$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361.cer File: 3551cc95-27a3-4fce-b6e6-c75933be1361.cer (raw, json) Hash identifier: IYk6b/NKehfYtOgRZ7iM7ydytryHURvgdJzzwRsFgq0= Subject key identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A63EE21D76BF8EA6F5ABDE660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 00:45:35 +0000 Certificate not after: Wed 06 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 32828 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:ee:21:d7:6b:f8:ea:6f:5a:bd:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 3 00:45:35 2025 GMT Not After : Oct 6 00:45:35 2027 GMT Subject: CN=3551cc95-27a3-4fce-b6e6-c75933be1361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:f0:ae:8c:94:26:7b:f5:76:bc:d0:73:d6: cc:13:ac:16:6e:45:52:6f:83:36:0a:e1:b6:29:40: 05:06:35:f5:a6:58:c2:8d:0e:38:78:a5:f2:68:a8: 3a:09:76:79:27:ae:c7:76:7f:f1:49:20:fb:ac:d9: 20:4f:c1:df:e5:12:be:18:c2:9f:52:20:b3:5c:ea: c3:66:ab:6b:36:af:38:26:ee:ff:c3:8d:12:99:13: 80:6a:6e:9b:aa:22:ac:a5:87:c1:be:3b:56:2d:38: fc:71:ff:8e:94:79:c7:3d:8a:9e:c0:91:5b:2e:36: 46:88:8b:b5:31:7e:c1:bb:71:f8:09:de:a3:e5:fd: 65:fc:f0:7c:a7:fd:f4:48:28:75:11:b7:35:a9:e8: 56:a5:4a:34:a4:3f:e9:b1:6a:1d:50:a9:23:61:0b: 13:02:8d:60:a8:dd:15:a5:d4:21:89:3a:7f:a7:18: 9b:d1:f9:ef:1e:ee:c3:3c:5a:5d:e5:02:1b:1b:2e: 99:64:6c:08:e4:ec:42:6a:f5:64:7e:3b:f4:ed:10: e1:b7:2c:48:78:d0:ae:e7:3b:3e:d9:94:01:22:9f: 08:11:4b:ef:9c:58:56:af:88:65:1a:f3:53:43:49: 48:0f:48:e2:7b:76:24:7a:b5:fc:ef:9a:e6:81:d9: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:67:34:cb:4e:7a:e8:47:cf:b3:e2:4c:fc:97:c6:60:c3:6f: 1c:41:e4:30:2a:46:39:12:ed:29:c5:1f:7d:88:4a:db:d5:83: c4:84:97:ea:27:e7:6c:6c:1f:31:b7:9a:b0:d5:c2:5c:9a:e5: ab:02:21:82:06:85:69:63:8e:39:97:7f:e2:f5:3a:da:1f:08: db:3e:99:01:e2:24:5e:34:e6:1a:58:be:03:46:c6:70:ad:34: d1:a3:24:84:dd:7e:fe:48:56:22:86:e6:b9:f9:16:9d:ed:33: d1:08:83:e8:f3:7e:13:1a:9e:8e:b7:d3:f6:51:41:a9:30:47: 4b:b1:ab:69:30:0a:fd:63:98:78:b2:51:47:1f:26:09:91:4c: 33:b2:8e:7d:ff:12:fe:e4:4e:2f:b4:03:be:4d:8d:ad:75:36: 18:a7:4b:be:14:7e:af:f2:6d:0c:73:02:19:6d:a3:97:cd:55: 5a:a9:28:1b:9c:3e:77:8b:51:ff:93:db:44:98:b1:af:49:c2: ab:ef:67:5a:1d:b5:ba:0b:c5:40:ba:53:02:d6:70:83:98:13: 42:2d:18:e7:c0:ad:a9:45:0c:78:95:b2:0f:5a:5e:bd:9c:72: dc:8d:aa:a5:28:e8:f3:2c:b6:2f:27:8d:5a:0a:d8:38:e6:22: 7b:a4:51:4c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEpj7iHXa/jqb1q95mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwMzAwNDUzNVoXDTI3MTAwNjAwNDUzNVowLzEtMCsGA1UEAxMk MzU1MWNjOTUtMjdhMy00ZmNlLWI2ZTYtYzc1OTMzYmUxMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2XwroyUJnv1drzQc9bME6wWbkVSb4M2CuG2 KUAFBjX1pljCjQ44eKXyaKg6CXZ5J67Hdn/xSSD7rNkgT8Hf5RK+GMKfUiCzXOrD ZqtrNq84Ju7/w40SmROAam6bqiKspYfBvjtWLTj8cf+OlHnHPYqewJFbLjZGiIu1 MX7Bu3H4Cd6j5f1l/PB8p/30SCh1Ebc1qehWpUo0pD/psWodUKkjYQsTAo1gqN0V pdQhiTp/pxib0fnvHu7DPFpd5QIbGy6ZZGwI5OxCavVkfjv07RDhtyxIeNCu5zs+ 2ZQBIp8IEUvvnFhWr4hlGvNTQ0lID0jie3YkerX875rmgdkBCwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFGGERRkaXpnDFIq91fh71sRMdaG5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNiZTEzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1NTFjYzk1LTI3YTMtNGZjZS1i NmU2LWM3NTkzM2JlMTM2MS8zNTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNi ZTEzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIA8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADlnNMtOeuhHz7PiTPyXxmDDbxxB 5DAqRjkS7SnFH32IStvVg8SEl+on52xsHzG3mrDVwlya5asCIYIGhWljjjmXf+L1 OtofCNs+mQHiJF405hpYvgNGxnCtNNGjJITdfv5IViKG5rn5Fp3tM9EIg+jzfhMa no630/ZRQakwR0uxq2kwCv1jmHiyUUcfJgmRTDOyjn3/Ev7kTi+0A75Nja11Nhin S74Ufq/ybQxzAhlto5fNVVqpKBucPneLUf+T20SYsa9JwqvvZ1odtboLxUC6UwLW cIOYE0ItGOfAralFDHiVsg9aXr2cctyNqqUo6PMsti8njVoK2DjmInukUUw= -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:12 2025 by rpki-client