$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53.cer File: e53f4039-0354-46d9-9dd0-7c5c925b9d53.cer (raw, json) Hash identifier: Y1Y/edMXsZ5FKLF4k9geik3yzPlIZqyAoDuS3iP4wpI= Subject key identifier: B4:AA:63:20:3B:0A:93:AB:89:B4:82:12:B6:D9:68:FA:67:15:DF:08 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BB8857856364E3A9B6ECD9B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/e53f4039-0354-46d9-9dd0-7c5c925b9d53.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 00:45:21 +0000 Certificate not after: Sat 05 Feb 2028 01:45:21 +0000 Subordinate resources: IP: 198.59.46.0 -- 198.59.49.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:85:78:56:36:4e:3a:9b:6e:cd:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 2 00:45:21 2025 GMT Not After : Feb 5 01:45:21 2028 GMT Subject: CN=e53f4039-0354-46d9-9dd0-7c5c925b9d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:dd:f0:1e:7a:26:18:44:0c:81:fb:39:d7: 4a:f3:a2:4b:8d:dc:55:31:cd:df:54:5c:3b:61:7e: 7b:8c:de:ce:64:80:0f:dd:c2:67:02:ab:92:a5:2c: 4c:24:8d:a5:5b:c8:42:a0:dc:ef:42:a1:45:0c:ef: 52:fb:5f:06:a8:c0:eb:cb:4e:82:87:69:36:83:c4: d0:37:b8:d0:68:a7:ca:b1:66:2f:e7:d6:be:d6:57: 2a:fd:55:f9:ec:d6:8b:da:d6:5b:62:4d:62:59:27: 48:c1:93:20:06:ab:bf:48:cf:4b:82:0c:81:e9:06: 36:18:da:ce:1c:57:76:19:1a:ce:b6:7c:d2:2d:8c: fa:e7:35:6c:c9:67:2d:3e:b0:d7:b2:68:c2:8d:7d: 6f:49:f4:6c:cf:1d:66:80:12:09:11:02:f8:f3:85: 84:37:07:3a:6c:f9:d9:28:99:b3:b9:ef:53:1d:fa: ad:44:d1:37:a7:1c:2f:f6:55:02:58:18:6b:7a:fe: 13:70:e5:a1:63:7f:d9:4e:83:ef:8b:45:ec:84:47: 25:f6:77:b3:1f:af:f2:b6:30:0a:d7:aa:61:a3:e5: 1d:9b:0a:11:c8:47:eb:8c:7c:ee:41:f8:48:86:21: 9f:e9:28:39:b2:fe:28:a3:03:3b:7a:7e:88:79:4c: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:63:20:3B:0A:93:AB:89:B4:82:12:B6:D9:68:FA:67:15:DF:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/e53f4039-0354-46d9-9dd0-7c5c925b9d53.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.59.46.0-198.59.49.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:69:96:cc:4b:95:d6:30:05:83:64:94:a1:d9:72:38:c9:fe: 36:9f:b1:eb:3d:7a:ca:c1:66:92:ff:30:d1:e9:3f:30:7c:89: e6:5e:6b:b6:14:51:af:3a:43:c1:5a:e3:9c:19:ba:bb:24:2f: 70:c3:00:0f:75:5d:8f:0e:62:95:08:9b:09:3e:f7:98:ef:e8: 48:40:15:12:a0:12:5b:12:d2:0b:6e:94:43:c6:7d:73:e6:f7: 07:65:c5:b0:26:cd:e3:94:ce:29:42:c9:9e:c8:34:fc:22:2f: 21:be:c2:8c:21:90:18:75:51:3c:76:c5:ae:37:8e:49:ee:2c: 37:ee:07:b4:52:35:b6:71:9e:09:77:e6:ce:c2:6f:c0:76:a3: cd:77:bc:28:ba:33:db:1a:0c:16:06:26:01:e5:26:29:39:02: 75:24:1e:3a:0e:4f:10:e6:60:6f:12:81:24:39:7f:e0:3a:c3: 6f:3c:b5:5d:27:26:7b:81:9b:47:44:e7:9a:8f:c6:fa:74:02: 38:24:7c:09:39:c2:be:77:ad:64:26:e0:78:60:58:98:ef:4f: f9:f9:b2:af:ae:fa:f5:f7:d9:d8:23:2f:cc:5d:09:db:a1:ff: 80:92:3e:9f:af:67:a6:ba:ba:1d:76:5e:8b:28:92:bf:04:e7: ee:6d:32:17 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEu4hXhWNk46m27NmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwMjAwNDUyMVoXDTI4MDIwNTAxNDUyMVowLzEtMCsGA1UEAxMk ZTUzZjQwMzktMDM1NC00NmQ5LTlkZDAtN2M1YzkyNWI5ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkvd8B56JhhEDIH7OddK86JLjdxVMc3fVFw7 YX57jN7OZIAP3cJnAquSpSxMJI2lW8hCoNzvQqFFDO9S+18GqMDry06Ch2k2g8TQ N7jQaKfKsWYv59a+1lcq/VX57NaL2tZbYk1iWSdIwZMgBqu/SM9LggyB6QY2GNrO HFd2GRrOtnzSLYz65zVsyWctPrDXsmjCjX1vSfRszx1mgBIJEQL484WENwc6bPnZ KJmzue9THfqtRNE3pxwv9lUCWBhrev4TcOWhY3/ZToPvi0XshEcl9nezH6/ytjAK 16pho+UdmwoRyEfrjHzuQfhIhiGf6Sg5sv4oowM7en6IeUyyswIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFLSqYyA7CpOribSCErbZaPpnFd8IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l NTNmNDAzOS0wMzU0LTQ2ZDktOWRkMC03YzVjOTI1YjlkNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U1M2Y0MDM5LTAzNTQtNDZkOS05 ZGQwLTdjNWM5MjViOWQ1My9lNTNmNDAzOS0wMzU0LTQ2ZDktOWRkMC03YzVjOTI1 YjlkNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAcY7LgMEAcY7MDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCaZbMS5XW MAWDZJSh2XI4yf42n7HrPXrKwWaS/zDR6T8wfInmXmu2FFGvOkPBWuOcGbq7JC9w wwAPdV2PDmKVCJsJPveY7+hIQBUSoBJbEtILbpRDxn1z5vcHZcWwJs3jlM4pQsme yDT8Ii8hvsKMIZAYdVE8dsWuN45J7iw37ge0UjW2cZ4Jd+bOwm/AdqPNd7woujPb GgwWBiYB5SYpOQJ1JB46Dk8Q5mBvEoEkOX/gOsNvPLVdJyZ7gZtHROeaj8b6dAI4 JHwJOcK+d61kJuB4YFiY70/5+bKvrvr199nYIy/MXQnbof+Akj6fr2emuroddl6L KJK/BOfubTIX -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:29 2025 by rpki-client