$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808.cer File: 821acbde-bbb2-4953-b4eb-6a706f6f3808.cer (raw, json) Hash identifier: 3ENY9wsO16jhb3bjt1yA8gkLYQHRE7gOHjoxCR1lcm4= Subject key identifier: C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BAF8CD87EE8A81FFC79442400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 19:37:57 +0000 Certificate not after: Tue 01 Feb 2028 20:37:57 +0000 Subordinate resources: AS: 394512 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:8c:d8:7e:e8:a8:1f:fc:79:44:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 29 19:37:57 2025 GMT Not After : Feb 1 20:37:57 2028 GMT Subject: CN=821acbde-bbb2-4953-b4eb-6a706f6f3808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:a3:3e:e4:92:d8:bd:cb:60:e7:4b:7d:f8: 14:91:6b:94:a3:3f:cc:c9:bb:70:5b:da:3a:8e:d3: 94:16:27:e2:6b:f1:be:0c:e3:31:86:e4:11:fe:16: e1:90:b9:36:ae:86:ad:67:e7:76:92:60:b1:85:60: be:64:bd:dd:90:01:65:f8:88:5e:7d:e5:00:d9:62: 98:04:f2:3d:8f:4d:4d:8b:7c:93:b1:c0:f3:a0:7c: 42:2b:a0:cb:0a:cd:02:a5:18:b3:5e:6b:48:e5:b8: f3:57:fb:cd:eb:2a:00:47:d9:0f:27:4b:3c:79:d3: f3:27:b7:44:13:be:05:08:9e:b2:f9:f9:8f:9f:7f: 8a:34:44:9b:03:82:96:10:a4:20:b3:0b:3c:4d:80: 3c:ad:1f:0b:f0:6c:dc:8b:e2:1a:52:2a:4f:43:99: 82:41:5a:ce:43:07:63:af:11:b1:f7:a0:d4:aa:33: 5e:36:6e:7f:0f:21:ab:1f:32:2b:f5:d1:2a:3b:29: c8:ec:33:2e:ff:d3:56:20:a5:be:7f:a4:a1:22:3d: bf:44:ac:cf:3a:fb:7b:de:a3:6d:b8:c4:2e:dc:55: 70:47:0c:9e:0b:0d:99:a6:27:74:24:d0:d2:30:4b: ed:a5:3e:b9:1c:3f:a1:ee:79:1c:ae:ce:bd:77:1a: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:04:26:55:e8:6f:64:c4:d4:86:2c:51:a4:2b:15:36:7e:47: aa:56:1a:10:00:c2:ed:30:f3:5f:a4:99:d0:3e:d3:64:b4:4b: 20:29:42:7f:48:cd:bd:c4:8e:5a:f0:23:6e:20:71:29:7d:34: dd:66:33:95:5b:a8:11:af:39:fb:97:fe:64:52:10:12:11:1a: 8d:04:98:05:73:e2:8d:21:c4:99:13:61:01:74:b5:00:14:37: 30:16:85:19:09:51:3f:bf:4d:3d:05:ce:11:22:bc:09:b9:b1: d5:91:77:e7:c7:9b:b4:fd:24:b4:13:be:53:c4:56:68:13:27: 7e:3e:a6:76:c1:4c:b8:ab:1e:d4:00:17:a1:ab:8d:b9:b0:b5: b6:8b:e4:f9:df:ee:04:7a:ef:f8:72:27:48:45:6b:71:f7:21: 0b:ee:8b:6a:cf:e9:7a:ba:10:47:db:a8:bc:a9:a1:2f:0f:e8: b1:2f:e8:7c:5b:1c:be:f8:64:bd:49:43:a2:25:88:29:1a:e1: 1f:19:04:73:a9:3c:d1:9c:6a:7e:73:4a:66:a2:67:91:f1:1f: 70:eb:05:82:e0:b3:42:78:c8:7a:df:80:ab:48:2a:dd:56:e0: 52:31:1c:b9:4c:e8:61:52:0b:65:10:1f:af:d7:3d:d5:59:33: 3f:6d:8a:fe -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEuvjNh+6Kgf/HlEJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTAyOTE5Mzc1N1oXDTI4MDIwMTIwMzc1N1owLzEtMCsGA1UEAxMk ODIxYWNiZGUtYmJiMi00OTUzLWI0ZWItNmE3MDZmNmYzODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrejPuSS2L3LYOdLffgUkWuUoz/MybtwW9o6 jtOUFifia/G+DOMxhuQR/hbhkLk2roatZ+d2kmCxhWC+ZL3dkAFl+IhefeUA2WKY BPI9j01Ni3yTscDzoHxCK6DLCs0CpRizXmtI5bjzV/vN6yoAR9kPJ0s8edPzJ7dE E74FCJ6y+fmPn3+KNESbA4KWEKQgsws8TYA8rR8L8Gzci+IaUipPQ5mCQVrOQwdj rxGx96DUqjNeNm5/DyGrHzIr9dEqOynI7DMu/9NWIKW+f6ShIj2/RKzPOvt73qNt uMQu3FVwRwyeCw2Zpid0JNDSMEvtpT65HD+h7nkcrs69dxofUQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFMFWd1yioI3kaAVOOXrGnoX5A3rLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MjFhY2JkZS1iYmIyLTQ5NTMtYjRlYi02YTcwNmY2ZjM4MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyMWFjYmRlLWJiYjItNDk1My1i NGViLTZhNzA2ZjZmMzgwOC84MjFhY2JkZS1iYmIyLTQ5NTMtYjRlYi02YTcwNmY2 ZjM4MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgUQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFIEJlXob2TE1IYsUaQrFTZ+R6pW GhAAwu0w81+kmdA+02S0SyApQn9Izb3EjlrwI24gcSl9NN1mM5VbqBGvOfuX/mRS EBIRGo0EmAVz4o0hxJkTYQF0tQAUNzAWhRkJUT+/TT0FzhEivAm5sdWRd+fHm7T9 JLQTvlPEVmgTJ34+pnbBTLirHtQAF6GrjbmwtbaL5Pnf7gR67/hyJ0hFa3H3IQvu i2rP6Xq6EEfbqLypoS8P6LEv6HxbHL74ZL1JQ6IliCka4R8ZBHOpPNGcan5zSmai Z5HxH3DrBYLgs0J4yHrfgKtIKt1W4FIxHLlM6GFSC2UQH6/XPdVZMz9tiv4= -----END CERTIFICATE-----Generated at Tue Nov 4 18:48:34 2025 by rpki-client