:7d:bc:97:ec:b7:8d:41:10: 2a:9c:df:27:49:f8:61:27:1a:80:da:01:e9:4d:d8:15:f3:a3: 61:da:00:62:36:ff:24:6d:34:28:d2:62:da:66:15:0f:cd:b9: 94:79:09:ba:d7:7d:4a:bb:85:e0:fc:90:bb:fc:b9:73:83:33: 72:bb:e7:a4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErp7t+z6JR14H8hegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgyMDAwNDUyNFoXDTI3MTEyMzAxNDUyNFowLzEtMCsGA1UEAxMk YThlNmE1NjctOTI1My00Njc1LTk1MGEtMDQ0YWZkOGFlNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsItRk8Jvo/DqSQeESYrVty9rA/bUfP/Ynlg 7B1btlR8sCvToVML6t0PyeT3UXxSNuzTX+/SVLs6TRzTOaUNqYE65r2nk4JONH3p VaUnM1sCv4Wfyoeg2ebF4GriIdzG8fdbUJAfG+yFddDrUjiRSUcjtaSrFi2uJkRa lpxWBifO8ZErM720XH6q4IuhxVvYHyqK65mYKtwD8dGoJhlEpdN4uP0ydoqCgJhS DQzBUOSpjZH8yoAXx8MMRFClSDeq7NkUecQOkxINSzCHXy0zZW3P3r/MHnGsYX08 nbjstRBYofphXBHZliaEqic1++U0E4Cl72PtFFsaYMRWNuX0FwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFFV3wbTaXYUAhhfr3eitY4i7U3LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OGU2YTU2Ny05MjUzLTQ2NzUtOTUwYS0wNDRhZmQ4YWU2NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E4ZTZhNTY3LTkyNTMtNDY3NS05 NTBhLTA0NGFmZDhhZTY0MC9hOGU2YTU2Ny05MjUzLTQ2NzUtOTUwYS0wNDRhZmQ4 YWU2NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItO2QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALDlrVSjUXNO0ujOuGwhI NImeRvhjK7rjLugiHytY0W7ti70QilTlCUmjp5HizNLRrQ9LiejLTUjUIgRHCTF8 i0lkdsiAJf8BGBCy1JP/pzxX9lSDEc7MOkUbabC66fyN0GUApAkKq9yyNWaa1gJI n4mgwgmJYX2ksVxh7Erv6HDQZLzZFS/MjhD1s/0OeQkW2b0tnh3hq5WoeryywwjW FsihBHpqz8TTIAwmDCw1x0u9y1sbC3K5hqC3zSHKn328l+y3jUEQKpzfJ0n4YSca gNoB6U3YFfOjYdoAYjb/JG00KNJi2mYVD825lHkJutd9SruF4PyQu/y5c4Mzcrvn pA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:38 2025 by rpki-client