$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer File: 7094fef3-a44f-4e12-98ee-72cf53d9de83.cer (raw, json) Hash identifier: A6DFW7vxgO4/2BXUAXfccDL1d2TgXsGDfF5M5wsNNTY= Subject key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A2E2C9DE3AB96FFE5AF220C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Jun 2025 18:37:51 +0000 Certificate not after: Thu 16 Sep 2027 18:37:51 +0000 Subordinate resources: IP: 134.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:2c:9d:e3:ab:96:ff:e5:af:22:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 13 18:37:51 2025 GMT Not After : Sep 16 18:37:51 2027 GMT Subject: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:13:fa:c1:d7:04:11:81:d7:03:3c:c4:38: 12:10:19:39:0e:3c:97:66:44:16:87:4b:87:fc:7e: 59:1b:6c:40:c9:e0:6b:b5:65:79:21:b8:91:61:59: cf:84:ba:c2:2b:d2:59:1b:1e:5d:d4:a5:4d:1b:5f: 06:f9:90:af:76:66:ae:07:1f:28:76:a5:5f:d8:bd: a9:21:07:4e:5e:02:87:05:c3:db:7d:02:9e:f7:a8: 76:ca:4e:c3:24:0d:ea:54:6a:04:45:c2:ab:1d:34: 35:bf:34:d9:9e:a9:cb:4f:70:f2:f0:63:5d:1f:be: b5:aa:a8:1a:e3:ef:05:80:76:ab:0c:1a:d8:1c:51: b0:14:ea:52:3a:34:36:df:5f:88:70:bd:8f:17:db: cd:15:95:2d:fd:8f:01:4b:f1:5e:06:9a:33:9d:d7: 3f:a1:74:48:3f:f4:14:fc:88:d2:fa:35:2b:d1:0e: b1:b7:73:31:e7:47:aa:ea:3d:56:71:49:55:04:52: 74:16:e7:4d:7d:89:1e:1d:3b:3d:13:48:28:0f:7c: 96:d4:2b:4f:f6:bf:3b:54:5b:41:2c:14:37:09:93: ff:f2:87:be:53:9f:1d:36:ec:7d:ea:a0:a4:55:4c: 4b:67:2c:b0:8d:cb:3d:46:a7:58:6c:84:54:8a:7e: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 134.250.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ea:19:d3:e6:90:72:fe:f8:5f:ca:19:85:ac:e3:db:72:6d: 5c:47:30:ab:30:a9:77:ef:fc:64:2a:17:7c:f7:1e:b0:34:60: 17:be:b9:f4:95:4b:37:5d:df:95:e9:4e:4d:1f:6c:b1:76:0d: df:7c:42:dd:a7:13:6c:41:5d:a7:0a:27:14:43:7a:6d:cf:6d: ca:0c:45:3f:ab:c2:43:5a:b1:ef:0a:33:8f:f3:52:7f:93:16: 53:5a:b3:7f:28:71:9b:db:78:44:c0:6f:fc:cd:95:93:95:57: 2e:79:b1:bf:c7:53:e3:44:39:ed:af:14:e7:de:c3:6e:a4:e7: ba:2a:39:53:0e:35:b3:21:39:9a:a0:c4:44:98:a1:da:7b:b4: 13:a8:c3:1b:b4:73:12:b2:a3:74:7b:20:1b:8b:1f:17:fc:d6: af:3f:a8:94:3b:9f:44:e8:c4:c3:bf:83:2b:60:97:f8:b6:6d: 98:b6:f2:00:2f:c4:71:d7:10:46:ef:b5:49:10:74:75:18:8d: 16:c0:6b:db:93:9d:9e:ba:7c:7d:fd:2f:37:8f:3e:50:07:ed: f3:69:cd:eb:46:f1:7b:34:55:5d:da:68:6d:9f:31:6d:0f:d8: e0:75:39:9c:55:ba:fb:89:c9:89:4b:6d:be:a6:6d:ad:4b:1c: 8c:81:7c:e7 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEouLJ3jq5b/5a8iDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxMzE4Mzc1MVoXDTI3MDkxNjE4Mzc1MVowLzEtMCsGA1UEAxMk NzA5NGZlZjMtYTQ0Zi00ZTEyLTk4ZWUtNzJjZjUzZDlkZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhYT+sHXBBGB1wM8xDgSEBk5DjyXZkQWh0uH /H5ZG2xAyeBrtWV5IbiRYVnPhLrCK9JZGx5d1KVNG18G+ZCvdmauBx8odqVf2L2p IQdOXgKHBcPbfQKe96h2yk7DJA3qVGoERcKrHTQ1vzTZnqnLT3Dy8GNdH761qqga 4+8FgHarDBrYHFGwFOpSOjQ231+IcL2PF9vNFZUt/Y8BS/FeBpozndc/oXRIP/QU /IjS+jUr0Q6xt3Mx50eq6j1WcUlVBFJ0FudNfYkeHTs9E0goD3yW1CtP9r87VFtB LBQ3CZP/8oe+U58dNux96qCkVUxLZyywjcs9RqdYbIRUin6a3QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFD8S3CVzHX0O/VuIsAfy3ocSFsybMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MDk0ZmVmMy1hNDRmLTRlMTItOThlZS03MmNmNTNkOWRlODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwOTRmZWYzLWE0NGYtNGUxMi05 OGVlLTcyY2Y1M2Q5ZGU4My83MDk0ZmVmMy1hNDRmLTRlMTItOThlZS03MmNmNTNk OWRlODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCG+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg6hnT5pBy/vhfyhmFrOPb cm1cRzCrMKl37/xkKhd89x6wNGAXvrn0lUs3Xd+V6U5NH2yxdg3ffELdpxNsQV2n CicUQ3ptz23KDEU/q8JDWrHvCjOP81J/kxZTWrN/KHGb23hEwG/8zZWTlVcuebG/ x1PjRDntrxTn3sNupOe6KjlTDjWzITmaoMREmKHae7QTqMMbtHMSsqN0eyAbix8X /NavP6iUO59E6MTDv4MrYJf4tm2YtvIAL8Rx1xBG77VJEHR1GI0WwGvbk52eunx9 /S83jz5QB+3zac3rRvF7NFVd2mhtnzFtD9jgdTmcVbr7icmJS22+pm2tSxyMgXzn -----END CERTIFICATE-----Generated at Wed Nov 5 05:58:18 2025 by rpki-client