$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer File: e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer (raw, json) Hash identifier: MU7vmiySh30EjvTKGy2e90aZy4v0hoewv9JfBrbjWoA= Subject key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858498F5C070F0DBD6E461FBBBA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Apr 2025 21:19:51 +0000 Certificate not after: Wed 21 Jul 2027 21:19:51 +0000 Subordinate resources: AS: 32529 AS: 394922 IP: 199.180.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:5c:07:0f:0d:bd:6e:46:1f:bb:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 17 21:19:51 2025 GMT Not After : Jul 21 21:19:51 2027 GMT Subject: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:1f:df:57:e0:98:c1:75:80:3a:f8:3b:04: 1c:19:01:76:e8:81:dd:c2:35:a9:b1:40:27:55:37: e0:e5:fd:93:f7:2f:da:89:fa:d2:ec:e2:6b:7b:ce: 4e:43:87:7d:14:e0:46:43:de:9c:80:95:c5:4f:d2: ae:95:ef:48:29:ee:6f:02:f3:aa:f1:cc:ab:7a:16: 20:8d:50:03:1d:b1:f0:0f:d2:9c:4d:4b:58:ae:ee: 37:8f:5b:9e:91:7a:b2:97:1d:7e:41:54:6e:24:be: be:9a:12:15:7a:81:8a:54:a4:67:77:3b:a2:24:28: cf:e1:4c:4c:d0:21:b6:6a:b4:60:98:a7:f8:18:10: ab:ac:ef:59:8e:2a:79:a6:d2:1c:a2:48:fd:85:0b: f7:8e:e1:3d:05:94:3b:9d:a3:f2:db:86:f1:64:25: 2d:5c:b6:c6:3c:5a:f6:14:95:d3:c9:a8:de:93:07: c0:99:b6:05:1a:b8:a5:4f:d3:f0:de:50:b8:4f:f4: 63:a7:c6:e0:c0:b2:52:62:f7:f1:cc:5a:d6:b4:08: be:57:c5:4c:1d:b7:8e:1e:90:7d:0d:2e:64:20:7f: ac:2f:e8:de:32:6e:da:f1:2f:64:fd:33:bf:9b:20: 87:8f:ef:35:73:ae:af:15:22:2a:30:e3:ab:bd:76: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.180.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32529 394922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:71:7d:80:63:a6:11:c5:d8:fb:bc:1e:29:da:6f:96:de:12: 00:fc:2e:85:5d:97:d6:b2:98:92:df:02:90:e9:63:73:32:d6: 01:dd:24:04:45:7a:ac:48:59:d3:5d:2e:39:7a:08:6c:99:8b: ae:de:0c:5b:ba:93:fc:18:59:cb:76:16:da:d6:61:44:22:5c: 68:39:fc:7b:f3:c3:40:11:19:15:72:8f:9d:b0:b0:dc:76:2c: eb:ee:92:a7:10:19:2b:2b:d7:74:3b:d4:e2:6e:74:9a:85:3a: 1b:46:ab:f0:a8:b8:31:4d:9b:8e:4b:98:7d:0f:ce:52:d8:07: ca:c2:2e:fc:83:0c:40:09:24:28:18:77:fe:70:f7:46:7e:64: a0:2b:cf:73:a2:cf:0d:b9:29:6e:4e:ef:b7:31:c3:4e:b0:fa: db:ca:8a:1b:66:81:2c:f9:a4:f9:01:7b:1c:a9:61:60:65:78: 0e:4e:14:0a:b7:7f:17:7b:2b:70:61:e6:de:ba:56:f1:1a:83: b5:37:6f:00:67:69:da:44:d9:e4:76:3b:e3:07:9b:05:82:3c: 5a:c3:c0:43:e9:94:81:c7:64:e2:1b:41:0b:ec:8c:2f:4f:66: 94:25:3d:a3:13:3e:8c:55:20:ec:93:e7:a2:06:91:00:38:65: 09:1e:f6:08 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEmPXAcPDb1uRh+7ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNzIxMTk1MVoXDTI3MDcyMTIxMTk1MVowLzEtMCsGA1UEAxMk ZTFlYzZlZjctZjc2MC00MmNkLWExZjMtYzZjMDM5M2IyNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3sf31fgmMF1gDr4OwQcGQF26IHdwjWpsUAn VTfg5f2T9y/aifrS7OJre85OQ4d9FOBGQ96cgJXFT9Kule9IKe5vAvOq8cyrehYg jVADHbHwD9KcTUtYru43j1uekXqylx1+QVRuJL6+mhIVeoGKVKRndzuiJCjP4UxM 0CG2arRgmKf4GBCrrO9Zjip5ptIcokj9hQv3juE9BZQ7naPy24bxZCUtXLbGPFr2 FJXTyajekwfAmbYFGrilT9Pw3lC4T/Rjp8bgwLJSYvfxzFrWtAi+V8VMHbeOHpB9 DS5kIH+sL+jeMm7a8S9k/TO/myCHj+81c66vFSIqMOOrvXYlVwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFIHRTenD5KhMEKFKiW6jyuMrvr4AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkzYjI1MTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UxZWM2ZWY3LWY3NjAtNDJjZC1h MWYzLWM2YzAzOTNiMjUxNy9lMWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkz YjI1MTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHtLwwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC fxECAwYGqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCKcX2AY6YRxdj7vB4p2m+W3hIA/C6FXZfWspiS3wKQ 6WNzMtYB3SQERXqsSFnTXS45eghsmYuu3gxbupP8GFnLdhba1mFEIlxoOfx788NA ERkVco+dsLDcdizr7pKnEBkrK9d0O9TibnSahTobRqvwqLgxTZuOS5h9D85S2AfK wi78gwxACSQoGHf+cPdGfmSgK89zos8NuSluTu+3McNOsPrbyoobZoEs+aT5AXsc qWFgZXgOThQKt38XeytwYebeulbxGoO1N28AZ2naRNnkdjvjB5sFgjxaw8BD6ZSB x2TiG0EL7IwvT2aUJT2jEz6MVSDsk+eiBpEAOGUJHvYI -----END CERTIFICATE-----Generated at Sun Oct 26 00:42:57 2025 by rpki-client