$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer File: a316d791-42be-46db-a9be-4bfacf99332c.cer (raw, json) Hash identifier: qMMQXJyLTA51pRh6Rq0kjmMjys1+/lDMZHzrh5WcQJM= Subject key identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A88390760421B4B82802FB500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 00:45:36 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 400960 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:39:07:60:42:1b:4b:82:80:2f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 16 00:45:36 2025 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=a316d791-42be-46db-a9be-4bfacf99332c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:fe:77:de:22:2e:36:75:a9:4f:98:46:94: 82:5d:3f:fd:2c:92:ff:f2:6a:e2:1e:be:e3:c8:3d: 4f:2f:d1:5f:e5:2e:81:18:15:f0:b1:ed:bb:ac:04: 8b:1e:8f:9b:23:30:2d:30:4c:04:65:9c:60:c1:77: 8a:9a:05:85:8e:03:ed:43:2a:c0:84:7c:f8:98:cf: e2:89:6f:26:d9:62:54:5c:49:0c:20:f3:68:00:10: 15:3f:5e:c0:eb:a7:87:d3:d5:c8:79:eb:ba:52:bc: d7:ac:b5:fd:87:b2:a2:b4:66:34:85:51:f4:d5:2c: f3:18:5b:9f:ad:de:65:c5:39:9e:a5:cc:b0:51:f4: d0:18:54:b1:03:7a:db:2d:f6:1b:1d:e7:62:c1:2f: 49:b5:2a:8b:0f:c2:01:67:86:6a:11:d4:b0:99:1d: 6a:e9:bf:e3:74:e5:ab:fd:ab:3e:8c:64:e4:9c:50: 80:5a:c8:ef:2a:a1:6a:58:ec:cf:86:1f:95:47:88: 05:56:ff:8f:0e:8b:17:97:c5:dd:03:78:4c:bc:72: a0:7a:0a:c5:bc:91:ea:be:a7:18:f6:36:a8:57:b8: f8:44:80:de:6a:28:b5:27:e0:04:4d:ed:08:79:3d: b8:e3:27:26:01:08:74:90:af:1c:9a:08:5a:3e:6a: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 400960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:25:89:e1:89:13:db:a8:d1:ee:42:57:d5:89:7a:2a:bd:7c: 0a:c4:4b:b0:01:84:af:38:10:41:7b:f3:65:7f:1a:20:1c:a9: 46:fc:ca:9a:29:e7:4a:55:38:1f:3f:70:95:75:71:89:95:5a: 08:29:a3:68:39:0b:75:5c:25:dd:f4:e0:85:bf:65:18:d8:89: 19:e9:c9:d8:84:78:59:26:c2:fa:b3:ea:53:da:21:c4:8f:f6: 77:bd:5c:b7:08:fd:d3:47:6a:e9:77:e5:71:52:46:f6:98:25: c5:50:ab:d6:39:79:7a:56:3d:8b:c6:78:b0:5c:e6:67:23:6b: 95:16:31:0f:5a:9c:1e:d8:90:7e:3c:31:14:f0:c7:ee:30:c0: ac:fc:0c:c4:c8:fe:22:97:cd:0e:05:55:31:c5:93:f0:06:05: 32:7d:b1:e5:02:1c:14:9d:ad:6a:97:40:60:68:23:af:a0:cd: a5:82:8b:75:f9:76:a8:44:f4:85:2e:c2:eb:f8:78:eb:05:1b: 1e:b1:f5:ff:27:1a:21:9d:ca:0e:eb:07:ba:69:d4:a1:41:df: fe:d8:f5:43:31:d4:bd:a2:89:1a:8f:c0:09:1e:af:fc:36:b9: ff:d4:ed:6b:db:ca:fe:b6:bc:da:43:70:e1:a4:7d:5b:6f:2b: 48:2a:05:13 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEqIOQdgQhtLgoAvtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNjAwNDUzNloXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk YTMxNmQ3OTEtNDJiZS00NmRiLWE5YmUtNGJmYWNmOTkzMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliL+d94iLjZ1qU+YRpSCXT/9LJL/8mriHr7j yD1PL9Ff5S6BGBXwse27rASLHo+bIzAtMEwEZZxgwXeKmgWFjgPtQyrAhHz4mM/i iW8m2WJUXEkMIPNoABAVP17A66eH09XIeeu6UrzXrLX9h7KitGY0hVH01SzzGFuf rd5lxTmepcywUfTQGFSxA3rbLfYbHediwS9JtSqLD8IBZ4ZqEdSwmR1q6b/jdOWr /as+jGTknFCAWsjvKqFqWOzPhh+VR4gFVv+PDosXl8XdA3hMvHKgegrFvJHqvqcY 9jaoV7j4RIDeaii1J+AETe0IeT244ycmAQh0kK8cmghaPmqbmQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFE7OooHclaEdOG0gfslhdZXKlPKYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h MzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5OTMzMmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2EzMTZkNzkxLTQyYmUtNDZkYi1h OWJlLTRiZmFjZjk5MzMyYy9hMzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5 OTMzMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIslieGJE9uo0e5CV9WJeiq9fArE S7ABhK84EEF782V/GiAcqUb8ypop50pVOB8/cJV1cYmVWggpo2g5C3VcJd304IW/ ZRjYiRnpydiEeFkmwvqz6lPaIcSP9ne9XLcI/dNHaul35XFSRvaYJcVQq9Y5eXpW PYvGeLBc5mcja5UWMQ9anB7YkH48MRTwx+4wwKz8DMTI/iKXzQ4FVTHFk/AGBTJ9 seUCHBSdrWqXQGBoI6+gzaWCi3X5dqhE9IUuwuv4eOsFGx6x9f8nGiGdyg7rB7pp 1KFB3/7Y9UMx1L2iiRqPwAker/w2uf/U7Wvbyv62vNpDcOGkfVtvK0gqBRM= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:36 2025 by rpki-client