$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer File: d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer (raw, json) Hash identifier: bK3K2K5nCoiucMSkJnmTERlfO/91B+7av+YHq62dVqw= Subject key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B943A98E6A405243689A38300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 00:45:24 +0000 Certificate not after: Sun 23 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 399293 IP: 192.140.4.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:3a:98:e6:a4:05:24:36:89:a3:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 20 00:45:24 2025 GMT Not After : Jan 23 01:45:24 2028 GMT Subject: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:d1:7c:4e:ee:d0:f5:59:32:1c:6e:3e:fb: 64:16:4f:4d:5a:9c:18:89:93:d2:e4:44:db:a8:a5: 55:1e:22:b1:75:5a:5c:b1:67:63:e0:93:78:ea:da: f1:1a:d7:d4:7a:7c:38:d0:06:4f:28:e2:3a:86:22: 9b:14:3c:90:40:88:5a:3d:2d:37:ce:32:f0:2a:58: 97:7a:c2:6b:74:22:88:84:c2:d9:32:a4:f1:5c:b4: e9:8d:41:42:a1:7e:5c:ab:37:85:03:bf:10:d3:e8: e4:b0:fc:4e:74:30:31:29:c5:ec:11:2c:c5:b5:8c: b1:f2:6f:19:fc:27:4c:3a:10:e0:f0:9c:b0:f3:7e: c2:13:b0:1a:9a:29:12:39:d4:0b:c5:30:8e:78:cb: 2e:f0:78:a2:68:43:4e:37:8f:62:e2:6d:43:d0:68: 62:f3:8d:2b:e3:cf:6e:e6:c6:dc:d7:66:88:1c:09: 37:da:d6:ca:93:68:a3:a5:f9:48:0c:59:e1:a8:aa: 7f:20:4b:ef:d8:d9:ef:6c:5b:26:32:5a:89:e1:de: 4e:6c:51:5b:c4:81:32:f4:ea:be:a0:88:f9:0a:ac: 47:c0:b0:b3:2b:0a:1b:bf:6c:4a:b0:15:2c:55:1c: 38:1d:e9:1e:0b:d5:a8:3f:58:d9:46:dd:ad:9b:66: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.140.4.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:05:db:01:c6:f8:2a:ae:ec:c5:fa:1e:96:e7:52:97:58:1b: 2a:7e:12:d7:0e:6c:e8:44:29:47:31:67:3d:df:e5:9b:d3:fb: 8b:8d:da:4d:3f:7f:6b:1d:57:c9:84:2b:6f:08:cd:4a:d2:0f: e6:b3:74:d8:0b:5c:a1:4a:9b:c0:c8:17:24:67:a3:66:87:bd: 3a:9a:d3:0b:9b:a4:16:8b:17:c7:9a:84:e6:90:2d:b9:19:c9: cf:b2:4e:cb:d8:a9:39:92:91:12:07:a5:22:33:51:a9:0c:fa: 9a:f2:b8:c8:bf:8c:d2:e4:49:df:7d:47:30:41:93:23:1b:9d: bd:9a:6a:f7:e5:76:84:9a:5a:21:07:ee:5e:26:a2:6d:bc:52: b0:5a:db:cc:33:b0:b1:9d:a3:ca:77:9e:15:a8:88:dc:15:0c: 74:6c:61:d6:d8:98:12:94:e5:b5:b4:c3:13:ce:0d:dd:fc:9e: b9:55:8f:8e:2a:57:34:45:88:85:86:fa:40:d1:33:e5:f4:70: cc:9b:73:32:5b:14:5b:34:fd:7a:71:4c:5d:b4:2b:36:ab:c7: 2b:e4:73:28:74:52:d7:b5:ea:9c:4e:c8:30:ac:f9:c0:9f:50: 66:b4:8e:a5:42:57:cd:fb:14:80:21:fb:24:5b:48:fc:53:cb: 21:4a:6b:89 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuUOpjmpAUkNomjgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyMDAwNDUyNFoXDTI4MDEyMzAxNDUyNFowLzEtMCsGA1UEAxMk ZDc2YWFhYzEtYjcyNC00ZGUyLTljMWEtNzBkY2U3YTEwZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBPRfE7u0PVZMhxuPvtkFk9NWpwYiZPS5ETb qKVVHiKxdVpcsWdj4JN46trxGtfUenw40AZPKOI6hiKbFDyQQIhaPS03zjLwKliX esJrdCKIhMLZMqTxXLTpjUFCoX5cqzeFA78Q0+jksPxOdDAxKcXsESzFtYyx8m8Z /CdMOhDg8Jyw837CE7AamikSOdQLxTCOeMsu8HiiaENON49i4m1D0Ghi840r489u 5sbc12aIHAk32tbKk2ijpflIDFnhqKp/IEvv2NnvbFsmMlqJ4d5ObFFbxIEy9Oq+ oIj5CqxHwLCzKwobv2xKsBUsVRw4HekeC9WoP1jZRt2tm2bzVQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGbfU/KRUgPd6YL/L+5G34kLMWIFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k NzZhYWFjMS1iNzI0LTRkZTItOWMxYS03MGRjZTdhMTBlNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q3NmFhYWMxLWI3MjQtNGRlMi05 YzFhLTcwZGNlN2ExMGU0MC9kNzZhYWFjMS1iNzI0LTRkZTItOWMxYS03MGRjZTdh MTBlNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAjAQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhe9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAMF2wHG+Cqu7MX6HpbnUpdYGyp+EtcObOhEKUcxZz3f5ZvT +4uN2k0/f2sdV8mEK28IzUrSD+azdNgLXKFKm8DIFyRno2aHvTqa0wubpBaLF8ea hOaQLbkZyc+yTsvYqTmSkRIHpSIzUakM+pryuMi/jNLkSd99RzBBkyMbnb2aavfl doSaWiEH7l4mom28UrBa28wzsLGdo8p3nhWoiNwVDHRsYdbYmBKU5bW0wxPODd38 nrlVj44qVzRFiIWG+kDRM+X0cMybczJbFFs0/XpxTF20Kzarxyvkcyh0Ute16pxO yDCs+cCfUGa0jqVCV837FIAh+yRbSPxTyyFKa4k= -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:30 2025 by rpki-client