$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer File: c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer (raw, json) Hash identifier: fbF2tbSYGiljJVd6uNq2cnoWcKEMdBbN8G1MgMiy7ps= Subject key identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A66B8D41F2D1B5A6897AE6200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:45:37 +0000 Certificate not after: Thu 07 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 46401 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b8:d4:1f:2d:1b:5a:68:97:ae:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 4 00:45:37 2025 GMT Not After : Oct 7 00:45:37 2027 GMT Subject: CN=c62b2f2e-99d7-4927-b2c8-10b5b15e00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:33:1f:af:4b:2b:8b:fc:a6:3b:4a:ba:36: dd:c3:49:43:5f:22:e0:1e:d6:8f:95:b4:63:c2:89: c8:31:d2:8a:cf:a9:6a:64:a4:c8:30:c5:2d:d6:f0: 47:c9:b6:13:51:4b:a2:d9:71:3d:8f:f6:bc:9f:66: f4:38:8b:0e:34:80:3a:96:02:1d:a3:9d:16:8a:98: db:83:4f:ad:81:77:1d:b1:ac:f4:83:66:ef:95:71: 86:70:be:46:27:21:af:a9:1a:70:88:44:eb:d1:d2: 81:75:1e:bf:2a:6d:d5:64:01:b6:fe:c0:e4:4e:7f: 75:62:39:a2:a0:16:f7:9f:ce:d6:19:ff:92:ff:90: 01:bb:86:87:c4:e2:6d:b7:eb:03:cb:09:f6:a8:af: 7f:37:58:d6:49:cf:13:25:02:19:77:e1:31:db:a6: 8b:09:40:0a:b2:83:d8:33:02:94:b3:c3:39:74:c5: e9:67:33:3c:c1:4e:7c:5d:bf:94:d8:a6:d5:db:f7: 77:6f:bb:f8:0f:83:fc:56:0d:44:bb:1a:ea:00:af: af:6a:79:4d:9f:27:31:a3:03:18:4c:85:bf:d4:61: cd:5d:94:51:af:5e:46:31:67:89:15:33:11:5d:b5: 95:d4:96:5f:57:40:2d:0a:fe:4c:0f:4a:dc:d8:9c: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46401 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f5:43:a0:26:79:b1:25:0b:64:5a:d1:cd:25:d6:18:0f:88: 31:42:57:d8:d2:57:cf:e8:04:20:22:25:09:cd:8f:d4:b4:83: 08:66:d6:2f:d2:07:34:18:fd:68:3f:6c:ec:1c:96:3b:e2:f8: 76:cd:84:86:be:bf:25:f5:e4:a2:50:5c:ee:ef:16:fe:e9:49: 0f:c9:d1:b3:6f:3d:f8:70:18:6a:79:9a:f4:d9:1e:a2:20:d1: 3b:4d:b7:89:2e:1b:da:61:78:9a:5b:41:41:36:d9:43:81:b4: e6:5b:4f:b3:26:0a:9d:18:b3:3a:f8:c5:e0:02:87:98:40:02: 4a:00:29:ba:a9:2e:94:8f:5d:55:a1:a6:d0:1a:33:c3:1e:ef: 79:36:2e:ac:c3:6d:82:a8:ca:b4:e2:d9:8d:17:ad:20:c1:8a: 5b:b8:d7:b5:16:fb:f4:0c:6b:46:15:f9:9b:87:21:a3:e1:34: a1:64:0a:f5:60:39:f6:d7:89:db:65:9b:3d:db:7b:94:98:0f: f8:53:d5:2f:4a:c7:b2:9f:27:91:3a:ca:ea:dc:c4:02:34:ad: 4b:3d:71:a8:88:8d:c5:ea:f7:87:c5:70:fe:68:c0:f1:11:52: 7a:42:b7:6c:6c:1a:d5:02:a1:41:e2:7a:8c:cb:34:61:f8:07: e2:92:34:19 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEpmuNQfLRtaaJeuYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcwNDAwNDUzN1oXDTI3MTAwNzAwNDUzN1owLzEtMCsGA1UEAxMk YzYyYjJmMmUtOTlkNy00OTI3LWIyYzgtMTBiNWIxNWUwMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijkzH69LK4v8pjtKujbdw0lDXyLgHtaPlbRj wonIMdKKz6lqZKTIMMUt1vBHybYTUUui2XE9j/a8n2b0OIsONIA6lgIdo50Wipjb g0+tgXcdsaz0g2bvlXGGcL5GJyGvqRpwiETr0dKBdR6/Km3VZAG2/sDkTn91Yjmi oBb3n87WGf+S/5ABu4aHxOJtt+sDywn2qK9/N1jWSc8TJQIZd+Ex26aLCUAKsoPY MwKUs8M5dMXpZzM8wU58Xb+U2KbV2/d3b7v4D4P8Vg1EuxrqAK+vanlNnycxowMY TIW/1GHNXZRRr15GMWeJFTMRXbWV1JZfV0AtCv5MD0rc2JzYpwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFP6BUTZPQIOS6++P3ueOidD6MhfSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1ZTAwZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M2MmIyZjJlLTk5ZDctNDkyNy1i MmM4LTEwYjViMTVlMDBkOC9jNjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1 ZTAwZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALVBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJb1Q6AmebElC2Ra0c0l1hgPiDFC V9jSV8/oBCAiJQnNj9S0gwhm1i/SBzQY/Wg/bOwcljvi+HbNhIa+vyX15KJQXO7v Fv7pSQ/J0bNvPfhwGGp5mvTZHqIg0TtNt4kuG9pheJpbQUE22UOBtOZbT7MmCp0Y szr4xeACh5hAAkoAKbqpLpSPXVWhptAaM8Me73k2LqzDbYKoyrTi2Y0XrSDBilu4 17UW+/QMa0YV+ZuHIaPhNKFkCvVgOfbXidtlmz3be5SYD/hT1S9Kx7KfJ5E6yurc xAI0rUs9caiIjcXq94fFcP5owPERUnpCt2xsGtUCoUHieozLNGH4B+KSNBk= -----END CERTIFICATE-----Generated at Wed Jul 9 05:02:38 2025 by rpki-client