$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf.cer File: 17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf.cer (raw, json) Hash identifier: 00hhre+GghGI/GfvtBfRQ2hGdB033K6/2tw2YxHUaGc= Subject key identifier: B9:F9:0A:1A:F8:31:D0:AB:04:80:A8:71:B1:40:51:3B:05:82:D7:98 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B268E4DBDF1328E98F4DE2180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 17:55:08 +0000 Certificate not after: Tue 14 Dec 2027 18:55:08 +0000 Subordinate resources: AS: 401956 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:8e:4d:bd:f1:32:8e:98:f4:de:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 10 17:55:08 2025 GMT Not After : Dec 14 18:55:08 2027 GMT Subject: CN=17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:11:db:2e:92:12:f8:16:68:b0:d5:03:8d: 80:72:fb:62:10:b0:58:a9:db:09:c4:91:fe:b1:9d: f7:e4:58:c5:a7:51:11:8f:46:42:ab:9c:6d:c2:b0: 1c:60:20:66:5b:36:3c:49:43:0c:39:d3:eb:13:71: 2f:53:ff:85:00:da:5c:c9:90:d6:b0:47:1f:c8:48: 4f:ee:ac:d7:25:e2:9f:bd:39:42:7e:51:b6:37:b4: 11:11:c8:e0:0d:be:30:97:42:77:f2:25:c5:4a:d4: c9:bf:ed:d9:4f:3e:a1:da:ae:1b:64:04:33:fb:b5: 35:89:57:ee:90:78:25:84:7c:04:88:2c:2c:6c:fa: fa:88:6f:54:f8:67:72:bd:ac:37:6c:d8:13:cb:53: 41:fd:60:03:a4:30:21:29:08:3f:63:a3:95:b3:bf: 9f:4a:15:16:e7:cb:3e:6f:ed:5d:e5:21:ba:ff:b4: b2:99:67:c9:5a:40:b4:c6:8b:87:2d:87:6b:8b:38: 2d:c3:12:3d:c4:2d:64:41:f9:07:03:27:bd:16:ca: cf:1a:ad:f4:e0:4e:d0:cf:ac:f4:f1:f3:cf:9b:05: f7:0e:eb:1f:fc:5d:0b:b1:77:5a:4b:0f:47:4f:80: 44:18:67:93:d5:53:50:d2:19:23:8c:f3:24:43:54: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:0A:1A:F8:31:D0:AB:04:80:A8:71:B1:40:51:3B:05:82:D7:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf/17d4a0b2-df7e-4baf-8870-06b5c0d8dfaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:32:ff:c7:f3:2f:22:95:6c:f2:e5:f4:e1:59:78:c6:8a:b3: 41:67:15:58:00:2e:e4:9b:54:11:58:ff:a2:bc:34:2b:1b:8f: 85:7d:ae:0f:3e:19:1f:7c:9d:dd:e1:60:26:20:23:6c:62:66: 43:2d:e5:b9:35:4e:dd:a0:4d:12:ba:16:ad:7e:1c:f6:61:d6: 1f:65:28:2a:0e:45:7b:fc:1e:76:6b:a8:11:76:68:ac:67:e1: 1a:2a:56:12:b5:6f:ff:3b:15:1a:36:61:fd:a2:23:80:8c:34: 1a:37:fa:3f:70:aa:73:0b:25:ba:22:b3:ef:fb:7a:6d:f5:fa: 0b:32:f8:c6:7b:40:70:c1:32:7f:aa:c6:94:4b:4c:13:af:65: 7c:8f:ec:39:92:1e:fc:4f:dd:5b:f6:43:f9:59:a9:74:eb:7a: 41:c2:0a:95:9e:fd:dd:52:92:46:6d:ed:36:d2:d8:0e:fb:dd: bd:ee:df:4f:c0:bb:0a:3e:e7:35:87:85:e7:36:e6:7a:fa:5d: 43:f7:1c:28:7e:d2:40:e4:17:04:fd:c2:83:80:91:b1:b1:b6: 93:d4:12:05:ac:78:71:8e:75:d8:28:97:ab:d1:15:36:98:21: 34:e2:1c:08:6f:41:f0:46:9a:74:7a:49:12:8c:07:82:3a:fc: 99:1f:7f:96 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEsmjk298TKOmPTeIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxMDE3NTUwOFoXDTI3MTIxNDE4NTUwOFowLzEtMCsGA1UEAxMk MTdkNGEwYjItZGY3ZS00YmFmLTg4NzAtMDZiNWMwZDhkZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos8R2y6SEvgWaLDVA42AcvtiELBYqdsJxJH+ sZ335FjFp1ERj0ZCq5xtwrAcYCBmWzY8SUMMOdPrE3EvU/+FANpcyZDWsEcfyEhP 7qzXJeKfvTlCflG2N7QREcjgDb4wl0J38iXFStTJv+3ZTz6h2q4bZAQz+7U1iVfu kHglhHwEiCwsbPr6iG9U+Gdyvaw3bNgTy1NB/WADpDAhKQg/Y6OVs7+fShUW58s+ b+1d5SG6/7SymWfJWkC0xouHLYdrizgtwxI9xC1kQfkHAye9FsrPGq304E7Qz6z0 8fPPmwX3Dusf/F0LsXdaSw9HT4BEGGeT1VNQ0hkjjPMkQ1QULwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFLn5Chr4MdCrBICocbFAUTsFgteYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x N2Q0YTBiMi1kZjdlLTRiYWYtODg3MC0wNmI1YzBkOGRmYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzE3ZDRhMGIyLWRmN2UtNGJhZi04 ODcwLTA2YjVjMGQ4ZGZhZi8xN2Q0YTBiMi1kZjdlLTRiYWYtODg3MC0wNmI1YzBk OGRmYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiIkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEwy/8fzLyKVbPLl9OFZeMaKs0Fn FVgALuSbVBFY/6K8NCsbj4V9rg8+GR98nd3hYCYgI2xiZkMt5bk1Tt2gTRK6Fq1+ HPZh1h9lKCoORXv8HnZrqBF2aKxn4RoqVhK1b/87FRo2Yf2iI4CMNBo3+j9wqnML Jbois+/7em31+gsy+MZ7QHDBMn+qxpRLTBOvZXyP7DmSHvxP3Vv2Q/lZqXTrekHC CpWe/d1SkkZt7TbS2A773b3u30/Auwo+5zWHhec25nr6XUP3HCh+0kDkFwT9woOA kbGxtpPUEgWseHGOddgol6vRFTaYITTiHAhvQfBGmnR6SRKMB4I6/Jkff5Y= -----END CERTIFICATE-----Generated at Fri Oct 10 15:17:19 2025 by rpki-client