$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer File: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer (raw, json) Hash identifier: dEeUJm/YUNdsUl2tYDhBq5vtNVCZ/vTk/k9AexKXkKY= Subject key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BA7C561ADFCC490D8AADA2300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 00:45:23 +0000 Certificate not after: Sun 30 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 394438 IP: 192.163.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:c5:61:ad:fc:c4:90:d8:aa:da:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 27 00:45:23 2025 GMT Not After : Jan 30 01:45:23 2028 GMT Subject: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:b2:0b:c5:94:f5:b5:4e:47:29:3c:b9:c1: 0f:d7:32:3b:a5:a4:e8:12:20:4e:25:34:17:92:fe: d6:f8:18:5d:10:68:33:28:36:ff:ac:23:0e:35:f5: 9c:aa:3d:ba:48:03:bb:30:3c:2e:9f:dd:75:91:d1: b0:69:13:99:5b:59:66:e2:a2:1d:62:c9:b9:6d:21: e1:c9:03:21:4c:d9:8c:ef:96:09:ee:be:16:84:60: ae:a6:52:ff:3a:a3:4d:ee:4d:3f:89:7c:b1:e4:4b: 90:4b:8b:e8:22:48:eb:9a:a7:f4:6a:7a:b2:df:34: 34:66:78:03:e6:bb:5f:85:62:4f:76:a1:5d:3a:1b: a3:d0:0f:a3:f9:58:0a:af:c3:0e:a8:d0:a3:2f:e9: 59:57:93:de:88:53:0f:47:04:f7:af:e5:b3:6e:60: 86:8d:c1:0c:a4:08:7a:9c:f4:42:f7:72:53:1e:9a: 15:8e:0c:62:33:b9:66:b4:ef:b3:5e:99:d6:8a:bc: d4:d8:c1:12:93:78:01:13:6a:74:f9:6f:71:9e:d1: 38:af:ea:fa:bc:5d:ee:cf:f7:0e:36:62:77:22:3d: 31:36:92:93:c0:21:0d:7f:57:41:2c:8f:ee:fa:9b: 94:5f:6a:27:90:c1:95:37:42:2d:6b:84:4a:da:c0: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.163.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394438 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1e:d9:df:a4:f3:9b:74:a3:20:ae:02:76:85:a6:11:29:a7: 1a:27:d5:99:42:1c:76:ca:43:d7:99:d4:2b:04:50:8b:7e:52: 37:1e:f7:04:e0:2d:dc:69:14:98:67:f7:37:93:ce:e3:8d:35: 91:fc:6e:b9:fe:f1:19:37:92:39:40:27:a8:78:c4:43:cb:08: 05:16:50:cc:40:0b:58:51:87:cd:46:af:f7:6e:4a:b0:6a:7a: 9e:30:1b:b7:65:40:4e:76:ad:0c:78:5b:c9:bb:27:dd:a4:32: e4:34:2a:51:e3:a3:3f:61:68:5e:44:23:e1:90:bc:ad:20:11: 6d:e0:08:77:49:f4:06:bb:4f:f0:26:86:ad:a9:06:f8:ad:5a: 10:f1:a8:49:f7:e4:6c:02:1d:1b:f0:b5:d6:53:4a:a0:fe:70: 21:7d:94:1a:b1:11:84:f5:64:40:cd:52:ab:59:0c:c8:1d:24: 07:25:af:01:e4:ca:30:b8:30:56:0b:d1:ec:ed:90:60:66:51: 89:fc:1f:47:73:dd:f7:2c:34:8c:ce:89:e6:17:fe:cc:e2:c2: 2c:f5:59:dc:21:86:4e:45:d3:6a:16:60:54:b8:13:df:f5:1d: 17:25:f0:6d:15:77:2c:0c:ff:d3:9a:67:0a:77:80:63:b5:d5: 25:03:6c:31 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEunxWGt/MSQ2KraIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyNzAwNDUyM1oXDTI4MDEzMDAxNDUyM1owLzEtMCsGA1UEAxMk YjM5ODdhMDItOWViMy00Zjg4LThlOWEtMmJhNTUwYzM0NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNqyC8WU9bVORyk8ucEP1zI7paToEiBOJTQX kv7W+BhdEGgzKDb/rCMONfWcqj26SAO7MDwun911kdGwaROZW1lm4qIdYsm5bSHh yQMhTNmM75YJ7r4WhGCuplL/OqNN7k0/iXyx5EuQS4voIkjrmqf0anqy3zQ0ZngD 5rtfhWJPdqFdOhuj0A+j+VgKr8MOqNCjL+lZV5PeiFMPRwT3r+WzbmCGjcEMpAh6 nPRC93JTHpoVjgxiM7lmtO+zXpnWirzU2MESk3gBE2p0+W9xntE4r+r6vF3uz/cO NmJ3Ij0xNpKTwCENf1dBLI/u+puUX2onkMGVN0Ita4RK2sB/uQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEBbNg/g8CwLB+AXS0+kZnovL8QZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i Mzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBjMzQ0M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2IzOTg3YTAyLTllYjMtNGY4OC04 ZTlhLTJiYTU1MGMzNDQzYi9iMzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBj MzQ0M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAowAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgTGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAwe2d+k85t0oyCuAnaFphEppxon1ZlCHHbKQ9eZ1CsEUIt+ Ujce9wTgLdxpFJhn9zeTzuONNZH8brn+8Rk3kjlAJ6h4xEPLCAUWUMxAC1hRh81G r/duSrBqep4wG7dlQE52rQx4W8m7J92kMuQ0KlHjoz9haF5EI+GQvK0gEW3gCHdJ 9Aa7T/Amhq2pBvitWhDxqEn35GwCHRvwtdZTSqD+cCF9lBqxEYT1ZEDNUqtZDMgd JAclrwHkyjC4MFYL0eztkGBmUYn8H0dz3fcsNIzOieYX/sziwiz1Wdwhhk5F02oW YFS4E9/1HRcl8G0VdywM/9OaZwp3gGO11SUDbDE= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:38 2025 by rpki-client