$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b.cer File: 46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b.cer (raw, json) Hash identifier: QcvX1NYKQDdnoxrZuS/xTzO/w8OXNq/MvL5O8PdqH0A= Subject key identifier: 44:E1:7C:A6:DB:63:FD:B7:49:A1:CB:BE:E0:92:26:79:C3:8A:30:21 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584B27B7C32B21ABFD58E3892200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 03:54:29 +0000 Certificate not after: Wed 15 Dec 2027 04:54:29 +0000 Subordinate resources: AS: 395436 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:b7:c3:2b:21:ab:fd:58:e3:89:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Sep 11 03:54:29 2025 GMT Not After : Dec 15 04:54:29 2027 GMT Subject: CN=46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:78:26:60:f1:46:72:fa:82:d1:bd:28:95: 21:e4:35:26:dc:e6:85:90:fd:dc:08:b3:49:91:a1: 6f:09:44:b9:30:98:6c:b2:f8:75:15:8a:e7:3f:dd: 1d:d3:e1:50:61:50:d7:d6:80:60:3f:7f:6f:62:94: 86:cf:9a:6a:c8:6b:46:ba:bc:b6:7d:2f:1a:3d:1f: 9e:bd:1b:ba:92:ad:6d:02:e8:05:0f:49:3b:5b:e4: af:89:b8:c1:09:f1:9b:75:b1:0a:4b:8b:d0:64:ee: 8a:77:bf:15:37:4b:ef:bd:1c:64:19:4f:17:e3:e0: 5e:dc:b7:c4:e7:ac:95:c2:51:50:bf:2f:4d:d0:fd: b6:e8:99:c6:9b:5d:bb:0c:12:fd:09:d7:10:60:bb: 79:f7:24:a4:51:ae:8d:d8:d7:db:3a:da:98:fc:19: 68:d2:f4:e6:fe:78:ea:5a:03:24:0d:fa:a1:22:e3: 7b:17:3a:cc:34:52:76:2b:8d:0b:18:1d:51:93:78: 73:01:dd:a4:de:18:8f:c3:a7:ac:ad:68:3c:81:ae: 75:ea:c8:48:55:2f:ff:eb:46:c6:82:79:5e:02:fa: 4f:71:c2:e8:96:db:67:1f:7b:65:e3:9b:9b:bc:f3: d7:b9:dc:7b:9f:eb:75:65:34:44:60:06:41:cc:fc: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E1:7C:A6:DB:63:FD:B7:49:A1:CB:BE:E0:92:26:79:C3:8A:30:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b/46ffe396-5ead-46d7-b4fd-e90ff0b8ba3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395436 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5b:79:b0:be:05:c7:46:e7:a9:e6:a6:9e:94:27:bb:11:e9: ad:1c:f0:f3:70:52:bb:5c:fa:e0:8d:f5:10:3e:0a:53:04:d9: 51:03:f8:62:22:4a:46:fc:79:ff:65:65:26:b8:4b:f5:89:a5: 44:43:96:ce:b9:4e:42:8e:32:a9:e4:6e:99:fe:45:bd:6f:51: 27:b8:08:10:93:c9:b0:e2:18:bf:09:fc:f1:e6:f9:3b:ee:4c: 50:9f:14:1d:ec:79:d1:d1:2c:1c:5e:9e:d5:9c:21:cb:2d:18: 1b:28:58:74:bc:4b:8f:46:32:ad:41:f5:ea:ce:22:a0:2d:52: ab:d9:62:f4:ca:57:06:ca:3f:14:79:a6:eb:58:12:46:f4:51: 2b:e9:de:b7:14:15:63:ed:20:7c:6f:ad:b3:02:3e:c3:d9:0c: bf:ef:09:1f:9c:67:f5:19:2a:fe:e9:f7:30:f3:2a:4f:a0:d1: 95:f4:66:cf:e9:83:0e:83:32:d6:aa:6c:eb:ba:95:66:33:bc: 6a:21:b7:e8:16:1d:a7:c4:8e:fb:5f:6d:6e:d0:43:6f:b6:b5: e6:0f:e8:02:cc:0b:f9:67:fe:53:4f:8a:6b:cf:51:fe:d2:f8: 0d:b9:a8:11:62:b6:e8:95:62:ad:8c:f1:79:43:e2:11:45:d4: 1a:46:a5:eb -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEsnt8MrIav9WOOJIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDkxMTAzNTQyOVoXDTI3MTIxNTA0NTQyOVowLzEtMCsGA1UEAxMk NDZmZmUzOTYtNWVhZC00NmQ3LWI0ZmQtZTkwZmYwYjhiYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh94JmDxRnL6gtG9KJUh5DUm3OaFkP3cCLNJ kaFvCUS5MJhssvh1FYrnP90d0+FQYVDX1oBgP39vYpSGz5pqyGtGury2fS8aPR+e vRu6kq1tAugFD0k7W+SvibjBCfGbdbEKS4vQZO6Kd78VN0vvvRxkGU8X4+Be3LfE 56yVwlFQvy9N0P226JnGm127DBL9CdcQYLt59ySkUa6N2NfbOtqY/Blo0vTm/njq WgMkDfqhIuN7FzrMNFJ2K40LGB1Rk3hzAd2k3hiPw6esrWg8ga516shIVS//60bG gnleAvpPccLolttnH3tl45ubvPPXudx7n+t1ZTREYAZBzPxLxQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEThfKbbY/23SaHLvuCSJnnDijAhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 NmZmZTM5Ni01ZWFkLTQ2ZDctYjRmZC1lOTBmZjBiOGJhM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQ2ZmZlMzk2LTVlYWQtNDZkNy1i NGZkLWU5MGZmMGI4YmEzYi80NmZmZTM5Ni01ZWFkLTQ2ZDctYjRmZC1lOTBmZjBi OGJhM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgisMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEhbebC+BcdG56nmpp6UJ7sR6a0c 8PNwUrtc+uCN9RA+ClME2VED+GIiSkb8ef9lZSa4S/WJpURDls65TkKOMqnkbpn+ Rb1vUSe4CBCTybDiGL8J/PHm+TvuTFCfFB3sedHRLBxentWcIcstGBsoWHS8S49G Mq1B9erOIqAtUqvZYvTKVwbKPxR5putYEkb0USvp3rcUFWPtIHxvrbMCPsPZDL/v CR+cZ/UZKv7p9zDzKk+g0ZX0Zs/pgw6DMtaqbOu6lWYzvGoht+gWHafEjvtfbW7Q Q2+2teYP6ALMC/ln/lNPimvPUf7S+A25qBFituiVYq2M8XlD4hFF1BpGpes= -----END CERTIFICATE-----Generated at Fri Oct 10 09:48:10 2025 by rpki-client