$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer File: d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer (raw, json) Hash identifier: rMx3hbQtPkdr5p/hv1CGsA2PEMjR98m6I3EmeJ17eFc= Subject key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584B99292CEE00409360F6619380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 19:09:20 +0000 Certificate not after: Sun 18 Jul 2027 15:58:00 +0000 Subordinate resources: AS: 19830 IP: 64.18.96.0/19 IP: 144.249.192.0/19 IP: 208.99.96.0/20 IP: 2607:dd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:29:2c:ee:00:40:93:60:f6:61:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 21 19:09:20 2025 GMT Not After : Jul 18 15:58:00 2027 GMT Subject: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:35:fe:ae:c2:91:b6:74:b8:00:44:52:53: e5:93:7d:ef:e1:6c:0c:68:c7:02:dc:fc:3f:40:15: e2:5b:2d:c6:96:82:de:96:37:15:a9:f1:c5:ae:41: 2b:2a:79:b0:94:99:da:b3:c1:62:12:fc:a6:51:23: e7:3b:0f:1e:99:a5:bc:af:a6:ef:b8:07:a3:c0:b3: ce:8a:a2:7b:fc:8e:7d:12:54:c4:cb:31:4f:55:38: 9a:e1:88:dd:3c:51:a1:f8:83:bb:ac:5d:15:b7:0a: 16:b0:d9:17:9f:17:d6:87:bd:7b:0d:fc:ba:f2:64: c3:34:91:7e:92:13:74:de:01:60:09:ee:c2:29:da: 01:d1:f3:63:ba:53:0c:76:c1:f8:fa:d1:e3:31:8e: 66:b1:9e:0c:5b:ea:99:b0:62:85:e4:53:06:77:ee: d4:f8:38:a4:92:da:b4:38:ef:06:4b:9f:cc:eb:f1: bb:e8:97:47:71:4a:92:66:6e:08:e3:90:6e:cc:0a: e5:4b:d7:94:09:0b:86:e4:e2:e0:ae:e1:a6:f1:99: c0:da:f6:8e:ba:9a:e3:24:16:73:40:3d:89:68:98: 62:b7:eb:8b:bc:f4:70:e8:03:99:1c:2f:0b:5d:73: a4:71:c8:bb:9e:15:9e:34:f8:f8:0e:ae:3b:d0:93: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.18.96.0/19 144.249.192.0/19 208.99.96.0/20 IPv6: 2607:dd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19830 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:08:c1:81:58:2f:22:52:56:dd:ff:d1:86:00:a3:24:9c:cb: a4:9d:04:cd:a7:63:6b:25:72:64:67:55:80:75:f8:d7:6c:b9: 16:bf:42:66:7b:74:22:25:dd:60:14:3c:68:c5:8f:9f:14:fc: 1a:75:6d:77:ee:0e:28:e9:97:05:2e:2d:5f:81:89:8a:85:39: 12:fb:91:bc:54:da:ec:d3:b1:c3:a7:9b:69:8c:1b:de:21:c7: 49:17:4d:49:49:47:fe:4b:06:0e:29:c8:75:99:9c:67:2d:02: 6e:79:bc:3f:dd:b3:87:b5:b4:a9:ce:2c:3f:ae:06:89:e4:ac: d9:21:c0:ac:4c:ff:59:53:54:93:ef:45:48:dd:38:49:21:44: 66:eb:a4:90:1f:51:dc:d4:47:2d:8b:c4:f9:ce:51:89:ec:0f: 11:50:e5:91:90:4b:85:d1:9c:b6:48:06:6f:b1:42:2c:0e:1f: 43:2d:d3:bf:91:1a:ad:45:b3:6b:02:89:27:8e:91:84:b0:a9: 06:db:e4:d2:90:62:2c:2c:48:2a:4d:da:2d:67:d5:3c:36:b4: ea:17:1e:7c:df:8e:b4:d8:68:91:88:d8:67:37:50:41:f2:39: b9:ef:41:04:53:13:df:97:5d:bf:01:32:67:05:78:5e:44:da: cb:ff:b1:d8 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEuZKSzuAECTYPZhk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTAyMTE5MDkyMFoXDTI3MDcxODE1NTgwMFowLzEtMCsGA1UEAxMk ZDZhZDUyNmMtYjcwNS00ZjRlLWEyZGEtNmI3ZjEyZjFmN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBs1/q7CkbZ0uABEUlPlk33v4WwMaMcC3Pw/ QBXiWy3GloLeljcVqfHFrkErKnmwlJnas8FiEvymUSPnOw8emaW8r6bvuAejwLPO iqJ7/I59ElTEyzFPVTia4YjdPFGh+IO7rF0VtwoWsNkXnxfWh717Dfy68mTDNJF+ khN03gFgCe7CKdoB0fNjulMMdsH4+tHjMY5msZ4MW+qZsGKF5FMGd+7U+Dikktq0 OO8GS5/M6/G76JdHcUqSZm4I45BuzArlS9eUCQuG5OLgruGm8ZnA2vaOuprjJBZz QD2JaJhit+uLvPRw6AOZHC8LXXOkcci7nhWeNPj4Dq470JOkSwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFAb09AnOXY6MlXNpFCLPKn+5kaOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k NmFkNTI2Yy1iNzA1LTRmNGUtYTJkYS02YjdmMTJmMWY3ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q2YWQ1MjZjLWI3MDUtNGY0ZS1h MmRhLTZiN2YxMmYxZjdlMy9kNmFkNTI2Yy1iNzA1LTRmNGUtYTJkYS02YjdmMTJm MWY3ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVAEmADBAWQ+cADBATQY2AwDQQCAAIwBwMFACYH 3YAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTXYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiAjBgVgvIlJW 3f/RhgCjJJzLpJ0EzadjayVyZGdVgHX412y5Fr9CZnt0IiXdYBQ8aMWPnxT8GnVt d+4OKOmXBS4tX4GJioU5EvuRvFTa7NOxw6ebaYwb3iHHSRdNSUlH/ksGDinIdZmc Zy0Cbnm8P92zh7W0qc4sP64GieSs2SHArEz/WVNUk+9FSN04SSFEZuukkB9R3NRH LYvE+c5RiewPEVDlkZBLhdGctkgGb7FCLA4fQy3Tv5EarUWzawKJJ46RhLCpBtvk 0pBiLCxIKk3aLWfVPDa06hcefN+OtNhokYjYZzdQQfI5ue9BBFMT35ddvwEyZwV4 XkTay/+x2A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:36 2025 by rpki-client