$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f.cer File: d59d6c07-f5a4-48a8-a689-6b002810690f.cer (raw, json) Hash identifier: 5QinUs5vjEsQooLRAudJw69J0NUfDgkOyHa1UIlG4q8= Subject key identifier: 98:3E:52:00:92:08:79:A3:BF:E6:5E:84:90:A3:10:52:BB:E2:BA:DD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B11047322E00EEE39AD7BB300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/d59d6c07-f5a4-48a8-a689-6b002810690f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 401110 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:22:e0:0e:ee:39:ad:7b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=d59d6c07-f5a4-48a8-a689-6b002810690f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8a:53:98:e8:58:d8:32:57:5a:05:11:54:0e: 2b:41:52:51:f8:8d:ed:1a:39:50:98:48:82:49:3d: 6a:60:f4:a1:97:04:33:20:83:16:01:cc:2c:10:a4: 70:8f:fc:58:e4:c9:83:49:6b:23:f6:65:7a:77:2f: 07:6d:b1:97:be:15:34:70:62:e0:05:ba:f8:85:2d: 3a:21:e1:96:9e:3d:f5:11:74:ff:30:1d:57:64:a4: 63:ff:0b:fc:41:7b:92:c8:6f:d0:e2:8c:d2:3c:de: 5a:90:92:e9:0c:12:f8:cf:96:8f:2d:5c:3d:74:67: f5:54:9e:a8:68:05:07:28:44:71:7b:ad:14:ef:db: b5:06:76:11:16:11:a7:9a:56:1d:0d:44:d6:60:c6: e4:03:b0:2a:9c:2c:65:a4:0f:08:b4:0c:81:e5:2d: 84:80:e6:12:c4:21:cc:0d:01:71:da:f7:79:14:c1: ce:99:df:fe:33:bd:e2:60:f0:f4:a2:60:b7:28:86: f1:6c:d9:43:b0:e5:55:e4:bf:61:5e:e5:ea:73:25: be:68:31:5c:b3:d0:4e:96:97:6b:92:9b:3b:22:2f: 9d:23:ef:8a:f0:fc:06:2b:5d:f5:91:5e:e7:c5:a0: 32:e4:92:b9:02:ab:31:a4:89:54:36:83:ac:a7:f2: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:52:00:92:08:79:A3:BF:E6:5E:84:90:A3:10:52:BB:E2:BA:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/d59d6c07-f5a4-48a8-a689-6b002810690f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8b:5b:11:89:28:0a:b5:f3:ea:23:c6:af:e5:93:a9:ff:45: c3:05:10:18:f0:6e:69:a5:f6:c6:67:8c:c3:04:8f:73:e7:0b: 4a:9b:0f:5d:1d:71:37:7f:65:56:3f:2a:07:31:5e:2a:fe:82: e9:4d:63:eb:50:02:6d:1b:11:cb:0f:74:bf:61:51:bb:6a:26: bf:80:e5:ec:9d:98:f5:68:7a:e1:81:a8:2a:91:14:29:62:90: 09:be:a3:89:48:04:80:21:a0:bd:ad:e3:dd:2c:84:1f:d1:cd: 31:d0:2b:16:c1:af:1b:71:6f:08:dc:7e:e4:ef:74:59:23:c1: 3b:55:af:be:3a:3e:b8:3d:18:e8:49:26:7e:94:d8:80:ba:3b: d2:e2:7a:66:cc:1c:51:d9:c4:69:db:bc:ca:5f:d3:a3:7e:ac: 4b:4a:38:b5:b5:1e:cd:c5:86:77:9a:73:1a:94:af:37:12:6c: 58:c7:f8:7a:7a:80:f8:35:f1:d9:f8:4e:df:dd:ad:ac:86:1f: 44:69:5b:96:6d:26:d6:b0:bd:d9:33:db:49:79:e5:47:2d:5e: c9:2a:70:82:cb:8e:2d:14:14:40:c8:03:2d:ff:00:84:86:88: 68:91:43:4b:bd:cd:31:e2:fa:af:7b:38:0a:bb:36:52:eb:b6: 8b:d3:7e:57 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEsRBHMi4A7uOa17swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk ZDU5ZDZjMDctZjVhNC00OGE4LWE2ODktNmIwMDI4MTA2OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhopTmOhY2DJXWgURVA4rQVJR+I3tGjlQmEiC ST1qYPShlwQzIIMWAcwsEKRwj/xY5MmDSWsj9mV6dy8HbbGXvhU0cGLgBbr4hS06 IeGWnj31EXT/MB1XZKRj/wv8QXuSyG/Q4ozSPN5akJLpDBL4z5aPLVw9dGf1VJ6o aAUHKERxe60U79u1BnYRFhGnmlYdDUTWYMbkA7AqnCxlpA8ItAyB5S2EgOYSxCHM DQFx2vd5FMHOmd/+M73iYPD0omC3KIbxbNlDsOVV5L9hXuXqcyW+aDFcs9BOlpdr kps7Ii+dI++K8PwGK131kV7nxaAy5JK5AqsxpIlUNoOsp/LbEQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJg+UgCSCHmjv+ZehJCjEFK74rrdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NTlkNmMwNy1mNWE0LTQ4YTgtYTY4OS02YjAwMjgxMDY5MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q1OWQ2YzA3LWY1YTQtNDhhOC1h Njg5LTZiMDAyODEwNjkwZi9kNTlkNmMwNy1mNWE0LTQ4YTgtYTY4OS02YjAwMjgx MDY5MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh7WMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA2LWxGJKAq18+ojxq/lk6n/RcMF EBjwbmml9sZnjMMEj3PnC0qbD10dcTd/ZVY/KgcxXir+gulNY+tQAm0bEcsPdL9h UbtqJr+A5eydmPVoeuGBqCqRFClikAm+o4lIBIAhoL2t490shB/RzTHQKxbBrxtx bwjcfuTvdFkjwTtVr746Prg9GOhJJn6U2IC6O9LiembMHFHZxGnbvMpf06N+rEtK OLW1Hs3FhneacxqUrzcSbFjH+Hp6gPg18dn4Tt/drayGH0RpW5ZtJtawvdkz20l5 5UctXskqcILLji0UFEDIAy3/AISGiGiRQ0u9zTHi+q97OAq7NlLrtovTflc= -----END CERTIFICATE-----Generated at Wed Sep 17 17:29:42 2025 by rpki-client