$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01.cer File: 3f8b2ed9-3f07-420f-a388-1b343b569d01.cer (raw, json) Hash identifier: k+tJClFlGXqolf15v+qergRD9G2JYV3HfJjQBRe00js= Subject key identifier: A3:A2:D2:BD:4E:DA:44:C5:EE:39:3F:A6:D3:41:C7:A8:81:72:81:E8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B1D94874CF702121B7AA1A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/3f8b2ed9-3f07-420f-a388-1b343b569d01.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Sep 2025 12:45:24 +0000 Certificate not after: Sat 11 Dec 2027 13:45:24 +0000 Subordinate resources: AS: 399671 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:94:87:4c:f7:02:12:1b:7a:a1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 7 12:45:24 2025 GMT Not After : Dec 11 13:45:24 2027 GMT Subject: CN=3f8b2ed9-3f07-420f-a388-1b343b569d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:b0:a8:b2:97:ca:4d:39:e6:ee:6d:66:42: b4:2d:80:6b:b8:9d:65:23:a5:ed:14:63:5b:18:b8: b3:0f:4b:c6:b1:18:cd:bd:f4:73:8d:db:d2:d7:6b: f5:73:c8:f8:47:0e:76:bf:e1:81:fa:af:a4:7a:e4: 24:24:44:79:c2:99:2a:31:4d:55:49:36:e1:5f:22: 82:5a:52:a5:72:66:48:56:5c:50:ef:8b:ab:fd:a4: 1a:a4:44:1a:10:dc:8e:d9:b6:ab:70:95:bb:8b:50: 2a:30:57:93:68:33:20:73:85:b6:4b:9e:73:fa:00: 98:84:4b:a1:9b:ea:ee:f7:2f:43:66:19:f7:04:ba: 5e:7f:98:69:45:1f:67:c4:73:38:e5:c8:33:78:1f: d2:6f:20:44:21:02:b9:17:b4:c7:1e:e0:9f:69:0d: 14:45:7f:2f:6f:51:ab:67:fd:06:a5:33:d1:68:37: d2:69:33:03:aa:d6:53:63:af:3c:2e:58:d8:df:2f: fe:8e:2d:51:b8:9d:15:f5:87:83:62:58:f5:94:50: 5f:e9:d1:7e:19:70:06:45:60:4e:0f:32:89:5b:24: 86:fd:d3:94:80:be:25:75:41:e1:e0:e1:07:a3:b0: 25:e5:6f:8c:84:66:76:6c:5c:df:31:76:79:92:6c: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:D2:BD:4E:DA:44:C5:EE:39:3F:A6:D3:41:C7:A8:81:72:81:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/3f8b2ed9-3f07-420f-a388-1b343b569d01.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4d:44:30:96:f4:25:e9:92:be:d3:32:8b:fe:8d:71:d9:0f: ff:31:58:ee:63:a7:5d:24:0d:1b:6a:e7:6e:e2:33:44:49:31: 12:cd:55:67:a0:4b:09:28:98:b2:ce:23:78:f3:16:69:db:c4: 53:c5:79:d0:2c:4f:46:b9:e6:c0:2d:ba:d9:8b:59:64:c0:8c: 4f:fe:7b:23:8d:af:db:f8:b1:e7:78:ad:22:a9:0a:df:6c:3e: 1e:50:33:14:f9:ec:9c:ef:68:bf:4d:84:b2:b0:30:77:63:38: 93:3e:ff:fc:0d:f7:dc:2b:e6:5b:e9:f2:33:aa:d8:73:c4:4d: c6:18:9f:fa:c0:f4:68:1b:5d:b5:ee:df:eb:82:cf:74:c6:c3: ec:13:30:53:04:1d:4b:32:5d:bf:58:58:b3:0a:80:84:64:fa: 8b:c6:8c:2d:8f:a6:7b:c2:a1:6c:60:ac:5e:2a:eb:e2:c8:42: 32:d2:b4:50:4c:ba:f1:c3:3f:02:8c:7e:16:f5:48:59:6e:72: fc:f1:48:6f:c9:52:de:9b:0a:50:88:ed:c9:c4:3a:9e:82:4a: 38:bc:8c:db:fc:1e:a1:fa:f4:76:b5:32:d6:d2:d9:ff:98:06: 5d:2b:33:5f:c9:d5:05:72:04:50:f1:63:04:3d:ae:be:58:05: 8b:9e:8a:6a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEsdlIdM9wISG3qhqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkwNzEyNDUyNFoXDTI3MTIxMTEzNDUyNFowLzEtMCsGA1UEAxMk M2Y4YjJlZDktM2YwNy00MjBmLWEzODgtMWIzNDNiNTY5ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qGwqLKXyk055u5tZkK0LYBruJ1lI6XtFGNb GLizD0vGsRjNvfRzjdvS12v1c8j4Rw52v+GB+q+keuQkJER5wpkqMU1VSTbhXyKC WlKlcmZIVlxQ74ur/aQapEQaENyO2barcJW7i1AqMFeTaDMgc4W2S55z+gCYhEuh m+ru9y9DZhn3BLpef5hpRR9nxHM45cgzeB/SbyBEIQK5F7THHuCfaQ0URX8vb1Gr Z/0GpTPRaDfSaTMDqtZTY688LljY3y/+ji1RuJ0V9YeDYlj1lFBf6dF+GXAGRWBO DzKJWySG/dOUgL4ldUHh4OEHo7Al5W+MhGZ2bFzfMXZ5kmzfewIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKOi0r1O2kTF7jk/ptNBx6iBcoHoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z ZjhiMmVkOS0zZjA3LTQyMGYtYTM4OC0xYjM0M2I1NjlkMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNmOGIyZWQ5LTNmMDctNDIwZi1h Mzg4LTFiMzQzYjU2OWQwMS8zZjhiMmVkOS0zZjA3LTQyMGYtYTM4OC0xYjM0M2I1 NjlkMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhk3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACRNRDCW9CXpkr7TMov+jXHZD/8x WO5jp10kDRtq527iM0RJMRLNVWegSwkomLLOI3jzFmnbxFPFedAsT0a55sAtutmL WWTAjE/+eyONr9v4sed4rSKpCt9sPh5QMxT57JzvaL9NhLKwMHdjOJM+//wN99wr 5lvp8jOq2HPETcYYn/rA9GgbXbXu3+uCz3TGw+wTMFMEHUsyXb9YWLMKgIRk+ovG jC2PpnvCoWxgrF4q6+LIQjLStFBMuvHDPwKMfhb1SFlucvzxSG/JUt6bClCI7cnE Op6CSji8jNv8HqH69Ha1MtbS2f+YBl0rM1/J1QVyBFDxYwQ9rr5YBYueimo= -----END CERTIFICATE-----Generated at Fri Oct 10 15:18:32 2025 by rpki-client