$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer File: bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer (raw, json) Hash identifier: RM3VcgxncQJK+yWtBfIFY+nJJGAqSjugiioQXmtkUhM= Subject key identifier: 33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B381A06D61C4D9FD660C6B440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:45:24 +0000 Certificate not after: Tue 21 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 401172 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1a:06:d6:1c:4d:9f:d6:60:c6:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 17 00:45:24 2025 GMT Not After : Dec 21 01:45:24 2027 GMT Subject: CN=bdfa3ca4-6c5e-4035-8d21-51d1607b8714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:ad:6a:3a:91:fb:1b:20:4d:fc:a0:91:63: 87:d8:e3:46:c1:76:64:d3:2b:93:88:41:b1:15:b9: f8:af:17:4a:3c:e4:34:77:66:4f:cb:2f:4c:ff:6a: dd:0f:7c:aa:1e:be:4b:06:db:aa:d2:16:6a:1f:fd: 55:07:98:8f:60:64:71:cc:59:ee:7e:ec:f3:19:26: 20:40:a8:54:46:1f:e2:86:22:2a:b8:83:3d:ba:25: e0:8d:17:84:97:7d:68:dd:49:20:5f:33:a9:5d:91: 30:9b:94:fa:c5:fb:50:87:73:97:93:39:a6:8b:59: f0:90:e0:fa:06:df:93:73:96:d6:ea:59:76:d8:37: 06:55:a3:e9:9f:cb:b3:26:55:43:5b:ea:c3:93:c8: 33:89:92:8f:77:1d:4f:24:f7:f7:59:0f:4a:7b:fa: 89:a4:69:53:7a:cf:b0:b7:e6:6f:f3:cd:4c:5d:86: 18:8e:44:91:d8:3c:83:0c:f0:c8:32:b1:47:ee:9c: 85:e2:6e:af:f3:b2:59:97:d5:11:6d:1a:b3:83:e4: bd:90:39:72:f1:d5:4f:b4:b7:a4:58:cd:2e:7a:29: f7:cb:ce:7a:ed:4e:53:56:8f:36:a6:da:3f:41:21: 64:29:2d:39:7e:20:1e:ae:d2:5e:2d:29:16:9c:04: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401172 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:11:03:6f:40:54:70:cb:2c:08:ef:a6:93:1e:dd:57:16:da: 32:74:95:d5:a9:52:8d:91:af:50:79:5f:0d:70:ef:14:56:a6: 06:99:4f:6d:a5:ab:db:45:0f:c4:88:22:de:b7:a9:be:35:88: 0b:a1:1b:a7:61:fc:06:7a:c6:c3:a3:8b:df:43:54:bb:3d:13: 4e:a6:f0:e7:72:67:3d:b5:d1:36:c4:14:7b:30:84:a4:58:48: 84:c3:12:ff:a8:6d:ea:4f:06:48:3e:62:90:d2:be:16:04:55: 8d:f9:6f:47:70:f3:30:b9:cc:5e:6e:1d:6a:4f:d7:c3:cc:e6: 24:55:f1:ef:0e:4b:c4:13:0d:68:22:ab:93:4e:21:2e:a3:8e: c1:87:97:8c:ed:ee:22:2c:34:f6:c9:59:29:92:33:62:14:cb: 50:79:fd:0d:b1:1d:51:ae:2a:26:f9:ec:87:6c:d3:8f:f3:dc: 7d:7c:95:9d:b0:3f:4d:73:90:c6:b2:bd:7d:b8:8c:a9:21:8d: d4:09:28:ce:08:e8:f2:45:cf:8e:f1:75:07:d5:2c:ba:eb:5a: 66:fb:7d:e2:04:bd:cc:a6:d1:7e:ff:fb:4a:cb:c1:d6:d9:b6: 26:e4:04:db:93:42:ec:8f:86:b0:31:d1:5f:34:8c:cd:25:27: 8a:ee:46:fb -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEs4GgbWHE2f1mDGtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxNzAwNDUyNFoXDTI3MTIyMTAxNDUyNFowLzEtMCsGA1UEAxMk YmRmYTNjYTQtNmM1ZS00MDM1LThkMjEtNTFkMTYwN2I4NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvKtajqR+xsgTfygkWOH2ONGwXZk0yuTiEGx Fbn4rxdKPOQ0d2ZPyy9M/2rdD3yqHr5LBtuq0hZqH/1VB5iPYGRxzFnufuzzGSYg QKhURh/ihiIquIM9uiXgjReEl31o3UkgXzOpXZEwm5T6xftQh3OXkzmmi1nwkOD6 Bt+Tc5bW6ll22DcGVaPpn8uzJlVDW+rDk8gziZKPdx1PJPf3WQ9Ke/qJpGlTes+w t+Zv881MXYYYjkSR2DyDDPDIMrFH7pyF4m6v87JZl9URbRqzg+S9kDly8dVPtLek WM0uein3y8567U5TVo82pto/QSFkKS05fiAertJeLSkWnARtpQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDMH3h7tUim/3IpIBrE3Q5U9vYU1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i ZGZhM2NhNC02YzVlLTQwMzUtOGQyMS01MWQxNjA3Yjg3MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JkZmEzY2E0LTZjNWUtNDAzNS04 ZDIxLTUxZDE2MDdiODcxNC9iZGZhM2NhNC02YzVlLTQwMzUtOGQyMS01MWQxNjA3 Yjg3MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh8UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADERA29AVHDLLAjvppMe3VcW2jJ0 ldWpUo2Rr1B5Xw1w7xRWpgaZT22lq9tFD8SIIt63qb41iAuhG6dh/AZ6xsOji99D VLs9E06m8OdyZz210TbEFHswhKRYSITDEv+obepPBkg+YpDSvhYEVY35b0dw8zC5 zF5uHWpP18PM5iRV8e8OS8QTDWgiq5NOIS6jjsGHl4zt7iIsNPbJWSmSM2IUy1B5 /Q2xHVGuKib57Ids04/z3H18lZ2wP01zkMayvX24jKkhjdQJKM4I6PJFz47xdQfV LLrrWmb7feIEvcym0X7/+0rLwdbZtibkBNuTQuyPhrAx0V80jM0lJ4ruRvs= -----END CERTIFICATE-----Generated at Fri Oct 10 15:23:42 2025 by rpki-client