$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer File: d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer (raw, json) Hash identifier: v4eaxpBc+Oqc8baitrRmo5q5PnlutW85fqkt9aMNcgY= Subject key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AE2F42C0E6B3FDDDEDB89D980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 12:45:25 +0000 Certificate not after: Sat 20 Nov 2027 13:45:25 +0000 Subordinate resources: AS: 19885 IP: 206.214.160.0/20 IP: 2606:2c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:f4:2c:0e:6b:3f:dd:de:db:89:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 17 12:45:25 2025 GMT Not After : Nov 20 13:45:25 2027 GMT Subject: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:1a:db:2b:d1:52:66:88:5d:3c:c0:6d:14: d7:a5:41:44:70:15:05:76:68:4a:39:c3:16:b8:71: 0c:7b:ff:bf:59:f5:a4:d3:9b:f2:4d:30:7d:57:fd: d7:a9:84:2a:d0:e4:c1:9a:83:82:d1:cf:d3:e9:c2: 2f:56:f2:7a:38:55:1e:da:99:5f:cb:ab:fe:e4:11: 87:74:4e:09:bd:d1:15:c0:ea:53:1d:28:63:5b:f9: 98:7e:ab:de:9f:83:36:5c:89:68:01:f8:76:d2:6c: 90:59:18:00:77:ce:04:37:6d:82:12:5a:5d:48:01: 4b:17:67:d8:f9:be:f5:0c:71:25:64:4b:55:91:cb: bf:3a:92:04:76:b6:ab:48:38:04:08:b1:76:e0:55: 58:bc:d8:38:a2:7a:aa:18:26:8a:b6:e3:2c:55:2e: a5:f5:85:95:78:87:f5:69:b8:bb:29:10:bb:8a:68: 6d:34:89:b6:eb:44:a3:9b:3f:d8:b3:3b:6f:95:85: 44:14:f3:c2:76:ce:d5:26:9a:ba:d6:f7:c2:57:8d: 1f:84:29:10:70:0f:84:02:53:19:ce:25:a1:f8:12: 00:23:5f:e3:9e:0f:e1:d9:8b:7b:08:14:e3:32:ca: 5e:8d:4a:94:17:7d:25:75:78:9a:ae:b5:81:fa:ca: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 206.214.160.0/20 IPv6: 2606:2c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19885 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9c:b2:3d:5d:90:e5:9f:07:c5:93:aa:ac:00:95:fb:b6:18: 81:ef:db:ac:e9:a2:bb:a6:d0:76:aa:f6:5a:6e:f7:52:ac:5f: 64:98:1e:5c:d2:b1:da:9d:8b:00:79:7e:77:6b:93:8c:af:37: f7:c2:26:d7:75:8f:a7:fe:5d:ac:2a:a1:11:1d:cd:96:db:5d: d3:7a:79:6d:54:27:04:93:05:9d:96:ad:a1:a1:f4:41:79:be: b1:dd:8c:17:91:49:89:65:9d:7e:87:34:53:f2:81:cb:95:89: 29:14:8b:7f:22:2a:3f:b3:f2:38:8e:3e:66:9e:5e:d6:a8:4e: d6:25:d0:cc:66:9c:63:0e:63:a9:40:d8:76:07:71:0e:26:96: 04:35:22:61:b5:9b:07:99:56:62:10:06:85:9f:3b:b7:57:30: 22:9e:a1:e2:36:ac:db:04:03:72:fb:27:7f:4f:c4:27:6a:4b: 6e:f5:83:d3:7c:f4:9a:5d:30:f3:eb:5c:7b:59:13:f6:84:a3: 52:f8:06:29:61:e2:86:ad:9c:14:18:e0:68:a1:ab:72:49:31: e5:bf:25:42:7e:19:1a:5b:f5:9b:1f:9e:c3:dd:db:f3:c0:31: c2:a0:73:9d:fa:48:bb:b8:4b:90:46:3d:26:f7:11:41:76:da: 2a:0a:8a:41 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEri9CwOaz/d3tuJ2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxNzEyNDUyNVoXDTI3MTEyMDEzNDUyNVowLzEtMCsGA1UEAxMk ZDhiNDQzYTctZWNjMC00N2I2LThiMTYtZGIxZmVlOGMyYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtUa2yvRUmaIXTzAbRTXpUFEcBUFdmhKOcMW uHEMe/+/WfWk05vyTTB9V/3XqYQq0OTBmoOC0c/T6cIvVvJ6OFUe2plfy6v+5BGH dE4JvdEVwOpTHShjW/mYfqven4M2XIloAfh20myQWRgAd84EN22CElpdSAFLF2fY +b71DHElZEtVkcu/OpIEdrarSDgECLF24FVYvNg4onqqGCaKtuMsVS6l9YWVeIf1 abi7KRC7imhtNIm260Sjmz/YsztvlYVEFPPCds7VJpq61vfCV40fhCkQcA+EAlMZ ziWh+BIAI1/jng/h2Yt7CBTjMspejUqUF30ldXiarrWB+srmFQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMC7dltiCUC26t0fOm8x4HCWLoVoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k OGI0NDNhNy1lY2MwLTQ3YjYtOGIxNi1kYjFmZWU4YzJiYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q4YjQ0M2E3LWVjYzAtNDdiNi04 YjE2LWRiMWZlZThjMmJiNC9kOGI0NDNhNy1lY2MwLTQ3YjYtOGIxNi1kYjFmZWU4 YzJiYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATO1qAwDQQCAAIwBwMFACYGLAAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTa0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT5yyPV2Q5Z8HxZOqrACV+7YYge/b rOmiu6bQdqr2Wm73UqxfZJgeXNKx2p2LAHl+d2uTjK8398Im13WPp/5drCqhER3N lttd03p5bVQnBJMFnZatoaH0QXm+sd2MF5FJiWWdfoc0U/KBy5WJKRSLfyIqP7Py OI4+Zp5e1qhO1iXQzGacYw5jqUDYdgdxDiaWBDUiYbWbB5lWYhAGhZ87t1cwIp6h 4jas2wQDcvsnf0/EJ2pLbvWD03z0ml0w8+tce1kT9oSjUvgGKWHihq2cFBjgaKGr ckkx5b8lQn4ZGlv1mx+ew93b88AxwqBznfpIu7hLkEY9JvcRQXbaKgqKQQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:18 2025 by rpki-client