$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5c774c6c-6e84-4efd-a458-66582d43d0d0.cer File: 5c774c6c-6e84-4efd-a458-66582d43d0d0.cer (raw, json) Hash identifier: 4zLkodXQNCisxGXO1vEszf0sJyFU5lgGAGsC0UwXW9Y= Subject key identifier: EA:E3:3F:D4:D3:F6:FF:28:79:9F:7B:7B:EC:82:19:DB:FF:F1:65:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849AE77A9E1A9C972BFA978A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5c774c6c-6e84-4efd-a458-66582d43d0d0/5c774c6c-6e84-4efd-a458-66582d43d0d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5c774c6c-6e84-4efd-a458-66582d43d0d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 00:45:35 +0000 Certificate not after: Mon 02 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 23408 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:77:a9:e1:a9:c9:72:bf:a9:78:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 29 00:45:35 2025 GMT Not After : Aug 2 00:45:35 2027 GMT Subject: CN=5c774c6c-6e84-4efd-a458-66582d43d0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:40:4f:26:ac:8c:d3:3a:c4:1a:a8:2b:7e: 5d:af:9a:2a:b2:f7:38:51:ca:49:7c:97:50:ef:da: 36:8e:8e:cc:0d:61:e0:da:5c:65:44:af:05:a6:78: bd:cd:e6:fe:bd:26:63:af:d0:50:42:e6:64:bf:1a: 4c:25:6f:5d:62:48:ee:c0:a8:d1:77:e5:1b:70:ca: 4e:dd:92:c5:c2:93:bf:b6:00:25:1b:5e:65:0b:ca: f9:f3:3a:95:27:7c:f7:46:e2:bc:bf:1b:77:fe:4a: 77:f6:df:7b:7a:45:f0:74:34:9f:0a:3b:53:d7:58: 23:f5:d4:43:f5:bf:93:72:3e:50:17:25:4d:46:58: 06:89:fa:ce:66:41:99:6a:dc:d2:aa:9e:73:ed:e1: 71:86:a9:fd:4a:0e:b2:59:70:0e:5d:03:dc:74:06: f0:39:5c:f1:80:f5:f9:a8:df:98:80:a3:2b:aa:8c: 06:50:6e:4a:2e:ce:79:50:67:a1:bb:d1:54:75:f5: 1a:c4:74:f8:37:79:c2:fb:58:bb:da:78:7c:3a:84: f0:dc:89:7d:21:04:1d:61:e2:a6:bc:40:1f:08:3d: 93:79:96:ae:a1:34:20:d9:bb:2f:46:27:66:17:82: 2f:21:21:df:ff:a7:a5:75:cc:43:ee:b2:f0:2f:fa: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E3:3F:D4:D3:F6:FF:28:79:9F:7B:7B:EC:82:19:DB:FF:F1:65:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5c774c6c-6e84-4efd-a458-66582d43d0d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5c774c6c-6e84-4efd-a458-66582d43d0d0/5c774c6c-6e84-4efd-a458-66582d43d0d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 23408 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3f:0a:17:87:b9:be:a8:b5:76:3d:8c:db:16:ef:4b:14:6d: 91:3b:26:e4:57:17:d2:de:eb:9a:6e:82:ef:80:0a:58:d6:14: da:14:12:eb:7a:4b:0d:5c:a2:1d:42:34:c9:ba:9b:12:ca:0f: 15:b2:07:6e:9c:6e:a2:dc:18:f2:fa:35:34:73:03:bc:0e:fd: a2:4d:0d:32:ed:2c:8a:42:7f:91:7f:8e:2e:ba:11:c3:72:17: 0e:93:cc:f0:89:e6:a5:8d:5e:d6:bf:11:b8:16:5f:a3:99:d6: d6:ce:ce:f0:e6:09:da:fa:23:40:26:89:8b:56:08:d2:4f:64: 5c:ca:93:c9:92:6d:2e:43:57:55:91:1b:55:15:be:4f:42:d6: 96:e0:6a:19:5c:bd:75:56:9c:2f:a6:2c:67:40:66:31:09:d3: a3:3e:91:31:12:73:aa:d0:0c:fa:4a:89:70:37:69:d7:0c:17: 3a:27:5c:8b:81:02:fe:d2:bb:6b:e0:c9:63:57:a9:a3:58:6a: 33:46:1a:06:c5:3c:39:bc:24:74:c6:97:62:34:2e:7a:c8:97: c0:ed:b6:d3:1d:f7:b3:10:b4:d3:d0:2f:3c:3f:77:c2:20:68: 58:ee:c5:37:6e:70:9e:b9:1a:22:3c:d0:70:1b:2b:54:8a:09: 06:7f:0a:2e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEmud6nhqclyv6l4qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyOTAwNDUzNVoXDTI3MDgwMjAwNDUzNVowLzEtMCsGA1UEAxMk NWM3NzRjNmMtNmU4NC00ZWZkLWE0NTgtNjY1ODJkNDNkMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRFATyasjNM6xBqoK35dr5oqsvc4UcpJfJdQ 79o2jo7MDWHg2lxlRK8Fpni9zeb+vSZjr9BQQuZkvxpMJW9dYkjuwKjRd+UbcMpO 3ZLFwpO/tgAlG15lC8r58zqVJ3z3RuK8vxt3/kp39t97ekXwdDSfCjtT11gj9dRD 9b+Tcj5QFyVNRlgGifrOZkGZatzSqp5z7eFxhqn9Sg6yWXAOXQPcdAbwOVzxgPX5 qN+YgKMrqowGUG5KLs55UGehu9FUdfUaxHT4N3nC+1i72nh8OoTw3Il9IQQdYeKm vEAfCD2TeZauoTQg2bsvRidmF4IvISHf/6eldcxD7rLwL/reYwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOrjP9TT9v8oeZ97e+yCGdv/8WVsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 Yzc3NGM2Yy02ZTg0LTRlZmQtYTQ1OC02NjU4MmQ0M2QwZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVjNzc0YzZjLTZlODQtNGVmZC1h NDU4LTY2NTgyZDQzZDBkMC81Yzc3NGM2Yy02ZTg0LTRlZmQtYTQ1OC02NjU4MmQ0 M2QwZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICW3AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdD8KF4e5vqi1dj2M2xbvSxRtkTsm 5FcX0t7rmm6C74AKWNYU2hQS63pLDVyiHUI0ybqbEsoPFbIHbpxuotwY8vo1NHMD vA79ok0NMu0sikJ/kX+OLroRw3IXDpPM8InmpY1e1r8RuBZfo5nW1s7O8OYJ2voj QCaJi1YI0k9kXMqTyZJtLkNXVZEbVRW+T0LWluBqGVy9dVacL6YsZ0BmMQnToz6R MRJzqtAM+kqJcDdp1wwXOidci4EC/tK7a+DJY1epo1hqM0YaBsU8ObwkdMaXYjQu esiXwO220x33sxC009AvPD93wiBoWO7FN25wnrkaIjzQcBsrVIoJBn8KLg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:21 2025 by rpki-client