$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer File: fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer (raw, json) Hash identifier: bg8Dzi0RwhGS1kH5Ty+qXLf29iT0BBHkC7aToIjNdNE= Subject key identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B7507F63209C4E30A05430000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 20:33:19 +0000 Certificate not after: Mon 09 Nov 2026 23:39:42 +0000 Subordinate resources: AS: 395260 IP: 130.12.8.0/22 IP: 2606:9bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:07:f6:32:09:c4:e3:0a:05:43:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 8 20:33:19 2025 GMT Not After : Nov 9 23:39:42 2026 GMT Subject: CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:98:30:28:70:70:67:5e:65:b4:fe:f4:d1: 8f:cd:b3:e9:cd:a1:33:61:d2:18:ee:30:b0:71:3e: 75:00:01:90:7f:a3:77:69:05:2b:61:37:79:cf:1c: c7:84:42:14:61:7e:3d:22:c7:1e:ca:36:80:e3:00: 59:9d:20:ca:7f:af:54:68:e2:59:d5:f6:7f:4c:10: 18:d3:82:86:6e:79:64:48:d0:25:df:29:3f:f1:ab: c0:b1:38:af:16:41:76:a2:1e:09:3b:40:6f:54:1f: 62:bc:c1:51:11:be:c3:97:be:5e:e1:a9:e8:7d:0b: 34:19:14:54:36:f7:c9:fd:7c:87:bb:67:a4:63:70: 9e:fd:63:4f:34:69:e8:d3:10:25:36:39:19:38:07: b2:f3:0c:df:b2:c1:d0:9a:94:8d:39:5f:bd:6e:a0: 4f:ec:54:40:c7:d0:91:92:04:5c:5b:9c:07:bf:a4: 10:e8:16:71:f4:da:f3:2c:62:21:98:79:d4:dd:c9: ea:6f:0a:cb:b8:67:42:58:fe:26:37:5a:7b:e8:d9: e8:8a:74:e2:b1:da:b4:27:42:c6:12:9f:19:8c:d9: 38:7d:73:a6:19:69:33:b6:e8:3c:27:02:25:e6:0e: 77:86:58:db:cb:1e:b7:ae:1e:20:a8:14:62:05:f7: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 130.12.8.0/22 IPv6: 2606:9bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b7:c1:4a:9e:8b:97:9d:a8:2f:3e:86:38:ef:3c:e2:e1:72: 30:b8:19:e1:c5:03:6c:98:24:18:49:d9:0f:ca:45:82:73:92: b1:06:4a:10:2d:65:e1:cc:f1:ba:92:0b:bd:12:a9:d8:df:f2: 24:c0:c2:1e:8c:df:b4:f2:b2:d3:6b:40:7d:6f:36:95:86:68: f1:37:c2:df:1d:19:94:72:fb:8c:0c:eb:cd:d6:19:19:fd:fe: 43:9b:61:b8:97:1a:57:9c:e4:0d:e2:88:84:b0:35:73:79:7b: ac:68:8a:71:bb:8e:c9:6e:22:24:1e:c2:73:d2:37:b8:9b:b1: e7:8b:7b:41:8e:75:eb:d7:5d:ce:3d:6c:88:72:90:3f:7f:62: da:ad:3f:1c:b0:bf:88:ef:86:91:33:8b:9f:c0:77:47:f4:df: af:5b:8d:29:0b:5e:7b:ea:8f:b1:d3:c5:36:14:e8:dc:e0:b3: e1:cc:f4:05:83:9d:5d:9b:73:21:5b:e4:bb:c9:72:0f:a4:e5: 4c:23:06:0a:c3:d0:35:93:cc:1d:f1:eb:52:a7:c5:5c:84:78: 6b:13:0e:14:a1:e9:e5:83:ba:ab:77:49:b0:45:28:f9:d1:1c: 24:f3:2d:7a:ba:3b:ba:61:38:af:3c:5e:46:9f:11:53:b2:44: 62:ff:47:75 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEt1B/YyCcTjCgVDAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAwODIwMzMxOVoXDTI2MTEwOTIzMzk0MlowLzEtMCsGA1UEAxMk ZmQyNDIxZDItYTY5My00NDBlLWE5ZTAtZWNlMmI3Y2QyYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVOYMChwcGdeZbT+9NGPzbPpzaEzYdIY7jCw cT51AAGQf6N3aQUrYTd5zxzHhEIUYX49IsceyjaA4wBZnSDKf69UaOJZ1fZ/TBAY 04KGbnlkSNAl3yk/8avAsTivFkF2oh4JO0BvVB9ivMFREb7Dl75e4anofQs0GRRU NvfJ/XyHu2ekY3Ce/WNPNGno0xAlNjkZOAey8wzfssHQmpSNOV+9bqBP7FRAx9CR kgRcW5wHv6QQ6BZx9NrzLGIhmHnU3cnqbwrLuGdCWP4mN1p76NnoinTisdq0J0LG Ep8ZjNk4fXOmGWkztug8JwIl5g53hljbyx63rh4gqBRiBfeMWQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCjLz4xdWf8Nh61lIG30EbmPq7MYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9m ZDI0MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2UyYjdjZDJiMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2ZkMjQyMWQyLWE2OTMtNDQwZS1h OWUwLWVjZTJiN2NkMmIzOS9mZDI0MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2UyYjdj ZDJiMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKCDAgwDQQCAAIwBwMFACYGm8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH63wUqei5edqC8+hjjvPOLhcjC4 GeHFA2yYJBhJ2Q/KRYJzkrEGShAtZeHM8bqSC70Sqdjf8iTAwh6M37TystNrQH1v NpWGaPE3wt8dGZRy+4wM683WGRn9/kObYbiXGlec5A3iiISwNXN5e6xoinG7jslu IiQewnPSN7ibseeLe0GOdevXXc49bIhykD9/YtqtPxywv4jvhpEzi5/Ad0f0369b jSkLXnvqj7HTxTYU6Nzgs+HM9AWDnV2bcyFb5LvJcg+k5UwjBgrD0DWTzB3x61Kn xVyEeGsTDhSh6eWDuqt3SbBFKPnRHCTzLXq6O7phOK88XkafEVOyRGL/R3U= -----END CERTIFICATE-----Generated at Wed Nov 5 15:47:10 2025 by rpki-client