$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/09c69cde-cc83-44b2-8274-465fb3610e24.cer File: 09c69cde-cc83-44b2-8274-465fb3610e24.cer (raw, json) Hash identifier: FNWZf94sbDMKGPwuG4XQpRETjT3B+pvISdoq8kOeQls= Subject key identifier: 1F:76:3C:43:D6:5F:CE:5E:0E:84:52:90:AB:DC:E1:73:96:CB:90:97 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A7FD8FA6362373A66D3201DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/09c69cde-cc83-44b2-8274-465fb3610e24/09c69cde-cc83-44b2-8274-465fb3610e24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/09c69cde-cc83-44b2-8274-465fb3610e24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Jul 2025 00:45:36 +0000 Certificate not after: Sat 16 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 4452 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:d8:fa:63:62:37:3a:66:d3:20:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 13 00:45:36 2025 GMT Not After : Oct 16 00:45:36 2027 GMT Subject: CN=09c69cde-cc83-44b2-8274-465fb3610e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:b8:1f:15:9a:56:bd:00:be:f6:57:74:6e: c1:66:f6:a3:ef:72:9d:a1:cf:a4:32:13:fe:1a:b2: 14:5b:57:07:c2:ce:1f:c0:1a:71:f5:a3:d6:2e:28: 04:a7:ca:0a:f7:7e:10:4d:7c:3b:f1:42:80:18:4f: db:d0:bb:9f:57:43:56:36:c4:84:35:c7:b5:13:bb: 4d:c0:fe:5d:5f:a1:fa:2e:c3:46:13:1d:f2:36:65: dc:e5:97:c2:a8:2b:a4:62:d7:f9:dd:39:33:91:cf: 44:58:d5:3a:25:ae:12:a8:e6:69:e1:03:3b:cd:68: 9e:18:2a:21:ca:50:69:5c:45:71:6c:35:4c:d2:30: e7:3b:bf:9c:9f:27:3f:3a:15:06:1c:2d:97:fe:36: 9f:1c:66:d6:00:5c:81:77:9e:53:12:e8:52:96:59: a2:61:ee:1e:85:6d:9f:89:7a:10:6f:04:b5:c4:f2: 03:0f:94:32:d4:42:92:1f:35:2a:96:73:69:8f:6e: dd:d3:0f:b0:f9:95:a3:38:1e:46:88:7c:9b:b3:50: ad:35:ba:0c:c4:1d:e2:f7:f5:95:e5:40:f3:0c:ca: 51:c7:d0:ac:27:94:a5:d0:85:a5:72:ad:93:3a:f3: ad:69:c3:62:4e:48:cc:43:bc:70:80:65:b8:a6:df: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:76:3C:43:D6:5F:CE:5E:0E:84:52:90:AB:DC:E1:73:96:CB:90:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/09c69cde-cc83-44b2-8274-465fb3610e24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/09c69cde-cc83-44b2-8274-465fb3610e24/09c69cde-cc83-44b2-8274-465fb3610e24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 4452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c7:b5:d1:46:0d:99:86:97:8e:88:2f:19:02:e8:e5:a9:6a: 24:7f:b4:26:7f:be:22:f8:71:53:7d:0b:68:11:0a:c8:bb:23: 50:57:83:51:7a:fe:f7:27:5e:be:7d:10:16:df:93:83:75:33: 46:22:45:06:58:89:9c:60:ee:71:0c:12:a5:90:47:4d:22:63: 10:4e:fe:e9:34:9a:80:d4:ce:67:c3:72:c3:c7:d2:fb:8a:db: 7c:90:fe:f2:91:b5:b2:67:49:50:9e:9a:38:23:3b:74:21:83: d7:b6:8d:65:93:52:45:04:92:19:96:6c:c4:fd:af:cf:f8:63: 4e:fa:6a:04:18:56:ad:2e:09:9d:58:30:9d:9c:cc:ee:3a:c6: 0b:31:39:35:5b:42:3f:e6:8e:93:56:8c:29:67:10:7f:b3:69: a6:60:01:ca:19:8b:3e:ab:7f:ea:6a:05:ff:86:4a:8e:8d:b0: 75:16:6b:70:b6:1a:14:9b:9f:17:9e:37:64:c8:e7:72:82:c2: 0a:3d:a8:15:5b:ae:b5:ff:4e:84:97:76:45:42:c3:3a:06:c7: a6:0d:03:7d:5f:b8:32:cd:c5:24:9e:09:2b:de:1a:3a:2f:2f: 99:ed:2c:2d:80:49:6c:70:db:40:f5:e9:e0:e1:e5:07:fb:17: b7:8b:ec:ec -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEp/2PpjYjc6ZtMgHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxMzAwNDUzNloXDTI3MTAxNjAwNDUzNlowLzEtMCsGA1UEAxMk MDljNjljZGUtY2M4My00NGIyLTgyNzQtNDY1ZmIzNjEwZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI64HxWaVr0AvvZXdG7BZvaj73Kdoc+kMhP+ GrIUW1cHws4fwBpx9aPWLigEp8oK934QTXw78UKAGE/b0LufV0NWNsSENce1E7tN wP5dX6H6LsNGEx3yNmXc5ZfCqCukYtf53Tkzkc9EWNU6Ja4SqOZp4QM7zWieGCoh ylBpXEVxbDVM0jDnO7+cnyc/OhUGHC2X/jafHGbWAFyBd55TEuhSllmiYe4ehW2f iXoQbwS1xPIDD5Qy1EKSHzUqlnNpj27d0w+w+ZWjOB5GiHybs1CtNboMxB3i9/WV 5UDzDMpRx9CsJ5Sl0IWlcq2TOvOtacNiTkjMQ7xwgGW4pt/LwQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFB92PEPWX85eDoRSkKvc4XOWy5CXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w OWM2OWNkZS1jYzgzLTQ0YjItODI3NC00NjVmYjM2MTBlMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA5YzY5Y2RlLWNjODMtNDRiMi04 Mjc0LTQ2NWZiMzYxMGUyNC8wOWM2OWNkZS1jYzgzLTQ0YjItODI3NC00NjVmYjM2 MTBlMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICEWQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdMe10UYNmYaXjogvGQLo5alqJH+0 Jn++IvhxU30LaBEKyLsjUFeDUXr+9ydevn0QFt+Tg3UzRiJFBliJnGDucQwSpZBH TSJjEE7+6TSagNTOZ8Nyw8fS+4rbfJD+8pG1smdJUJ6aOCM7dCGD17aNZZNSRQSS GZZsxP2vz/hjTvpqBBhWrS4JnVgwnZzM7jrGCzE5NVtCP+aOk1aMKWcQf7NppmAB yhmLPqt/6moF/4ZKjo2wdRZrcLYaFJufF543ZMjncoLCCj2oFVuutf9OhJd2RULD OgbHpg0DfV+4Ms3FJJ4JK94aOi8vme0sLYBJbHDbQPXp4OHlB/sXt4vs7A== -----END CERTIFICATE-----Generated at Tue Nov 4 23:52:06 2025 by rpki-client