$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac.cer File: 9f6ef725-e177-49e9-9e77-ddfdf37581ac.cer (raw, json) Hash identifier: lmweVid1duS9sBGdoN3wlRZr3AhdS0hf1I25AARtqrY= Subject key identifier: EE:FB:C2:80:8E:01:3B:24:BD:5A:F8:71:10:3A:B2:72:70:B4:6E:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A2D7DCA4B75CBE1092C38B900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/9f6ef725-e177-49e9-9e77-ddfdf37581ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Jun 2025 12:45:35 +0000 Certificate not after: Thu 16 Sep 2027 12:45:35 +0000 Subordinate resources: AS: 395088 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:7d:ca:4b:75:cb:e1:09:2c:38:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 13 12:45:35 2025 GMT Not After : Sep 16 12:45:35 2027 GMT Subject: CN=9f6ef725-e177-49e9-9e77-ddfdf37581ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:b6:d5:2f:88:6b:69:3b:33:68:93:e2:f6: f9:ee:d5:74:38:e0:9a:eb:0c:31:7a:76:d1:5f:cb: 88:ac:37:0e:54:82:ad:7c:c0:d3:94:a2:03:2b:f2: 6e:a9:f6:a4:5e:e9:dd:bb:80:eb:a0:d4:8e:8f:10: 92:a1:93:08:7f:be:b7:83:bd:a9:d0:51:df:6b:05: 24:a6:75:10:19:7e:b6:53:9a:11:15:62:76:37:37: 26:b9:99:26:97:46:a4:52:30:87:4e:53:c4:53:a3: 9b:c8:70:1d:1b:80:50:9e:df:90:85:00:f9:cd:46: e8:c4:1a:73:09:a7:ac:cb:1b:ef:47:4d:f1:13:6a: 5a:14:3d:59:ff:60:06:a4:c1:a3:02:9f:73:62:e4: d0:57:89:4a:c2:9f:51:5b:00:93:3c:8f:2f:a3:75: 87:fb:20:e8:3b:c8:1d:dd:5a:20:79:63:f8:23:54: 69:42:73:c5:f8:fd:c4:2f:6b:58:c1:1e:09:50:0d: 32:b6:6e:a4:db:e4:e0:57:2d:c8:fd:53:83:49:ca: ca:56:01:b7:a5:55:c8:98:90:21:07:ec:2c:c5:ab: 3f:c6:dd:e8:fb:5b:58:e1:cb:59:f7:ec:a0:40:1a: b0:af:02:c1:0d:20:aa:46:14:c2:9c:2c:de:00:34: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:C2:80:8E:01:3B:24:BD:5A:F8:71:10:3A:B2:72:70:B4:6E:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/9f6ef725-e177-49e9-9e77-ddfdf37581ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:99:12:15:a3:7d:28:a0:e9:8b:4e:ca:c0:3e:f7:95:20:6d: 1b:2d:48:a0:27:46:a8:b1:c9:41:75:28:13:88:c6:62:09:91: cf:8b:8f:df:b2:db:d9:ac:78:20:26:d3:27:3d:f0:7b:76:95: 8e:ac:eb:71:57:04:e8:3f:11:34:6e:c3:c5:44:ab:58:72:b2: 36:2a:76:fa:42:71:a5:82:66:83:8d:fa:a7:ae:7d:9c:d6:3e: a0:49:fd:fa:56:77:92:6b:cf:63:01:b2:4f:c7:22:40:f3:4b: 1e:b3:c7:8b:c3:b1:c8:fb:d5:1f:76:ed:74:c6:76:63:08:3d: f7:d9:d2:9b:6b:a8:b8:d9:fb:2e:2c:9c:b7:b0:ee:d3:64:d7: 07:1d:58:ea:3a:5c:59:a2:df:6e:69:9b:0a:fe:c3:50:23:51: cc:e4:14:cb:d0:d8:6a:34:26:23:38:dd:79:a5:86:96:24:98: 4f:7e:f1:3c:98:ed:ab:cc:c9:9e:33:15:66:61:6c:63:47:f7: cd:66:ae:2d:cf:e6:bc:50:b4:88:3d:97:1c:62:bf:55:58:55: 77:05:3f:5b:2b:82:5c:d8:cb:4a:ba:71:8a:dc:1d:96:da:86: c4:e5:02:19:bb:d8:23:6f:a7:32:be:3e:59:10:30:dc:09:d0: 72:e6:24:4f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEotfcpLdcvhCSw4uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMzEyNDUzNVoXDTI3MDkxNjEyNDUzNVowLzEtMCsGA1UEAxMk OWY2ZWY3MjUtZTE3Ny00OWU5LTllNzctZGRmZGYzNzU4MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/m21S+Ia2k7M2iT4vb57tV0OOCa6wwxenbR X8uIrDcOVIKtfMDTlKIDK/JuqfakXundu4DroNSOjxCSoZMIf763g72p0FHfawUk pnUQGX62U5oRFWJ2NzcmuZkml0akUjCHTlPEU6ObyHAdG4BQnt+QhQD5zUboxBpz CaesyxvvR03xE2paFD1Z/2AGpMGjAp9zYuTQV4lKwp9RWwCTPI8vo3WH+yDoO8gd 3VogeWP4I1RpQnPF+P3EL2tYwR4JUA0ytm6k2+TgVy3I/VODScrKVgG3pVXImJAh B+wsxas/xt3o+1tY4ctZ9+ygQBqwrwLBDSCqRhTCnCzeADQdAQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFO77woCOATskvVr4cRA6snJwtG4XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 ZjZlZjcyNS1lMTc3LTQ5ZTktOWU3Ny1kZGZkZjM3NTgxYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzlmNmVmNzI1LWUxNzctNDllOS05 ZTc3LWRkZmRmMzc1ODFhYy85ZjZlZjcyNS1lMTc3LTQ5ZTktOWU3Ny1kZGZkZjM3 NTgxYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgdQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABuZEhWjfSig6YtOysA+95UgbRst SKAnRqixyUF1KBOIxmIJkc+Lj9+y29mseCAm0yc98Ht2lY6s63FXBOg/ETRuw8VE q1hysjYqdvpCcaWCZoON+qeufZzWPqBJ/fpWd5Jrz2MBsk/HIkDzSx6zx4vDscj7 1R927XTGdmMIPffZ0ptrqLjZ+y4snLew7tNk1wcdWOo6XFmi325pmwr+w1AjUczk FMvQ2Go0JiM43XmlhpYkmE9+8TyY7avMyZ4zFWZhbGNH981mri3P5rxQtIg9lxxi v1VYVXcFP1srglzYy0q6cYrcHZbahsTlAhm72CNvpzK+PlkQMNwJ0HLmJE8= -----END CERTIFICATE-----Generated at Sun Jun 15 05:56:08 2025 by rpki-client