$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306.cer File: cd75cdfc-0d09-4c46-ab4d-af3eeabaf306.cer (raw, json) Hash identifier: CigD/D5SLgkKmaX8ckAcmB60SQ1tGlJYMR1xYaGxplQ= Subject key identifier: 0D:9D:7E:15:E5:89:3C:3C:FE:3F:AF:22:A8:96:34:83:12:9F:14:0D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B970546020D12F60EF0186C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 00:45:23 +0000 Certificate not after: Mon 24 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 401247 IP: 2607:c5c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:05:46:02:0d:12:f6:0e:f0:18:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 21 00:45:23 2025 GMT Not After : Jan 24 01:45:23 2028 GMT Subject: CN=cd75cdfc-0d09-4c46-ab4d-af3eeabaf306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:48:f2:93:c0:41:25:28:10:12:02:ae:38: 47:ae:33:75:41:2b:8f:d5:1b:47:7d:f2:e7:4d:2b: c6:c5:40:98:e5:29:6a:20:8d:9e:68:93:ff:e1:3d: cb:ec:02:bd:cb:60:3b:e0:24:1a:7e:8f:a3:c7:24: a6:32:4b:7c:3d:14:a2:d1:40:f9:2a:2d:94:3f:6f: c7:74:b4:4b:dc:aa:f3:42:fe:56:a4:76:49:2c:71: a2:00:73:61:ae:6e:0e:61:a9:9b:82:52:06:13:be: 5f:2d:39:a2:6e:13:ac:9d:e2:a7:fd:4c:20:81:04: 1c:56:63:22:c6:2f:f5:bc:bc:64:1a:61:97:1a:f1: 97:c1:d4:93:ab:3c:76:b3:43:3f:89:f0:f5:1e:c0: bb:ae:09:de:ff:d6:21:7c:91:ed:6c:0f:9d:88:eb: 70:2c:e1:ba:28:b5:2f:3b:2e:e4:ce:72:07:6c:aa: dd:6b:8d:77:2c:1a:c4:d6:d7:7f:25:49:b0:bf:26: cc:28:95:e4:71:47:a0:62:ca:81:65:6b:43:64:f5: 1f:f8:a0:ad:cb:1c:db:35:58:e1:1a:35:fe:8f:87: bb:96:af:4b:03:11:72:7e:f9:f6:18:7a:4c:d5:82: 45:2f:ef:ed:e6:61:fa:e8:e4:43:11:3e:62:1c:7e: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:7E:15:E5:89:3C:3C:FE:3F:AF:22:A8:96:34:83:12:9F:14:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306/cd75cdfc-0d09-4c46-ab4d-af3eeabaf306.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2607:c5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401247 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:d4:3e:ee:59:cd:75:b2:2c:4b:1a:7d:ae:66:60:4b:0d: 26:08:3c:a2:6e:a0:53:ab:e6:6c:53:02:4e:f3:b0:37:f9:5c: 63:85:40:18:f8:8b:27:f6:e3:07:95:23:7d:07:a3:11:e2:3b: 9e:4a:92:ff:59:4c:47:b9:2f:0c:2e:6d:19:db:5f:68:58:27: 60:19:2e:02:f8:9e:03:42:57:0b:5f:d9:36:67:a3:10:f3:f3: 19:b9:17:78:41:a5:55:7a:e0:e3:1f:1e:92:b0:3e:fa:b3:4f: ad:7e:20:e2:85:4a:7d:33:e6:a0:ea:c5:bd:d6:9c:c8:5e:59: 32:18:3b:23:dc:21:d7:76:31:30:06:bb:88:03:46:75:b2:18: 96:64:51:9f:e1:5c:f8:df:f4:82:2d:cc:1e:c8:a7:72:4c:11: 89:43:57:81:d8:7d:b3:24:33:a4:c8:c7:75:e1:61:dc:a9:18: 0e:00:32:da:b0:3b:04:ad:cd:d3:3b:e6:79:6a:db:d1:ad:ba: d1:31:7e:9d:5e:3f:9b:bc:08:af:c8:e1:bb:02:64:5c:35:31: b0:73:d3:0c:4f:c6:f6:9c:af:54:fd:c3:8d:d1:b8:f5:65:75: c7:32:5f:aa:55:54:db:9a:38:f0:6c:69:aa:54:91:b5:7f:5f: d3:26:bc:2c -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEuXBUYCDRL2DvAYbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMTAwNDUyM1oXDTI4MDEyNDAxNDUyM1owLzEtMCsGA1UEAxMk Y2Q3NWNkZmMtMGQwOS00YzQ2LWFiNGQtYWYzZWVhYmFmMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifxI8pPAQSUoEBICrjhHrjN1QSuP1RtHffLn TSvGxUCY5SlqII2eaJP/4T3L7AK9y2A74CQafo+jxySmMkt8PRSi0UD5Ki2UP2/H dLRL3KrzQv5WpHZJLHGiAHNhrm4OYambglIGE75fLTmibhOsneKn/UwggQQcVmMi xi/1vLxkGmGXGvGXwdSTqzx2s0M/ifD1HsC7rgne/9YhfJHtbA+diOtwLOG6KLUv Oy7kznIHbKrda413LBrE1td/JUmwvybMKJXkcUegYsqBZWtDZPUf+KCtyxzbNVjh GjX+j4e7lq9LAxFyfvn2GHpM1YJFL+/t5mH66ORDET5iHH7E0QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFA2dfhXliTw8/j+vIqiWNIMSnxQNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j ZDc1Y2RmYy0wZDA5LTRjNDYtYWI0ZC1hZjNlZWFiYWYzMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NkNzVjZGZjLTBkMDktNGM0Ni1h YjRkLWFmM2VlYWJhZjMwNi9jZDc1Y2RmYy0wZDA5LTRjNDYtYWI0ZC1hZjNlZWFi YWYzMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB8XAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYfXzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAbcNQ+7lnNdbIsSxp9rmZgSw0mCDyibqBTq+ZsUwJO87A3 +VxjhUAY+Isn9uMHlSN9B6MR4jueSpL/WUxHuS8MLm0Z219oWCdgGS4C+J4DQlcL X9k2Z6MQ8/MZuRd4QaVVeuDjHx6SsD76s0+tfiDihUp9M+ag6sW91pzIXlkyGDsj 3CHXdjEwBruIA0Z1shiWZFGf4Vz43/SCLcweyKdyTBGJQ1eB2H2zJDOkyMd14WHc qRgOADLasDsErc3TO+Z5atvRrbrRMX6dXj+bvAivyOG7AmRcNTGwc9MMT8b2nK9U /cON0bj1ZXXHMl+qVVTbmjjwbGmqVJG1f1/TJrws -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:31 2025 by rpki-client