$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa.cer File: f2ba3dc8-0d72-412a-9a57-8abb791392fa.cer (raw, json) Hash identifier: Y7XrphJmzy/vRjVrjteq/YuUI9jgzSAXWc2DO8yETZc= Subject key identifier: 1D:F2:E7:23:70:E5:6B:2C:1B:7B:22:5B:E0:4B:19:EE:26:B1:E5:BF Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A1EF1D55C992DB5471FC6E6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/f2ba3dc8-0d72-412a-9a57-8abb791392fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 07:42:17 +0000 Certificate not after: Sat 11 Sep 2027 07:42:17 +0000 Subordinate resources: AS: 399890 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:f1:d5:5c:99:2d:b5:47:1f:c6:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 8 07:42:17 2025 GMT Not After : Sep 11 07:42:17 2027 GMT Subject: CN=f2ba3dc8-0d72-412a-9a57-8abb791392fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:ab:be:25:cf:b4:db:54:15:9a:33:fa:35: 24:a5:d2:a5:8c:a1:c0:1e:cc:67:e9:ee:3b:30:74: 68:e4:8a:53:f4:44:3d:cd:51:ed:ee:9f:ee:8c:47: 6f:a6:78:ec:2e:9e:e7:64:67:a2:05:56:40:b7:58: 96:3b:f4:43:6e:20:73:83:8c:23:53:23:8f:b8:87: b0:87:f6:49:e5:3d:fa:c0:47:9b:8d:ad:a1:f6:93: de:b4:58:a9:d5:3e:10:6a:a2:ed:b5:be:89:82:cc: a4:88:3a:af:42:cb:32:a8:2e:92:62:de:7a:15:35: 42:31:2c:8c:f1:a0:5b:3b:1e:8e:96:74:e4:4b:7f: 2f:17:2c:17:d1:70:3b:c2:fd:fa:5f:25:0b:79:03: 2a:7c:d1:f1:a8:95:35:6d:c0:89:3c:b7:1f:81:69: 23:b3:b2:f2:aa:5f:9e:7a:6a:6e:29:78:ec:a7:2b: 8b:29:9e:1c:50:74:af:74:36:b1:4a:14:54:0f:5f: f6:11:fc:1f:f6:11:ed:93:0f:2c:c3:95:30:2e:6d: 58:71:51:81:88:94:0f:99:be:e9:9a:8d:6c:da:2a: c0:79:e6:7d:03:07:5a:f3:a0:8f:99:06:41:3d:5d: b3:13:38:8a:9f:5a:38:58:40:f3:4b:9d:80:4e:ef: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:E7:23:70:E5:6B:2C:1B:7B:22:5B:E0:4B:19:EE:26:B1:E5:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/f2ba3dc8-0d72-412a-9a57-8abb791392fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:08:b4:a3:95:b8:6c:cf:eb:10:6d:f1:97:de:3b:6f:0c:f2: d4:91:81:b3:92:98:3d:f4:4e:3b:ff:88:29:db:5c:7f:bf:1a: 2f:03:ff:b0:95:fa:cb:bd:20:c7:68:24:ab:0c:2c:f2:b5:22: 22:a3:b8:40:bd:e4:38:a1:53:88:b7:05:fe:d1:24:5f:71:4d: 08:75:a7:a2:0a:77:99:9c:2e:52:f9:d3:45:27:8e:76:00:9f: 59:6c:e8:a4:e8:ea:a1:70:30:18:73:39:92:24:43:52:5e:80: 8d:16:95:87:78:dc:84:77:25:47:11:fc:68:3b:55:47:47:93: 12:79:51:a4:c8:97:ad:e8:8b:5c:15:da:76:f0:7d:2f:c4:01: 5c:51:32:f6:98:13:c0:4c:cf:38:eb:15:6c:33:4d:20:a4:d2: c9:4f:9f:79:35:1a:62:39:d0:11:93:25:d4:a7:7c:98:ff:8f: f3:1b:0b:d8:de:7c:65:70:49:6c:3c:cb:36:9b:7a:df:b3:db: c3:4d:72:38:de:04:dd:69:30:90:42:2c:41:8b:2f:63:74:ea: c5:36:67:ef:03:cc:e9:38:f0:cb:3b:38:12:56:77:1c:1e:17: cb:c0:cc:ad:2f:ab:6f:8d:04:3a:96:bc:37:a1:75:90:c4:b8: ae:a6:3d:0f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEoe8dVcmS21Rx/G5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwODA3NDIxN1oXDTI3MDkxMTA3NDIxN1owLzEtMCsGA1UEAxMk ZjJiYTNkYzgtMGQ3Mi00MTJhLTlhNTctOGFiYjc5MTM5MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+2rviXPtNtUFZoz+jUkpdKljKHAHsxn6e47 MHRo5IpT9EQ9zVHt7p/ujEdvpnjsLp7nZGeiBVZAt1iWO/RDbiBzg4wjUyOPuIew h/ZJ5T36wEebja2h9pPetFip1T4QaqLttb6JgsykiDqvQssyqC6SYt56FTVCMSyM 8aBbOx6OlnTkS38vFywX0XA7wv36XyULeQMqfNHxqJU1bcCJPLcfgWkjs7Lyql+e empuKXjspyuLKZ4cUHSvdDaxShRUD1/2Efwf9hHtkw8sw5UwLm1YcVGBiJQPmb7p mo1s2irAeeZ9Awda86CPmQZBPV2zEziKn1o4WEDzS52ATu8rJwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB3y5yNw5WssG3siW+BLGe4mseW/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m MmJhM2RjOC0wZDcyLTQxMmEtOWE1Ny04YWJiNzkxMzkyZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YyYmEzZGM4LTBkNzItNDEyYS05 YTU3LThhYmI3OTEzOTJmYS9mMmJhM2RjOC0wZDcyLTQxMmEtOWE1Ny04YWJiNzkx MzkyZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhoSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHsItKOVuGzP6xBt8ZfeO28M8tSR gbOSmD30Tjv/iCnbXH+/Gi8D/7CV+su9IMdoJKsMLPK1IiKjuEC95DihU4i3Bf7R JF9xTQh1p6IKd5mcLlL500UnjnYAn1ls6KTo6qFwMBhzOZIkQ1JegI0WlYd43IR3 JUcR/Gg7VUdHkxJ5UaTIl63oi1wV2nbwfS/EAVxRMvaYE8BMzzjrFWwzTSCk0slP n3k1GmI50BGTJdSnfJj/j/MbC9jefGVwSWw8yzabet+z28NNcjjeBN1pMJBCLEGL L2N06sU2Z+8DzOk48Ms7OBJWdxweF8vAzK0vq2+NBDqWvDehdZDEuK6mPQ8= -----END CERTIFICATE-----Generated at Sun Oct 26 00:46:46 2025 by rpki-client