$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8.cer File: f601a4ca-cc18-4264-b1fb-8ca74ccd20d8.cer (raw, json) Hash identifier: TJwfgnqWjF3KVj3DrUDuauVFDBOyqdq03TdZfUSc7rs= Subject key identifier: B5:B4:32:99:00:4D:E7:5B:D6:E5:72:74:FD:CF:7F:47:57:B0:10:AE Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BA7C561A06FE565A7C1B53580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 00:45:23 +0000 Certificate not after: Sun 30 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 2532 IP: 140.147.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:c5:61:a0:6f:e5:65:a7:c1:b5:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 27 00:45:23 2025 GMT Not After : Jan 30 01:45:23 2028 GMT Subject: CN=f601a4ca-cc18-4264-b1fb-8ca74ccd20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:8d:fe:3c:80:e9:f1:66:b1:4c:63:9b:51: fa:d4:b0:49:24:c4:46:fd:ea:d0:bb:f0:10:5b:b9: 75:1f:45:7f:2a:99:f7:6d:d0:06:8e:b1:b0:4c:9c: c3:78:f3:05:50:27:6b:31:16:a5:d5:7a:bc:cc:d3: c1:5c:d0:09:47:a7:60:be:b3:9f:fa:27:2d:68:40: 9b:ff:c4:f8:87:5c:61:c8:7f:d7:91:e6:ff:60:54: e9:84:00:f2:86:15:fc:fd:9e:9e:39:0a:54:03:6b: bb:d6:88:73:2f:16:8a:94:91:48:69:eb:05:1b:ec: a1:d5:9c:df:f7:bd:2d:fd:f1:de:63:9b:fb:56:1c: cf:52:7d:b8:0d:3a:f1:cf:87:9a:b3:b4:72:91:a5: b2:ee:d4:09:fd:5a:59:a3:5b:7d:f3:ef:a2:af:e8: dc:96:7b:a3:5d:46:01:7d:a2:89:64:16:b1:b2:77: 46:55:94:58:52:d2:a4:e0:05:9f:27:aa:a8:a0:e2: 9b:06:f8:55:dc:c4:8e:95:1e:d2:77:d4:a6:da:97: d3:2b:81:6e:28:b7:59:61:e5:16:b9:fe:32:08:fc: 95:38:8e:29:3d:b7:f6:16:f2:9c:62:da:19:18:e1: 37:85:37:b6:0d:f2:7f:83:ae:a6:fe:30:d8:59:38: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:32:99:00:4D:E7:5B:D6:E5:72:74:FD:CF:7F:47:57:B0:10:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8/f601a4ca-cc18-4264-b1fb-8ca74ccd20d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 140.147.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2532 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:47:79:31:84:4c:a0:6e:1b:39:f6:1b:3f:d0:61:99:a3:b4: 08:5d:05:88:16:ec:46:76:ff:42:99:90:62:7c:53:fe:f0:6e: 26:8e:34:44:ff:00:ca:70:41:8c:a6:5d:fb:8f:c3:63:2a:e7: 38:f8:81:6d:44:a7:06:3a:27:48:81:0a:12:a9:fa:9d:67:78: c9:78:ab:9c:3d:b4:bb:09:60:20:0e:e6:fb:38:6a:f4:39:40: 72:38:97:d2:de:92:57:ab:a8:16:42:84:6c:57:7e:c9:08:0f: e1:b1:20:c8:46:e1:6c:d8:7b:8b:a9:a9:e4:eb:e2:57:5e:33: 9e:16:97:fb:09:81:de:8c:de:9a:e2:ab:83:d1:f6:a3:29:d0: cf:88:f5:f9:02:82:cb:ac:95:fd:9d:0b:5b:f2:16:a7:69:dc: 5f:08:a3:6b:ed:eb:34:47:11:4c:48:26:cd:36:c5:c8:77:17: 8c:bd:cd:83:d1:0b:7b:a5:76:4b:d3:f2:0b:76:59:b9:9f:4a: 37:f9:c2:e8:38:0c:01:86:3c:33:ba:5d:d2:ef:10:4c:27:0d: ff:ca:80:a0:42:d3:50:e9:26:b0:b6:4a:c9:1a:19:3e:58:33: 6d:16:d9:78:67:fb:3e:43:06:6e:8f:10:92:58:66:3f:77:b6: 54:35:93:99 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEunxWGgb+Vlp8G1NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAyNzAwNDUyM1oXDTI4MDEzMDAxNDUyM1owLzEtMCsGA1UEAxMk ZjYwMWE0Y2EtY2MxOC00MjY0LWIxZmItOGNhNzRjY2QyMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGGN/jyA6fFmsUxjm1H61LBJJMRG/erQu/AQ W7l1H0V/Kpn3bdAGjrGwTJzDePMFUCdrMRal1Xq8zNPBXNAJR6dgvrOf+ictaECb /8T4h1xhyH/Xkeb/YFTphADyhhX8/Z6eOQpUA2u71ohzLxaKlJFIaesFG+yh1Zzf 970t/fHeY5v7VhzPUn24DTrxz4eas7RykaWy7tQJ/VpZo1t98++ir+jclnujXUYB faKJZBaxsndGVZRYUtKk4AWfJ6qooOKbBvhV3MSOlR7Sd9Sm2pfTK4FuKLdZYeUW uf4yCPyVOI4pPbf2FvKcYtoZGOE3hTe2DfJ/g66m/jDYWTiAcwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFLW0MpkATedb1uVydP3Pf0dXsBCuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9m NjAxYTRjYS1jYzE4LTQyNjQtYjFmYi04Y2E3NGNjZDIwZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Y2MDFhNGNhLWNjMTgtNDI2NC1i MWZiLThjYTc0Y2NkMjBkOC9mNjAxYTRjYS1jYzE4LTQyNjQtYjFmYi04Y2E3NGNj ZDIwZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCMkzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIJ 5DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA7R3kxhEygbhs59hs/0GGZo7QIXQWIFuxGdv9CmZBifFP+8G4m jjRE/wDKcEGMpl37j8NjKuc4+IFtRKcGOidIgQoSqfqdZ3jJeKucPbS7CWAgDub7 OGr0OUByOJfS3pJXq6gWQoRsV37JCA/hsSDIRuFs2HuLqank6+JXXjOeFpf7CYHe jN6a4quD0fajKdDPiPX5AoLLrJX9nQtb8hanadxfCKNr7es0RxFMSCbNNsXIdxeM vc2D0Qt7pXZL0/ILdlm5n0o3+cLoOAwBhjwzul3S7xBMJw3/yoCgQtNQ6SawtkrJ Ghk+WDNtFtl4Z/s+QwZujxCSWGY/d7ZUNZOZ -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:57 2025 by rpki-client