$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer File: d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer (raw, json) Hash identifier: gN1LcbkcL4lKvALpJm2wabCdA7t3oGYwklnUdDX+7uA= Subject key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B21C48E8B946CAE7CF1F15E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 15047 IP: 67.199.246.0/24 IP: 67.199.249.0/24 IP: 144.86.184.0/24 IP: 199.27.69.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:8b:94:6c:ae:7c:f1:f1:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:17:78:d9:c4:dc:ca:42:63:84:59:d7:cd: f9:cb:e0:08:49:54:74:00:02:f9:8b:56:32:0f:ec: 4c:2e:5b:e6:7c:48:a5:50:bc:2b:4f:4e:c7:02:8b: 76:71:93:a1:af:c5:59:2e:41:d7:83:7c:92:56:24: 23:f9:6e:c1:f1:b3:d2:f0:d6:74:f5:57:05:a3:3c: 39:b2:4e:b9:2e:a0:77:71:45:89:d2:c1:dd:95:eb: aa:06:a9:15:ae:25:8c:62:68:70:8a:4b:21:4d:37: d0:9b:6f:74:3c:2e:d1:bf:2a:e4:cd:0b:dc:00:6c: 97:86:49:01:ac:84:fd:39:71:eb:a0:89:f8:42:8d: b1:99:1d:58:5a:62:9f:f8:07:c5:31:df:f1:d5:c1: 0f:74:a0:1b:12:82:ee:25:ba:cc:a0:18:10:4a:0b: fa:74:2f:76:da:d2:c1:23:1f:26:50:0f:a1:3f:e7: 24:46:cb:6e:1a:23:9f:74:da:30:df:6d:44:81:97: 59:bc:d9:e1:9b:3d:ce:cc:73:a9:49:e1:5f:be:40: 1d:e8:36:84:fb:c6:36:54:78:dc:c6:79:5c:47:50: 57:21:f1:62:a3:40:02:d0:94:df:e0:38:28:88:76: cf:c1:d1:58:97:1c:58:fb:e9:df:64:24:4b:cb:a7: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 67.199.246.0/24 67.199.249.0/24 144.86.184.0/24 199.27.69.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15047 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:57:6b:2f:12:f5:89:dc:b0:8a:2b:46:28:29:6f:72:01:0a: 69:bd:a1:b7:a8:5c:1f:cd:39:c4:fb:04:7d:16:98:ba:3b:7a: 7d:4c:62:01:aa:99:d7:10:76:d2:04:13:2d:8b:42:81:7e:1d: 9f:34:c2:2a:b8:b0:65:98:0d:3c:52:ec:95:fb:4b:71:f8:61: 17:f1:eb:a5:58:31:d6:4a:78:11:68:ec:41:29:14:8a:9c:d5: 51:77:ba:38:72:0b:f4:67:74:08:2a:a0:91:bf:cc:8b:8c:aa: 38:56:54:6f:81:7c:96:b7:56:91:c8:8d:c4:d0:2f:24:3e:4f: 2f:97:6e:6e:0a:55:69:38:97:e4:f4:19:83:78:5c:bd:6a:4f: 32:d1:f3:61:2b:99:6e:56:22:d4:83:ad:96:e7:6b:22:21:66: 83:61:76:f3:5f:d1:9c:61:49:ff:c0:a3:98:7f:15:c3:f5:11: e4:cf:4b:a9:74:e6:ee:c0:09:2a:0b:23:a0:43:3e:e3:8c:ba: 53:d3:0c:fa:fe:97:26:e3:52:75:d5:dd:3f:c7:ce:11:05:55: 3b:a4:15:d6:ef:4e:d2:85:f2:08:84:04:d8:61:6f:a6:b9:fb: 64:14:ac:f2:13:b8:79:81:28:3c:8f:25:81:49:b4:80:50:93: 24:11:8e:7d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEshxI6LlGyufPHxXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk ZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEwYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucIXeNnE3MpCY4RZ1835y+AISVR0AAL5i1Yy D+xMLlvmfEilULwrT07HAot2cZOhr8VZLkHXg3ySViQj+W7B8bPS8NZ09VcFozw5 sk65LqB3cUWJ0sHdleuqBqkVriWMYmhwikshTTfQm290PC7RvyrkzQvcAGyXhkkB rIT9OXHroIn4Qo2xmR1YWmKf+AfFMd/x1cEPdKAbEoLuJbrMoBgQSgv6dC922tLB Ix8mUA+hP+ckRstuGiOfdNow321EgZdZvNnhmz3OzHOpSeFfvkAd6DaE+8Y2VHjc xnlcR1BXIfFio0AC0JTf4DgoiHbPwdFYlxxY++nfZCRLy6dmYQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDuJrzZt0gL3/Nr6TYZunnTSKovEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k NDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q0MDliZWYwLWI2ZTktNDkyZC1h ZGY5LTBiZDhhNTYxMGMzNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2 MTBjMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBABDx/YDBABDx/kDBACQVrgDBADHG0UwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICOscwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV1drLxL1idywiitGKClvcgEK ab2ht6hcH805xPsEfRaYujt6fUxiAaqZ1xB20gQTLYtCgX4dnzTCKriwZZgNPFLs lftLcfhhF/HrpVgx1kp4EWjsQSkUipzVUXe6OHIL9Gd0CCqgkb/Mi4yqOFZUb4F8 lrdWkciNxNAvJD5PL5dubgpVaTiX5PQZg3hcvWpPMtHzYSuZblYi1IOtludrIiFm g2F281/RnGFJ/8CjmH8Vw/UR5M9LqXTm7sAJKgsjoEM+44y6U9MM+v6XJuNSddXd P8fOEQVVO6QV1u9O0oXyCIQE2GFvprn7ZBSs8hO4eYEoPI8lgUm0gFCTJBGOfQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:55 2025 by rpki-client