$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer File: cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer (raw, json) Hash identifier: kKD0yEACSJIznJ6GXKinUK3zTqXG7YYnkKs21rgmzLs= Subject key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA6EE8FA1E09A265FC0EC9F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Jul 2025 00:45:37 +0000 Certificate not after: Sat 30 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 165.135.0.0/16 IP: 192.104.54.0/24 IP: 192.133.125.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:ee:8f:a1:e0:9a:26:5f:c0:ec:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 27 00:45:37 2025 GMT Not After : Oct 30 00:45:37 2027 GMT Subject: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:9c:41:19:72:ba:f0:9d:20:c1:58:e4:24: b3:a7:d9:53:86:cb:de:a2:24:8c:04:de:98:48:c3: e8:92:fe:91:29:45:04:c0:ae:cd:4a:81:d3:9c:44: 17:dc:de:2b:7c:c2:55:e9:88:99:27:d3:a0:45:96: 7c:7e:b7:35:20:65:0e:ea:ee:cb:94:23:b0:96:d3: 6d:80:94:1d:49:af:18:2c:b1:15:91:6e:09:d0:03: 0c:d9:34:b6:a7:70:8d:ea:97:e9:56:9f:ec:4f:d1: 7f:1a:bb:62:e8:77:da:78:1c:0d:e5:ef:ca:c7:cc: 49:9f:2e:e1:b8:57:69:c2:3f:ff:81:1a:de:ca:68: 2c:92:fd:25:1b:8d:70:25:cb:fb:87:f7:21:e3:da: c1:25:ab:f8:17:5c:22:38:10:d3:92:ca:f3:47:d3: 2f:0c:10:5c:b1:bd:a8:6d:d8:c1:81:ba:94:89:c9: 6a:4b:a6:a7:d5:b7:76:ac:8e:77:01:1b:f2:f5:b9: 54:92:99:fc:b5:80:de:bb:91:81:f4:9b:86:7b:ea: 14:f6:7c:61:95:cb:05:11:a9:4b:fe:7c:dd:01:93: 3e:f0:d7:31:b8:78:3f:21:6b:9c:b8:b0:53:4f:2d: 22:7d:f2:5c:fc:8d:60:b7:96:64:d5:b4:b0:35:27: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 165.135.0.0/16 192.104.54.0/24 192.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a5:26:4a:30:85:5d:96:e5:dc:78:73:70:d8:e5:80:e5:08: 97:c2:dd:37:16:d7:93:88:53:67:aa:89:7d:88:f3:f7:3a:74: 95:88:69:1c:c9:3a:92:0f:2f:cc:27:9e:51:61:b2:93:93:44: 9f:76:f9:24:59:00:34:e7:82:aa:44:86:e9:f6:c4:5d:98:43: 7a:8b:2f:ba:3f:4e:38:fc:6e:f7:90:9a:ba:9c:ba:4e:ff:3b: cd:8b:61:b9:ab:46:c3:78:58:6f:b9:69:80:82:00:0e:eb:92: 5f:85:ba:2a:b1:26:11:ec:58:75:58:ad:2f:c7:12:a5:9d:ae: 17:09:98:90:d5:5e:8a:00:62:9c:7b:5e:4d:77:d0:11:99:48: c0:dd:28:08:b6:19:f7:27:dc:a5:47:75:96:dd:5e:67:7f:11: 34:ee:10:81:b8:30:24:3d:02:65:d2:fa:cd:31:a3:d4:3c:9a: 7f:77:e2:98:36:c2:9e:f7:85:42:2c:b4:0d:91:b8:3c:c9:82: ba:d7:50:9f:73:7a:94:ef:50:b7:8e:6a:bd:f1:df:b6:a3:5a: 49:37:f6:e6:40:b2:e3:87:4c:77:63:86:bb:6b:08:b6:a0:81: 72:00:ef:b2:cd:54:3a:f8:e1:43:b3:de:34:7d:4e:3f:13:13: 56:8d:e4:e4 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWEqm7o+h4JomX8DsnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyNzAwNDUzN1oXDTI3MTAzMDAwNDUzN1owLzEtMCsGA1UEAxMk Y2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2qcQRlyuvCdIMFY5CSzp9lThsveoiSMBN6Y SMPokv6RKUUEwK7NSoHTnEQX3N4rfMJV6YiZJ9OgRZZ8frc1IGUO6u7LlCOwltNt gJQdSa8YLLEVkW4J0AMM2TS2p3CN6pfpVp/sT9F/Grti6HfaeBwN5e/Kx8xJny7h uFdpwj//gRreymgskv0lG41wJcv7h/ch49rBJav4F1wiOBDTksrzR9MvDBBcsb2o bdjBgbqUiclqS6an1bd2rI53ARvy9blUkpn8tYDeu5GB9JuGe+oU9nxhlcsFEalL /nzdAZM+8NcxuHg/IWucuLBTTy0iffJc/I1gt5Zk1bSwNSebiQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFEaF0lBrkFDTF5NuEXHqw4uZ5QE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j ZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NmMDE2Njc4LWRhYjMtNDNkMS1i N2VhLTVkM2FkODE0OGU5Ny9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgx NDhlOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwClhwMEAMBoNgMEAMCFfTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBipSZK MIVdluXceHNw2OWA5QiXwt03FteTiFNnqol9iPP3OnSViGkcyTqSDy/MJ55RYbKT k0SfdvkkWQA054KqRIbp9sRdmEN6iy+6P044/G73kJq6nLpO/zvNi2G5q0bDeFhv uWmAggAO65JfhboqsSYR7Fh1WK0vxxKlna4XCZiQ1V6KAGKce15Nd9ARmUjA3SgI thn3J9ylR3WW3V5nfxE07hCBuDAkPQJl0vrNMaPUPJp/d+KYNsKe94VCLLQNkbg8 yYK611Cfc3qU71C3jmq98d+2o1pJN/bmQLLjh0x3Y4a7awi2oIFyAO+yzVQ6+OFD s940fU4/ExNWjeTk -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:24 2025 by rpki-client