$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d891cccc-286c-401d-98b3-1d9578f93699.cer File: d891cccc-286c-401d-98b3-1d9578f93699.cer (raw, json) Hash identifier: mDLACS27J2XcD5xcsRZonM5DhL5CvIC2K3uLpHyg2jk= Subject key identifier: 7F:20:18:33:9E:63:EB:DD:C8:83:36:FA:3A:E2:7E:49:07:68:27:27 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584AFAAEFCACACA86736324D55C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d891cccc-286c-401d-98b3-1d9578f93699/d891cccc-286c-401d-98b3-1d9578f93699.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d891cccc-286c-401d-98b3-1d9578f93699/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Aug 2025 00:45:26 +0000 Certificate not after: Mon 29 Nov 2027 01:45:26 +0000 Subordinate resources: AS: 62968 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:ae:fc:ac:ac:a8:67:36:32:4d:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 26 00:45:26 2025 GMT Not After : Nov 29 01:45:26 2027 GMT Subject: CN=d891cccc-286c-401d-98b3-1d9578f93699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:00:66:45:6f:f5:79:ae:e3:12:a5:92:c3: 7f:3d:f0:6d:4e:17:c5:ef:59:05:7c:a9:0c:e2:ce: 33:00:d6:fc:1e:59:b1:27:fc:84:b6:1c:bd:03:71: f6:69:2d:54:51:5a:2f:f7:cc:95:9d:1e:47:69:66: 64:2c:36:8c:d1:38:a5:4b:75:2b:16:33:8e:d5:bc: b3:8c:76:51:95:cc:52:b9:65:46:31:79:27:fa:59: a1:df:5b:f4:1e:74:05:e6:23:ce:87:6b:71:df:a9: fb:a9:9f:e5:1d:3d:e0:e2:38:e0:3f:a3:b7:28:59: b7:6b:8b:85:d4:0c:b0:74:f5:99:f7:e9:59:bb:7e: 8d:7e:b4:c1:9b:9e:63:73:7d:02:0b:c2:cc:00:ae: 73:de:77:c6:e1:22:9f:96:68:96:d4:91:13:ad:53: cf:1b:01:40:5b:26:6c:68:00:18:d9:98:71:0f:02: 90:b1:10:bc:70:78:c4:4e:0a:69:df:92:75:2f:d2: 98:1c:5a:e5:a4:1f:f7:e7:5f:30:53:56:d1:37:c0: 68:ee:af:cb:4b:6c:81:d3:d6:2a:6c:09:ef:44:78: 51:65:21:4c:ea:aa:24:92:bc:d8:92:d3:98:9b:db: 52:83:b2:ab:fa:0e:29:f7:23:7d:a3:19:99:ad:bf: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:20:18:33:9E:63:EB:DD:C8:83:36:FA:3A:E2:7E:49:07:68:27:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d891cccc-286c-401d-98b3-1d9578f93699/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d891cccc-286c-401d-98b3-1d9578f93699/d891cccc-286c-401d-98b3-1d9578f93699.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 62968 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:20:85:93:14:4f:89:6e:d8:6c:24:d3:82:cb:b1:53:6f:54: 4e:7d:f5:89:e4:89:78:6a:f3:ad:42:76:e0:52:82:4e:9d:9f: 9a:e6:74:3f:0a:4d:89:41:10:42:d8:e9:b4:3e:25:9e:fd:6c: dd:5b:98:09:fd:94:77:f2:a5:93:4d:49:29:ce:82:cb:e7:9c: 56:92:41:ff:8f:96:4a:8f:1e:97:f9:9b:a9:f5:71:56:89:b7: 02:fe:2b:df:49:58:06:8b:6a:50:3e:b6:89:9a:aa:89:70:8d: 2b:b4:d3:7c:6f:bc:05:f7:b9:58:bc:3b:7b:5d:12:5d:b5:41: 64:8b:71:0c:24:f7:a0:f3:1f:e6:b0:76:69:c1:0e:e1:a7:26: ac:29:4e:b6:c6:6c:ea:da:b7:92:b1:2e:1b:b5:12:6d:c0:68: 91:75:a4:3c:ac:e0:4f:9b:57:aa:14:8d:b0:74:5a:74:d7:34: 2d:0e:02:2b:9a:b9:9f:d5:c3:08:7c:75:81:e4:8f:99:07:7d: d6:9e:ab:01:ad:28:ed:97:34:21:a8:51:25:50:d8:e9:63:cb: a6:a4:c0:c4:f8:eb:f8:81:3d:68:9f:99:03:5f:e7:0f:5a:08: 26:87:3c:d3:4a:de:f5:8a:2a:f2:40:e8:d5:85:2b:ef:1a:cd: 85:79:3c:bb -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEr6rvysrKhnNjJNVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDgyNjAwNDUyNloXDTI3MTEyOTAxNDUyNlowLzEtMCsGA1UEAxMk ZDg5MWNjY2MtMjg2Yy00MDFkLTk4YjMtMWQ5NTc4ZjkzNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2kAZkVv9Xmu4xKlksN/PfBtThfF71kFfKkM 4s4zANb8HlmxJ/yEthy9A3H2aS1UUVov98yVnR5HaWZkLDaM0TilS3UrFjOO1byz jHZRlcxSuWVGMXkn+lmh31v0HnQF5iPOh2tx36n7qZ/lHT3g4jjgP6O3KFm3a4uF 1AywdPWZ9+lZu36NfrTBm55jc30CC8LMAK5z3nfG4SKflmiW1JETrVPPGwFAWyZs aAAY2ZhxDwKQsRC8cHjETgpp35J1L9KYHFrlpB/3518wU1bRN8Bo7q/LS2yB09Yq bAnvRHhRZSFM6qokkrzYktOYm9tSg7Kr+g4p9yN9oxmZrb8rVQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFH8gGDOeY+vdyIM2+jrifkkHaCcnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ODkxY2NjYy0yODZjLTQwMWQtOThiMy0xZDk1NzhmOTM2OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4OTFjY2NjLTI4NmMtNDAxZC05 OGIzLTFkOTU3OGY5MzY5OS9kODkxY2NjYy0yODZjLTQwMWQtOThiMy0xZDk1Nzhm OTM2OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPX4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHwghZMUT4lu2Gwk04LLsVNvVE59 9YnkiXhq861CduBSgk6dn5rmdD8KTYlBEELY6bQ+JZ79bN1bmAn9lHfypZNNSSnO gsvnnFaSQf+PlkqPHpf5m6n1cVaJtwL+K99JWAaLalA+tomaqolwjSu003xvvAX3 uVi8O3tdEl21QWSLcQwk96DzH+awdmnBDuGnJqwpTrbGbOrat5KxLhu1Em3AaJF1 pDys4E+bV6oUjbB0WnTXNC0OAiuauZ/Vwwh8dYHkj5kHfdaeqwGtKO2XNCGoUSVQ 2Oljy6akwMT46/iBPWifmQNf5w9aCCaHPNNK3vWKKvJA6NWFK+8azYV5PLs= -----END CERTIFICATE-----Generated at Sun Sep 14 08:06:31 2025 by rpki-client