$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer File: abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer (raw, json) Hash identifier: 417f23qx6CxUd1llZjk54hWL9bRTh99M3i2tU2LGBgI= Subject key identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A172947D8ABD9E2E2C6814100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 12:47:32 +0000 Certificate not after: Wed 08 Sep 2027 12:47:32 +0000 Subordinate resources: AS: 3688 IP: 74.117.136.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:29:47:d8:ab:d9:e2:e2:c6:81:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 5 12:47:32 2025 GMT Not After : Sep 8 12:47:32 2027 GMT Subject: CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:e2:25:89:b2:27:4e:3d:4e:b4:c4:7c:7f: b6:25:13:4c:81:96:d4:22:47:82:99:47:a7:4b:d9: 27:24:0a:72:e4:32:00:b6:68:ec:1e:5f:43:22:0f: ca:41:e4:a1:d2:8a:3c:11:60:81:57:00:40:a4:f9: b1:e6:a8:21:c9:54:f9:ea:fd:69:64:f0:20:de:1a: 52:15:10:78:7a:e2:67:d9:f2:2a:b9:6c:d1:12:02: e4:66:65:c9:2c:00:8d:3f:a5:86:2b:03:c1:6e:ee: e7:32:1f:7e:70:fe:58:33:cd:c8:a7:52:db:1d:7b: 43:61:28:fd:db:69:e5:b6:a4:af:fc:bd:87:5f:bc: f9:c0:9c:4b:ce:c1:46:38:64:79:a7:b8:9c:92:cf: 05:d5:e4:e0:dd:c8:bf:18:87:75:7a:43:94:7a:9b: 05:8f:8a:3d:d4:54:37:f5:62:e0:8b:e3:e8:94:59: c7:30:11:f4:6c:93:26:bd:63:3d:6b:30:90:03:f1: 9c:14:e6:0e:da:ac:6e:fb:1c:25:5c:a0:a9:cc:5f: 94:3d:a7:ee:d0:75:56:b7:f3:c8:4d:d0:6f:ca:a2: c1:55:d4:03:77:df:4c:43:9b:47:67:b5:b9:ae:cb: fc:0e:b9:c3:22:18:07:96:63:cf:b3:ae:2b:09:f5: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 74.117.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:61:6d:3e:af:30:af:78:d6:6b:e6:a3:92:c3:d8:94:23:ef: c2:21:77:1b:56:29:05:6a:31:a0:5a:2e:a6:ac:7a:88:de:ec: 99:e7:10:62:77:a0:d6:d7:01:c5:f6:65:dd:31:f9:25:ea:c5: bd:bd:b5:9b:f3:1e:a9:16:4c:2d:ed:37:46:cd:6e:52:29:25: 55:9c:f9:82:75:a0:ea:ca:cd:a9:0a:e4:35:10:67:55:58:58: c0:b5:44:31:74:6b:91:cc:fc:a9:1f:25:f2:6b:51:20:8b:44: 99:b4:e6:34:00:53:88:02:d8:53:e0:f3:21:dd:0d:50:4b:31: 2a:b6:e4:19:1f:ad:d5:e6:9d:f1:53:cb:66:e3:d1:f6:b5:0a: 3d:5e:16:b9:63:8b:52:dc:33:c9:73:00:e8:7c:fa:7b:f0:88: 10:f8:75:73:6b:ab:bc:df:2f:c6:90:72:49:02:70:ca:f7:08: 8b:bd:cf:51:4f:71:48:01:6e:59:5c:f3:ef:ca:d4:7e:a4:f0: 45:d2:c7:59:46:12:18:a7:aa:b2:ea:08:72:18:07:f5:55:4b: d6:db:99:46:d6:f5:e6:b6:3e:23:15:85:5c:41:e7:d3:9f:47: 29:75:8e:d2:ff:1e:4b:cf:5d:dc:0c:94:f1:46:a3:2b:47:07: 8e:9b:5e:60 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEoXKUfYq9ni4saBQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNTEyNDczMloXDTI3MDkwODEyNDczMlowLzEtMCsGA1UEAxMk YWJkZWRhNjUtYzRjMy00ZWM0LWI4ZDQtYzM0Y2Y1ZDAxNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohbiJYmyJ049TrTEfH+2JRNMgZbUIkeCmUen S9knJApy5DIAtmjsHl9DIg/KQeSh0oo8EWCBVwBApPmx5qghyVT56v1pZPAg3hpS FRB4euJn2fIquWzREgLkZmXJLACNP6WGKwPBbu7nMh9+cP5YM83Ip1LbHXtDYSj9 22nltqSv/L2HX7z5wJxLzsFGOGR5p7icks8F1eTg3ci/GId1ekOUepsFj4o91FQ3 9WLgi+PolFnHMBH0bJMmvWM9azCQA/GcFOYO2qxu+xwlXKCpzF+UPafu0HVWt/PI TdBvyqLBVdQDd99MQ5tHZ7W5rsv8DrnDIhgHlmPPs64rCfUoKQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFC0viyBDyg8DZRNyMCnSJ9c+6XfhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h YmRlZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRjZjVkMDE1ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FiZGVkYTY1LWM0YzMtNGVjNC1i OGQ0LWMzNGNmNWQwMTVkZC9hYmRlZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRjZjVk MDE1ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKdYgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC DmgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAfmFtPq8wr3jWa+ajksPYlCPvwiF3G1YpBWoxoFoupqx6iN7s mecQYneg1tcBxfZl3TH5JerFvb21m/MeqRZMLe03Rs1uUiklVZz5gnWg6srNqQrk NRBnVVhYwLVEMXRrkcz8qR8l8mtRIItEmbTmNABTiALYU+DzId0NUEsxKrbkGR+t 1ead8VPLZuPR9rUKPV4WuWOLUtwzyXMA6Hz6e/CIEPh1c2urvN8vxpBySQJwyvcI i73PUU9xSAFuWVzz78rUfqTwRdLHWUYSGKeqsuoIchgH9VVL1tuZRtb15rY+IxWF XEHn059HKXWO0v8eS89d3AyU8UajK0cHjpteYA== -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:44 2025 by rpki-client