$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer File: b1f976fd-7fa0-4323-97fa-35bb869a9231.cer (raw, json) Hash identifier: Q5FB9v5+oGlPSBJR2zaOPUq08cEgoCSLjuBeWbOHA8M= Subject key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B9C9AA5EEE32E1DD81B7B2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 00:45:24 +0000 Certificate not after: Wed 26 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 96.125.0.0/17 IP: 167.96.0.0/16 IP: 173.253.128.0/17 IP: 2620:105:b000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:9a:a5:ee:e3:2e:1d:d8:1b:7b:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 23 00:45:24 2025 GMT Not After : Jan 26 01:45:24 2028 GMT Subject: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:5d:d1:1c:12:bf:b0:1c:71:ac:af:87:ed: 85:32:13:0d:55:65:36:24:bf:90:6c:5a:2a:77:b4: be:ea:35:f7:6c:09:20:ce:c7:11:a6:7d:04:bb:c8: a1:4d:e3:28:37:05:73:89:b9:ef:30:ab:d7:16:0e: 48:50:f2:49:07:06:b5:da:8c:f9:6f:5a:cf:6c:ec: e6:0e:c0:d3:de:85:b1:a3:6e:0f:90:8b:53:35:57: d9:71:ea:73:23:ae:65:aa:ee:ff:cc:b0:ae:25:63: 5a:22:3d:d0:e7:26:2e:9b:57:96:60:6f:2a:77:21: c7:5d:f1:2e:6e:2e:4c:15:31:8a:ad:9e:78:4e:fa: 96:4c:cf:18:bf:d5:24:b3:65:1a:c5:01:19:b5:fa: 6b:59:bf:be:fd:13:35:43:71:ff:4c:53:9b:04:29: 95:9a:8d:3d:18:29:1b:d3:04:40:c7:04:1a:37:7c: d3:1e:1e:eb:2f:4e:f7:fd:77:5d:63:5a:ac:a9:9b: 6e:08:2c:40:82:70:9e:c0:76:d2:ad:5a:0c:96:fb: 55:47:e6:93:1c:1a:1a:45:da:e0:68:48:6e:51:0a: 8d:57:92:8d:ae:77:52:c5:7e:d3:a1:ab:0f:e7:64: ca:f7:b2:e7:c9:58:56:44:d6:3b:90:ab:5d:04:c4: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 96.125.0.0/17 167.96.0.0/16 173.253.128.0/17 IPv6: 2620:105:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3e:e4:07:e3:5c:1d:cb:1d:74:c7:b6:8f:41:c1:f5:63:70: 4b:0c:bb:eb:64:51:ef:09:b7:1e:5d:31:b5:2c:e2:65:4e:4b: 3f:07:35:cc:c8:35:e5:f1:c7:96:ec:ab:84:9c:c1:8d:ab:87: 45:76:40:28:4a:1d:b6:4e:2d:d2:23:5b:f0:ee:97:29:4b:d4: 90:b5:f1:ee:de:3f:ff:9e:63:e4:4c:8e:2b:b7:e7:7e:81:0c: 83:6f:76:0a:b3:ed:46:ac:52:a7:fd:6e:76:87:86:9a:1f:e5: 26:76:67:c9:99:46:15:ea:79:93:29:66:22:ee:f6:8f:48:57: 61:cb:c5:d2:cc:9a:19:b6:a7:b4:b8:0c:d0:04:04:c3:20:97: 28:08:b7:76:97:7d:5f:b0:4d:52:aa:f3:d5:d6:f4:6a:32:2b: 3d:ca:0f:61:64:96:f3:ff:fa:8a:cd:60:75:26:ad:29:26:94: 08:37:01:15:90:26:40:1a:01:13:44:ef:79:6e:ee:19:03:f5: 82:80:99:be:45:31:fa:9e:12:8a:2b:be:b6:96:04:e1:ff:e7: ea:38:55:9a:71:84:1f:08:66:61:91:92:48:08:f8:a9:85:b2: 0d:d9:f3:0f:25:94:83:5e:98:af:30:9a:85:eb:e8:e7:4d:a3: 3f:26:f5:48 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEucmqXu4y4d2Bt7LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMzAwNDUyNFoXDTI4MDEyNjAxNDUyNFowLzEtMCsGA1UEAxMk YjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptVd0RwSv7Accayvh+2FMhMNVWU2JL+QbFoq d7S+6jX3bAkgzscRpn0Eu8ihTeMoNwVzibnvMKvXFg5IUPJJBwa12oz5b1rPbOzm DsDT3oWxo24PkItTNVfZcepzI65lqu7/zLCuJWNaIj3Q5yYum1eWYG8qdyHHXfEu bi5MFTGKrZ54TvqWTM8Yv9Uks2UaxQEZtfprWb++/RM1Q3H/TFObBCmVmo09GCkb 0wRAxwQaN3zTHh7rL073/XddY1qsqZtuCCxAgnCewHbSrVoMlvtVR+aTHBoaRdrg aEhuUQqNV5KNrndSxX7ToasP52TK97LnyVhWRNY7kKtdBMSVZQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK6aJHGYheYLXT/uL/3KoWqU4Cc7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i MWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2IxZjk3NmZkLTdmYTAtNDMyMy05 N2ZhLTM1YmI4NjlhOTIzMS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5 YTkyMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBcEAgABMBEDBAdgfQADAwCnYAMEB639gDAOBAIAAjAIAwYAJiAB BbAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAD7kB+NcHcsddMe2j0HB9WNwSwy762RR7wm3Hl0xtSziZU5L Pwc1zMg15fHHluyrhJzBjauHRXZAKEodtk4t0iNb8O6XKUvUkLXx7t4//55j5EyO K7fnfoEMg292CrPtRqxSp/1udoeGmh/lJnZnyZlGFep5kylmIu72j0hXYcvF0sya GbantLgM0AQEwyCXKAi3dpd9X7BNUqrz1db0ajIrPcoPYWSW8//6is1gdSatKSaU CDcBFZAmQBoBE0TveW7uGQP1goCZvkUx+p4Siiu+tpYE4f/n6jhVmnGEHwhmYZGS SAj4qYWyDdnzDyWUg16YrzCahevo502jPyb1SA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:07:10 2025 by rpki-client