$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer File: bacde40d-2f28-483a-8cfd-628d470b87a7.cer (raw, json) Hash identifier: wGBZPCskjmcAWy7+U6i1KHmNcbqDXIpzc6tM1L7F4O0= Subject key identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B269CCEF70294222F8CD26A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 18:24:22 +0000 Certificate not after: Sun 07 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 398863 IP: 64.112.188.0/23 IP: 204.8.177.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:9c:ce:f7:02:94:22:2f:8c:d2:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 10 18:24:22 2025 GMT Not After : Nov 7 00:45:24 2027 GMT Subject: CN=bacde40d-2f28-483a-8cfd-628d470b87a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:f2:25:19:40:4d:65:1e:d4:61:92:74:2f: fa:3e:81:7c:ad:65:d7:b3:3d:19:db:39:14:3b:90: 21:2e:6d:71:96:1d:15:e5:32:85:b2:18:6d:e0:26: 80:16:18:47:7e:e7:65:3d:dc:7e:ac:bb:72:ff:f2: 50:1c:c9:25:68:32:f7:d3:74:75:d4:93:f7:50:01: b7:7d:85:45:a5:89:9a:18:ac:1e:d9:85:db:d3:c0: 3a:8c:9a:ce:10:a6:a9:f8:00:32:68:70:ff:45:37: 24:32:58:ef:73:63:c5:24:4a:3e:74:75:ef:1f:75: 77:f8:af:2e:87:cd:e5:89:b3:ea:8c:35:a2:15:5f: 16:db:75:f8:fc:d2:69:95:40:c3:04:8f:f1:0c:7e: d1:95:aa:f3:c5:b0:80:93:95:28:41:93:cf:21:74: 54:41:80:e4:dd:ef:75:8d:c0:c3:8c:2c:09:bd:f8: 14:4d:cc:5e:54:d3:91:d2:d1:ed:a0:07:27:56:91: 85:42:0b:b9:35:38:49:02:e2:30:7b:62:2a:4b:ef: 6b:aa:63:00:22:1f:69:5c:79:ca:32:73:61:bc:0b: 74:6a:0e:18:1d:bf:aa:74:61:85:68:70:c1:6b:c9: a2:1e:81:ee:18:06:56:24:13:f8:32:6b:f0:a3:91: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.112.188.0/23 204.8.177.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398863 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cb:ac:83:34:f7:d2:58:66:cb:4d:ec:3a:74:0f:08:e1:80: e3:6b:8c:b0:40:54:6d:ab:35:67:69:7d:ae:68:8d:c0:70:47: 88:7e:ba:62:b2:82:26:24:a1:cd:5d:c1:dd:37:ad:61:ad:3e: a1:40:ee:f3:13:c8:00:5e:f4:0c:07:2c:50:5d:e9:ee:eb:db: c3:aa:b8:c6:da:47:76:e5:4c:ed:3a:08:c3:70:d4:a1:d3:7d: 11:f0:80:a5:b8:23:71:6b:12:79:30:62:c0:28:4a:b2:9d:b5: ea:d0:4a:f3:9e:19:d5:43:04:4f:3f:04:7f:df:6d:0e:22:a2: 58:b7:b2:64:91:01:20:26:7f:5e:de:fd:bb:43:77:d6:87:a1: 2a:30:f3:35:3e:13:d3:4d:b0:7e:cc:da:9c:de:3e:91:bb:c8: 56:2f:d8:42:1b:ab:5c:7c:37:f1:5b:a2:da:ba:bc:fa:cf:11: 70:29:d2:24:60:81:9b:e8:67:26:12:b7:26:95:9c:93:21:e7: 41:39:5f:91:31:07:c4:4f:e0:8f:aa:d5:f7:21:4c:02:ae:43: 0b:8f:83:bd:77:67:41:52:d1:34:74:a4:77:bc:c9:dc:bd:f5: e5:a9:8b:99:12:df:ff:7c:02:86:cd:44:eb:30:bf:d7:57:24: e6:29:71:3b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEsmnM73ApQiL4zSakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxMDE4MjQyMloXDTI3MTEwNzAwNDUyNFowLzEtMCsGA1UEAxMk YmFjZGU0MGQtMmYyOC00ODNhLThjZmQtNjI4ZDQ3MGI4N2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3zyJRlATWUe1GGSdC/6PoF8rWXXsz0Z2zkU O5AhLm1xlh0V5TKFshht4CaAFhhHfudlPdx+rLty//JQHMklaDL303R11JP3UAG3 fYVFpYmaGKwe2YXb08A6jJrOEKap+AAyaHD/RTckMljvc2PFJEo+dHXvH3V3+K8u h83libPqjDWiFV8W23X4/NJplUDDBI/xDH7RlarzxbCAk5UoQZPPIXRUQYDk3e91 jcDDjCwJvfgUTcxeVNOR0tHtoAcnVpGFQgu5NThJAuIwe2IqS+9rqmMAIh9pXHnK MnNhvAt0ag4YHb+qdGGFaHDBa8miHoHuGAZWJBP4Mmvwo5FnbQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBzfnZBYBl3LXHQCqDAFQ3/5BsUmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YWNkZTQwZC0yZjI4LTQ4M2EtOGNmZC02MjhkNDcwYjg3YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhY2RlNDBkLTJmMjgtNDgzYS04 Y2ZkLTYyOGQ0NzBiODdhNy9iYWNkZTQwZC0yZjI4LTQ4M2EtOGNmZC02MjhkNDcw Yjg3YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFAcLwDBADMCLEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGjLrIM099JYZstN7Dp0DwjhgONrjLBAVG2rNWdp fa5ojcBwR4h+umKygiYkoc1dwd03rWGtPqFA7vMTyABe9AwHLFBd6e7r28OquMba R3blTO06CMNw1KHTfRHwgKW4I3FrEnkwYsAoSrKdterQSvOeGdVDBE8/BH/fbQ4i oli3smSRASAmf17e/btDd9aHoSow8zU+E9NNsH7M2pzePpG7yFYv2EIbq1x8N/Fb otq6vPrPEXAp0iRggZvoZyYStyaVnJMh50E5X5ExB8RP4I+q1fchTAKuQwuPg713 Z0FS0TR0pHe8ydy99eWpi5kS3/98AobNROswv9dXJOYpcTs= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:25 2025 by rpki-client