$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126.cer File: 51ac292a-caef-4fc2-9606-4d3f1e372126.cer (raw, json) Hash identifier: Y6tfJrv8fdDRBUCk5EucwovnIBOM2e83tFVfpkK3rVo= Subject key identifier: AB:F5:27:6A:2F:F8:0D:57:44:AA:27:9D:50:C6:60:2C:0F:56:3A:5E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AD39967C23DD576D752D4A180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/51ac292a-caef-4fc2-9606-4d3f1e372126.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 00:45:25 +0000 Certificate not after: Mon 15 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 11525 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:99:67:c2:3d:d5:76:d7:52:d4:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 12 00:45:25 2025 GMT Not After : Nov 15 01:45:25 2027 GMT Subject: CN=51ac292a-caef-4fc2-9606-4d3f1e372126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:50:85:93:7a:c3:96:e8:cc:5d:17:d1:fc: 1a:99:62:cc:62:13:ac:bf:30:68:c2:e3:c3:fc:aa: c5:3d:90:64:09:28:3a:f5:cd:3b:cd:10:a8:1d:53: 90:77:aa:20:31:5c:bf:ab:22:ee:cc:69:eb:b5:92: ad:28:6a:be:03:8a:44:a0:93:c8:70:da:9c:83:99: 31:e3:45:c4:d8:cf:9f:8b:0d:c4:a9:59:54:40:9e: 23:b1:f9:04:d8:a8:a7:8a:9c:a5:03:54:23:be:6a: 38:3d:7f:3f:b7:b8:0a:e5:e5:b8:b8:ee:a3:33:f5: 2a:a1:c0:0e:b8:de:2e:61:f5:62:a5:25:77:6d:d6: be:7f:68:fd:4c:b0:dc:77:93:8d:cb:3f:59:ba:09: 49:83:b4:22:73:a5:71:5e:ff:cb:1f:cd:1f:d7:7b: 29:cb:b2:fb:d8:db:c3:d2:41:25:ff:12:5c:d5:ca: db:89:1e:6c:f2:ba:f4:bc:bc:46:0d:a0:7f:63:22: 20:6d:2d:48:02:f5:0c:ed:94:3e:23:7c:4b:c3:57: f8:2f:ed:22:9d:ba:71:31:7e:e5:4c:d1:5a:24:ea: 9c:58:e7:60:5b:41:be:3f:e0:87:ee:4b:27:e6:1e: cc:14:8a:5c:01:00:9a:dd:02:4b:e0:05:12:ca:38: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:27:6A:2F:F8:0D:57:44:AA:27:9D:50:C6:60:2C:0F:56:3A:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/51ac292a-caef-4fc2-9606-4d3f1e372126.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:18:84:5f:80:1e:ab:e0:e6:96:09:9c:b2:87:40:91:11:be: 29:3d:82:b3:36:24:30:dc:de:4d:8c:f6:b0:93:88:9e:8d:1e: 81:7c:c1:a4:12:18:2c:09:cd:26:fe:2e:aa:09:78:77:ae:7a: 20:81:cb:a4:83:a6:d7:af:8c:25:0f:ec:7b:9a:b8:44:93:27: 06:14:e1:ec:2d:15:e9:67:85:5b:80:4a:29:18:70:bc:d9:6a: 77:7c:03:7d:ef:d2:43:be:68:c3:17:a0:33:1b:cf:03:a1:37: 46:48:bf:db:d6:63:d1:bd:92:a6:28:ca:eb:b9:20:c5:80:eb: 20:9a:18:0f:95:29:83:98:23:c3:1d:fd:42:68:63:5f:6d:02: d1:c1:b4:81:92:92:13:33:de:fa:0f:3d:e3:2b:61:46:ec:c0: 24:5a:79:56:d3:ad:71:c3:eb:80:7a:e5:2b:65:0c:a8:1e:c4: 88:48:b3:25:88:84:0f:83:8a:b2:a5:d0:21:15:22:cf:77:9e: ee:74:bf:e6:72:32:9a:6c:62:b2:fe:8e:65:c4:78:96:dc:fb: ef:a5:8c:c3:69:69:54:a1:1c:4c:55:4f:36:6e:b5:78:d3:da: 3d:e3:44:2d:c8:87:48:ba:0d:f6:99:08:bd:7f:a9:6a:de:1f: bc:5d:0b:e0 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWErTmWfCPdV211LUoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxMjAwNDUyNVoXDTI3MTExNTAxNDUyNVowLzEtMCsGA1UEAxMk NTFhYzI5MmEtY2FlZi00ZmMyLTk2MDYtNGQzZjFlMzcyMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sxQhZN6w5bozF0X0fwamWLMYhOsvzBowuPD /KrFPZBkCSg69c07zRCoHVOQd6ogMVy/qyLuzGnrtZKtKGq+A4pEoJPIcNqcg5kx 40XE2M+fiw3EqVlUQJ4jsfkE2KinipylA1Qjvmo4PX8/t7gK5eW4uO6jM/UqocAO uN4uYfVipSV3bda+f2j9TLDcd5ONyz9ZuglJg7Qic6VxXv/LH80f13spy7L72NvD 0kEl/xJc1crbiR5s8rr0vLxGDaB/YyIgbS1IAvUM7ZQ+I3xLw1f4L+0inbpxMX7l TNFaJOqcWOdgW0G+P+CH7ksn5h7MFIpcAQCa3QJL4AUSyjjvOQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKv1J2ov+A1XRKonnVDGYCwPVjpeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 MWFjMjkyYS1jYWVmLTRmYzItOTYwNi00ZDNmMWUzNzIxMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzUxYWMyOTJhLWNhZWYtNGZjMi05 NjA2LTRkM2YxZTM3MjEyNi81MWFjMjkyYS1jYWVmLTRmYzItOTYwNi00ZDNmMWUz NzIxMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLQUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUBiEX4Aeq+DmlgmcsodAkRG+KT2C szYkMNzeTYz2sJOIno0egXzBpBIYLAnNJv4uqgl4d656IIHLpIOm16+MJQ/se5q4 RJMnBhTh7C0V6WeFW4BKKRhwvNlqd3wDfe/SQ75owxegMxvPA6E3Rki/29Zj0b2S pijK67kgxYDrIJoYD5Upg5gjwx39QmhjX20C0cG0gZKSEzPe+g894ythRuzAJFp5 VtOtccPrgHrlK2UMqB7EiEizJYiED4OKsqXQIRUiz3ee7nS/5nIymmxisv6OZcR4 ltz776WMw2lpVKEcTFVPNm61eNPaPeNELciHSLoN9pkIvX+pat4fvF0L4A== -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:15 2025 by rpki-client